Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/1e5a3bbf-c571-34dd-b08d-599206306f95.roa
File:                     1e5a3bbf-c571-34dd-b08d-599206306f95.roa (raw, json)
Hash identifier:          ynmil+j5Cvt0hA2Kc3n7Lo4u99Lke9ZjTtilKTWJpGw=
Subject key identifier:   4A:43:5D:32:60:AF:B8:29:B8:14:02:74:8D:E6:30:1F:FD:CF:CC:76
Certificate issuer:       /CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Certificate serial:       010D0C9F4328584A89F526909FBC0D59176CDEF8
Authority key identifier: 1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/1e5a3bbf-c571-34dd-b08d-599206306f95.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     394264
IP address blocks:        172.110.41.0/24 maxlen: 24
                          172.110.43.0/24 maxlen: 24
                          172.110.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:f5:26:90:9f:bc:0d:59:17:6c:de:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=87367a1b-f554-4a89-b78c-02dca3ae1dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bd:e7:e6:d0:0f:e6:de:c9:88:9f:73:d7:b8:
                    d2:f1:91:8f:19:19:2e:79:d7:d3:d4:17:82:64:28:
                    11:79:9b:95:7f:b3:e4:39:3c:86:e6:fc:9d:30:5f:
                    14:64:22:de:1f:5c:d2:c4:c6:45:d7:4b:c9:7b:10:
                    ba:10:f8:1e:89:bd:2c:60:c0:d3:67:5e:43:bc:42:
                    b3:64:bb:45:12:fa:64:6d:06:c4:5c:c5:8b:70:5c:
                    73:0a:d0:75:13:19:4f:4b:87:0d:b4:66:83:03:b6:
                    89:94:5c:9c:fc:10:ae:84:62:8a:aa:97:6b:d9:45:
                    2a:37:e5:ef:23:9b:7b:74:8a:17:50:04:a1:d0:78:
                    46:c7:0a:96:15:b1:dc:95:4e:80:28:05:a0:eb:b3:
                    5c:e7:0e:36:e7:de:a6:41:fe:ff:b0:69:d2:c6:d0:
                    bf:3b:57:08:09:ac:8d:75:84:5e:5d:44:2a:27:f1:
                    32:8f:b4:ad:65:9e:ec:49:34:18:10:40:f6:89:10:
                    27:05:74:b9:af:91:5d:25:4d:ea:6c:0a:68:53:fd:
                    3f:65:89:99:f1:fa:aa:66:8b:35:21:94:4c:ba:0d:
                    df:ad:c2:a7:25:cd:1c:85:dd:35:05:6a:1d:33:5b:
                    23:0d:68:d5:56:d3:df:90:91:1b:5f:64:d0:7f:48:
                    3f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:43:5D:32:60:AF:B8:29:B8:14:02:74:8D:E6:30:1F:FD:CF:CC:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/1e5a3bbf-c571-34dd-b08d-599206306f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl

            X509v3 Authority Key Identifier:
                keyid:1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.41.0/24
                  172.110.43.0/24
                  172.110.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:99:69:71:75:9b:6d:46:c7:95:05:be:3a:82:35:f4:7c:88:
         a2:90:6d:c7:0d:10:26:49:92:77:45:be:6c:2b:92:f6:01:88:
         5a:9f:26:d9:01:5d:96:08:5f:6f:2c:5c:99:71:9c:43:44:57:
         94:20:09:f0:f6:92:77:b0:64:7b:a9:2b:56:01:50:37:f6:8c:
         7e:b2:31:54:55:3b:ae:45:ff:e7:65:c9:fe:78:5e:0f:34:ef:
         27:0e:2b:2d:78:98:0f:da:88:16:dc:4b:84:10:e5:d2:f7:b4:
         b2:5f:0e:52:8d:8c:30:b5:0c:12:42:36:99:53:f2:fe:56:e8:
         17:b4:de:63:00:c6:8a:41:1f:82:67:23:a8:6f:ec:d1:34:26:
         6d:89:4c:bf:e4:dd:fb:a9:9c:99:34:26:ab:e1:3c:3e:48:72:
         73:a2:0c:ca:f8:02:99:c8:9b:43:e0:4a:9f:ce:bf:25:95:d8:
         3c:fe:e9:e1:47:f1:5b:0d:b6:6e:8c:13:52:db:28:a2:cf:91:
         9b:71:df:56:3e:3c:70:3b:06:9a:57:60:05:64:f6:0c:1a:e4:
         2b:9c:a3:f3:99:f5:49:12:9f:af:77:61:08:bf:99:ee:8f:8d:
         0a:52:0b:12:0e:99:1c:78:52:76:be:27:d4:a4:36:e6:a1:75:
         2b:b7:54:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:37 2025 by rpki-client