Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/13c44343-66dc-3339-b6e1-56b2ab520e15.roa
File:                     13c44343-66dc-3339-b6e1-56b2ab520e15.roa (raw, json)
Hash identifier:          +n9cg9coO866Kbz0LrHshyPICp/pUvwCC2wP05uEHhc=
Subject key identifier:   68:27:9B:D0:FC:7A:D1:8C:73:EE:1F:DA:BD:A9:BF:47:F0:BE:53:A7
Certificate issuer:       /CN=6c51bc31-98e8-463b-9f8c-17aa8735990c
Certificate serial:       010D0C9F4328584A331AEA9B39998471C3270B00
Authority key identifier: 3D:13:54:89:45:2F:F1:8E:1C:B6:BB:41:F6:9B:BE:04:8C:CE:78:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/13c44343-66dc-3339-b6e1-56b2ab520e15.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     396982
IP address blocks:        199.201.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/6c51bc31-98e8-463b-9f8c-17aa8735990c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/6c51bc31-98e8-463b-9f8c-17aa8735990c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:ea:9b:39:99:84:71:c3:27:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c51bc31-98e8-463b-9f8c-17aa8735990c
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=9c9d3229-5093-4281-a2b9-22faaec13723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:87:c0:17:f3:0a:04:47:84:23:2e:55:3a:
                    3b:db:1c:1d:15:83:b0:ac:f4:dd:ce:a9:60:f0:42:
                    9c:d1:45:d7:52:33:6c:9a:12:72:69:c6:16:6d:11:
                    d9:b3:98:02:03:14:d2:e3:9b:de:bd:f3:3b:9c:1f:
                    28:80:18:54:4a:c3:a5:5e:81:f4:28:e4:76:0b:40:
                    c5:95:30:eb:67:02:5d:58:59:ac:5c:d3:cf:82:9a:
                    16:a5:54:38:56:58:b1:a3:36:56:47:77:e1:a5:43:
                    c1:27:a6:dd:f0:d9:ab:c2:26:ff:71:b4:bb:cc:58:
                    0d:52:6a:83:22:7f:b0:f9:a6:d8:52:48:bb:7d:03:
                    92:f9:b4:0f:1f:b6:4f:d3:00:30:41:a7:80:5b:55:
                    13:fa:be:58:cd:e3:0d:62:11:d1:89:35:fd:c8:e0:
                    f6:74:f2:41:2e:9d:2c:cd:5f:ec:59:9f:21:67:c3:
                    65:6d:36:29:fc:5d:5c:48:dc:48:82:b0:b3:1f:42:
                    cc:f6:36:da:1d:c3:42:60:7f:b2:e0:cd:37:12:4d:
                    c0:db:4e:65:2b:2c:26:e1:a6:c5:77:b6:c6:0f:17:
                    89:fd:f2:c7:15:1a:55:42:c7:1e:5b:09:95:7a:aa:
                    68:73:03:fc:28:85:19:f2:7a:75:32:81:2c:47:c9:
                    df:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:27:9B:D0:FC:7A:D1:8C:73:EE:1F:DA:BD:A9:BF:47:F0:BE:53:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/13c44343-66dc-3339-b6e1-56b2ab520e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c/6c51bc31-98e8-463b-9f8c-17aa8735990c.crl

            X509v3 Authority Key Identifier:
                keyid:3D:13:54:89:45:2F:F1:8E:1C:B6:BB:41:F6:9B:BE:04:8C:CE:78:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c51bc31-98e8-463b-9f8c-17aa8735990c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:2c:cd:fc:28:be:a7:6f:11:aa:33:07:6d:fa:e6:d0:35:3c:
         ea:3c:5a:fe:9e:04:48:04:b3:cf:9f:e2:c4:13:5c:eb:f2:e5:
         f0:6c:96:b5:51:d9:4a:45:74:54:32:c0:07:65:80:cb:9d:7f:
         a0:b2:8c:bc:64:b8:e1:50:b2:00:9e:57:9b:b4:3d:b0:49:99:
         a7:55:1c:32:71:2c:40:72:88:68:51:b3:7c:94:93:cb:c2:24:
         5b:8c:c8:60:c1:f3:ca:e7:c5:5c:64:fb:2b:f3:46:eb:e5:0c:
         62:6e:47:26:9f:33:02:b5:c6:b7:d9:14:f3:a4:38:7d:e5:39:
         15:63:ba:f6:bf:a9:90:04:3b:08:25:2f:c3:25:f8:15:7e:74:
         78:bc:7f:0f:c3:b4:a0:a6:3a:c5:83:d5:5e:99:ca:f7:ca:fc:
         8d:73:d1:18:24:25:78:66:0f:f4:6a:ad:59:58:10:5a:29:de:
         c7:1c:72:93:48:f2:a9:29:65:cc:d1:13:16:70:6e:7a:1b:dd:
         bb:dd:e8:dd:52:72:0e:c8:4f:66:d0:96:0c:05:2f:e9:00:dc:
         db:9e:5b:84:d0:27:01:57:2e:07:96:62:37:dd:63:70:c5:9c:
         42:d3:36:57:b4:59:a3:05:d5:e4:41:7b:73:22:a6:12:e2:40:
         6e:37:79:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:29:04 2025 by rpki-client