Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ac545d8c-567f-3bd2-9de4-897132765b2a.roa
File:                     ac545d8c-567f-3bd2-9de4-897132765b2a.roa (raw, json)
Hash identifier:          2NlBWZEEXC7xb4qFX7Dpu587LqkyutR2LWbMFFYsdXY=
Subject key identifier:   4A:46:3D:FA:3D:15:CF:66:DF:B4:D6:67:68:E7:C5:63:F7:4D:4F:D2
Certificate issuer:       /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Certificate serial:       010D0C9F43285849F87A92ED051A8EA62B784C70
Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ac545d8c-567f-3bd2-9de4-897132765b2a.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     22135
IP address blocks:        173.242.8.0/24 maxlen: 24
                          173.242.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:92:ed:05:1a:8e:a6:2b:78:4c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=1bc5996f-0135-42d7-974e-3d03fb8c05af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:ec:14:61:6f:63:9c:b4:2a:b7:64:45:58:
                    e0:8d:31:60:10:15:3b:55:03:1b:f7:83:ac:0b:63:
                    92:ed:da:18:23:d6:83:ae:01:27:64:f9:e2:ab:dc:
                    b5:65:4c:2b:38:f2:2c:e9:18:8a:86:d9:05:33:db:
                    9f:a2:e5:57:0a:d2:b3:fd:f2:15:ce:a4:f9:a3:ea:
                    78:82:40:6d:f8:82:b2:92:57:30:19:75:3a:cb:b0:
                    a8:bb:95:f9:cc:40:31:28:c1:27:47:20:a4:30:35:
                    6f:f8:02:b7:3c:30:d0:20:b9:3d:6a:15:51:47:ee:
                    73:02:3f:02:b6:1a:93:7e:9b:db:e4:ea:32:78:9e:
                    70:19:01:1d:97:e3:70:64:a2:1f:9d:61:ab:cf:d1:
                    d2:3e:53:be:7a:a6:83:94:52:c9:86:c5:53:18:50:
                    9d:65:98:d5:e0:e7:d6:05:c0:32:96:11:81:c2:34:
                    b9:c4:22:41:e9:ab:15:ff:f7:bc:65:66:0d:6e:e6:
                    d6:67:50:e7:ee:ee:0e:bb:23:07:fe:51:30:f5:fd:
                    44:c0:99:84:c1:42:b2:54:fd:12:84:95:d8:79:18:
                    83:e6:e2:bf:5c:c1:bb:80:98:79:5f:26:55:7b:16:
                    a1:fb:f8:59:93:81:64:5c:5e:a1:f5:52:28:36:f5:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:46:3D:FA:3D:15:CF:66:DF:B4:D6:67:68:E7:C5:63:F7:4D:4F:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ac545d8c-567f-3bd2-9de4-897132765b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl

            X509v3 Authority Key Identifier:
                keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:77:a1:2d:e1:d2:38:89:d9:a8:f5:f7:c5:09:8e:a3:8d:20:
         b6:a6:c2:ad:48:85:a1:a8:7d:0e:20:e0:4d:f7:38:17:03:8d:
         4e:8a:ea:b7:83:6a:77:71:e9:be:bd:98:89:f8:66:15:db:cb:
         83:39:b3:56:dc:3c:30:6b:43:fe:0d:05:1a:87:73:46:c9:3f:
         9a:17:cf:e7:2a:df:fe:1a:54:cd:6c:9f:9b:b1:11:12:07:87:
         f8:6a:01:85:18:58:c7:72:01:18:85:ba:82:92:8c:69:ef:b4:
         0a:39:e3:f7:93:45:ba:c9:ff:80:58:fb:a4:45:22:22:bd:ec:
         01:6b:78:39:ad:f4:61:e3:b8:46:40:86:64:0c:dd:e9:7b:a2:
         70:d3:00:5b:04:18:a2:93:b8:8e:8e:23:22:06:8f:5a:2c:b5:
         c4:63:dc:e0:7f:05:84:59:0a:4e:e1:59:04:33:a4:ff:9a:0e:
         c5:5b:06:87:a8:d0:cc:64:e2:89:c3:48:43:68:bd:72:36:5f:
         f6:3b:6b:36:91:0c:d9:a2:1b:90:e4:3f:e0:da:cc:35:5e:0e:
         06:91:84:90:75:6f:cf:da:00:17:69:1d:59:ff:10:36:d6:76:
         f5:6c:29:42:a7:0e:e8:95:af:ef:c1:a9:14:15:43:6a:a7:b9:
         30:eb:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:14:53 2025 by rpki-client