Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/35ec5f23-11ac-3ce5-bfb7-535a2a73f180.roa
File:                     35ec5f23-11ac-3ce5-bfb7-535a2a73f180.roa (raw, json)
Hash identifier:          ZNvqgkPTkIIaLeRDYWQyyMi9HVl+bbKvuNXwLwFtkL4=
Subject key identifier:   0D:A6:BF:E9:7B:FE:B6:22:C5:73:B0:D7:7D:5D:51:8F:3A:2D:08:92
Certificate issuer:       /CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
Certificate serial:       010D0C9F4328584AB220D30988640157F5D96B00
Authority key identifier: AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/35ec5f23-11ac-3ce5-bfb7-535a2a73f180.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     53316
IP address blocks:        173.213.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d3:09:88:64:01:57:f5:d9:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=e24cfda7-7167-4967-8b06-5039f8f384cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:23:22:05:e8:28:60:42:63:94:3d:56:fc:
                    ab:f4:83:26:7b:ca:e8:0b:4a:9a:5a:6f:f0:cb:19:
                    14:f6:18:78:df:86:8e:31:84:67:35:82:d1:53:a3:
                    89:4a:d9:84:1b:48:da:a7:a8:82:ea:d7:cd:e6:a1:
                    2d:dc:12:b0:af:b8:4a:c6:c6:d2:7c:21:4f:88:77:
                    28:d0:79:60:f2:ee:f8:55:61:34:1d:e5:6a:b0:38:
                    fb:fa:ad:44:54:69:76:f4:42:d7:b6:e6:bd:76:ca:
                    7e:8e:32:32:c6:cc:4b:26:8d:96:77:fb:2f:97:8c:
                    52:7d:8b:79:26:42:88:fe:c8:dc:64:5b:53:a7:2e:
                    5e:de:f3:d4:90:86:11:f4:82:50:40:f0:bb:a1:bc:
                    03:78:c1:0e:76:40:5f:2b:6f:43:c3:6b:f9:8b:83:
                    0f:64:cc:87:fd:7b:f8:11:2b:7f:91:05:43:e0:86:
                    73:0c:18:81:78:4f:99:2a:eb:07:5e:a2:cc:48:a6:
                    2f:68:1a:06:a7:24:c4:af:c6:f9:19:59:3d:94:11:
                    53:a8:5e:41:77:86:8d:b6:74:55:d2:72:fd:7c:59:
                    36:df:a5:4b:ab:36:6a:3c:17:7b:d5:16:44:8f:bb:
                    ed:72:86:43:70:fb:a0:0e:49:d5:64:4b:d1:e9:ad:
                    61:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A6:BF:E9:7B:FE:B6:22:C5:73:B0:D7:7D:5D:51:8F:3A:2D:08:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/35ec5f23-11ac-3ce5-bfb7-535a2a73f180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl

            X509v3 Authority Key Identifier:
                keyid:AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:e9:30:a0:79:96:88:dc:bb:be:a8:37:a8:ca:8a:46:90:cc:
         ce:fc:3c:db:4f:52:47:66:14:cb:e0:1e:3c:cc:5d:fd:6f:00:
         17:42:f9:54:d9:2f:d9:3e:62:32:72:0b:b8:1f:1b:36:e4:fc:
         91:70:e1:48:d2:f0:6a:06:e9:f5:28:eb:07:8f:65:65:fd:85:
         13:2d:e4:fe:fa:87:35:99:8b:ee:a1:75:71:90:89:fb:fb:8e:
         b1:69:b5:29:6f:14:3c:9b:f3:80:05:04:1f:30:62:85:c9:91:
         1d:cc:30:8d:b0:7c:9c:63:a4:67:66:26:4b:eb:d9:1d:b4:8b:
         13:63:62:c6:0a:e0:bc:56:a7:6b:a2:34:5b:28:02:f2:c0:15:
         e3:17:de:2f:ae:d7:c1:bd:bc:95:a5:c7:15:0c:11:fe:ba:3e:
         bb:86:7e:1d:db:12:27:f5:3e:f0:29:f3:f7:b5:0c:f7:c9:7c:
         7e:27:fb:18:ff:f6:2f:1f:a6:0f:c5:c9:43:bb:c2:84:90:19:
         83:5d:b5:e0:38:3a:be:95:42:42:bf:ee:27:f5:8b:5f:16:bc:
         35:87:57:0d:30:78:84:8d:ae:74:6b:02:e0:e9:a2:93:e8:1e:
         d6:a9:2e:93:38:21:48:6c:be:c7:74:04:2a:05:41:8e:87:08:
         5b:d8:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:20:00 2025 by rpki-client