Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8aa5a161-e516-321d-ba0f-cdd95cd34fba.roa
File:                     8aa5a161-e516-321d-ba0f-cdd95cd34fba.roa (raw, json)
Hash identifier:          KPwIo1WdVuQxij8vizFgFvrl3YEgYfQYHQduXq0CEP8=
Subject key identifier:   67:8F:4E:65:4E:06:F3:E6:61:55:8B:67:B0:72:49:0A:9D:BC:B5:33
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849E7BA7E4967E085700F5193D0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8aa5a161-e516-321d-ba0f-cdd95cd34fba.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     1412
IP address blocks:        165.254.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:7e:49:67:e0:85:70:0f:51:93:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=da26d18c-6421-430a-ad2d-ad1f0def04de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:df:4e:77:7b:14:83:e0:47:25:ce:a1:59:
                    5b:8b:f4:0a:c6:07:1e:61:c8:78:6b:1b:e9:f2:46:
                    f6:81:0a:6c:17:b8:02:c3:86:e4:d6:0a:fd:2c:9a:
                    a1:91:12:1a:7b:84:70:2d:04:eb:8d:70:54:85:38:
                    c1:65:42:eb:3e:d9:f4:f9:73:db:d2:06:6d:5c:cf:
                    8f:c2:a5:67:34:24:9d:12:00:82:c0:95:f5:f4:5a:
                    4d:b8:f4:db:be:d9:ef:1c:42:d8:ff:de:40:25:11:
                    84:52:9a:0a:72:b8:c5:90:19:83:dc:99:14:e4:1f:
                    9f:d8:92:c7:24:12:30:ab:17:de:e5:44:e4:d3:72:
                    5d:5d:c6:75:8b:09:e6:f7:02:4b:62:e7:69:76:e4:
                    e0:0b:a7:d6:55:da:95:1a:b6:a7:47:ea:90:f8:a8:
                    75:ec:3b:f2:c9:fa:24:c5:02:89:e3:48:44:a3:14:
                    35:ce:f3:c6:a2:5e:b4:4a:95:6d:d6:b3:ce:71:b4:
                    3c:c1:04:7c:a0:bd:1e:c5:4d:03:47:5d:2f:98:c2:
                    38:9e:ab:1e:4d:6e:d0:ef:b0:39:f5:8d:22:1e:a4:
                    54:b8:c0:88:d6:ea:61:0d:59:14:ed:4e:52:1f:88:
                    d7:17:a7:ce:f2:8e:69:c4:3d:b4:44:1a:72:6a:13:
                    5d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8F:4E:65:4E:06:F3:E6:61:55:8B:67:B0:72:49:0A:9D:BC:B5:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8aa5a161-e516-321d-ba0f-cdd95cd34fba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:ca:01:a8:0a:2a:3a:e2:94:82:93:94:6b:45:bb:05:93:f9:
         dd:d9:89:1c:8c:17:29:8e:6b:bd:77:4d:9e:78:c4:64:f5:83:
         13:cd:ea:31:2d:fc:dd:2c:62:86:6f:28:c7:50:d4:4f:59:d6:
         3c:8b:21:6f:e5:09:11:51:e7:57:e6:3a:e1:a1:02:7b:d9:f6:
         95:68:7c:67:73:85:15:56:14:c2:4b:91:ff:ce:86:aa:44:58:
         9b:92:05:e4:e3:8e:50:23:72:f6:a1:cb:66:29:97:d6:ef:8a:
         24:84:07:78:0f:14:e2:be:39:4f:0b:94:bc:31:3a:c4:fa:04:
         50:a9:19:41:01:1d:da:c3:36:43:02:a7:7c:d3:e4:02:9e:57:
         63:05:9d:b5:16:d8:45:9a:99:5e:53:42:dd:41:52:c3:f9:8d:
         49:87:db:c0:34:9f:94:c6:79:6f:38:97:96:ed:f2:0f:74:ba:
         f0:73:b5:69:00:b9:3a:51:ea:77:60:82:8d:82:df:3d:c5:05:
         b3:b6:3e:f3:58:93:61:f7:82:e1:57:d2:da:2a:a3:3a:13:13:
         c4:68:e7:7c:17:7e:9b:84:61:10:49:71:c8:17:ae:1f:c7:62:
         3c:71:55:28:60:ac:55:43:93:d2:60:c1:a3:88:f5:d1:32:78:
         20:00:83:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:59 2025 by rpki-client