Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/7de7fc63-8c26-337c-aa22-39f433f6354f.roa
File:                     7de7fc63-8c26-337c-aa22-39f433f6354f.roa (raw, json)
Hash identifier:          0amtpRMXb1dX3iZQgYPpzChy3BCQt7bSxmcYQWcbzrY=
Subject key identifier:   5A:ED:02:61:26:9F:78:0E:45:9A:15:60:47:18:89:79:AC:77:A0:C7
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584A295564A5A0B06BBDA14F7E20
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/7de7fc63-8c26-337c-aa22-39f433f6354f.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     1239
IP address blocks:        172.84.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:64:a5:a0:b0:6b:bd:a1:4f:7e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=7d49b5b1-a367-4354-9684-d866f0596914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0c:10:45:59:73:b5:d3:0d:ec:1c:ed:0d:23:
                    7b:fd:0f:3c:43:32:17:b3:f6:b4:fa:01:8c:eb:5c:
                    a0:47:68:d6:8c:ed:d7:93:5c:35:37:38:5a:c6:fc:
                    f2:98:4d:27:3b:5e:4b:6d:81:4d:ac:bc:fe:87:ac:
                    bd:ab:52:4a:d6:9c:24:8e:4a:9e:d5:0d:b2:87:b1:
                    d7:73:02:a4:c3:46:65:e7:6f:40:e6:00:34:f3:f3:
                    8d:c5:cd:b0:fb:9e:84:0f:70:a6:cf:b4:6f:ec:3f:
                    15:d4:19:c1:25:83:6e:f2:a4:75:63:c2:fe:bd:08:
                    aa:99:9c:c3:39:49:bc:3c:5a:db:40:dc:1f:c6:b1:
                    35:c4:e6:05:81:98:f6:3f:df:14:30:a9:6a:34:d7:
                    d8:35:f9:c0:ab:c4:9e:33:fa:dd:c6:f8:a4:90:e4:
                    a6:49:5b:5d:2d:99:ad:8e:1f:9b:f9:b1:74:a4:f5:
                    0c:c8:00:48:d0:f6:04:36:ed:37:1c:79:4f:43:53:
                    c3:8a:ec:64:ef:11:d1:01:3b:48:c2:eb:37:c2:57:
                    1c:dc:cc:ef:eb:0f:f6:00:13:b3:54:22:6f:90:a9:
                    a3:1c:73:2d:7a:5d:5c:4f:fc:39:ff:18:84:0f:78:
                    e8:3c:5b:d3:c5:78:51:43:b1:ba:84:c4:d1:48:3d:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:ED:02:61:26:9F:78:0E:45:9A:15:60:47:18:89:79:AC:77:A0:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/7de7fc63-8c26-337c-aa22-39f433f6354f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e5:99:51:fb:30:76:c0:bd:fb:c5:82:cf:17:f9:bc:12:4f:
         39:d3:22:90:2f:3d:e0:57:03:97:17:a0:a4:17:2d:b8:b4:65:
         42:78:9e:29:28:9a:9b:1a:c6:f8:9b:d0:bb:15:4c:fc:0e:8d:
         26:67:ff:e4:47:1f:fc:d9:64:34:24:b4:e1:96:6b:72:65:c7:
         a8:a0:d2:fd:40:01:3b:91:d3:54:3c:95:fe:d8:96:a2:93:52:
         1f:81:69:c9:d1:88:e9:0e:7f:f9:19:76:75:d2:8d:e3:3e:60:
         95:f5:77:b9:54:04:77:44:e1:95:fb:0e:e1:05:fc:bc:b5:b4:
         22:01:c6:08:bf:3f:ee:4f:80:da:d6:3d:1b:ff:1b:f4:13:c0:
         32:9f:3e:37:1b:77:e5:e3:b6:bd:37:70:f5:85:ec:59:32:ce:
         d6:73:74:77:06:6e:6b:e9:f3:ee:9c:a9:1b:43:be:be:23:1f:
         56:91:a7:60:2b:20:79:f8:81:25:7f:1c:f8:db:6d:a4:81:58:
         fd:6f:8a:6c:51:a9:0c:4f:e2:52:28:14:25:9f:27:a5:ba:86:
         51:db:a3:b7:13:6b:fc:7f:f4:fb:62:52:3b:ff:f2:b9:64:0b:
         42:e0:49:02:86:0c:a9:d0:2a:48:be:be:66:b5:f7:e7:f9:3d:
         be:d3:38:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:07:00 2025 by rpki-client