Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd/5c6e09bd-ae59-3abd-8ffe-a958461a4d44.roa
File:                     5c6e09bd-ae59-3abd-8ffe-a958461a4d44.roa (raw, json)
Hash identifier:          L+Q5EzWhCPNxISL5qfMRVD4ETZ+qDk3HKNB50o7v9xI=
Subject key identifier:   8F:5B:CD:D4:D6:A9:62:71:95:F3:0A:AB:D8:F4:69:45:47:B3:86:4F
Certificate issuer:       /CN=9f369f04-c75d-4933-944f-a75f93d45cbd
Certificate serial:       010D0C9F4328584A331AEE7A2F06530B41E316C0
Authority key identifier: CF:ED:B6:39:EC:47:B6:26:31:BB:B4:2A:C9:0A:E3:61:28:DC:05:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd/5c6e09bd-ae59-3abd-8ffe-a958461a4d44.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54291
IP address blocks:        170.75.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd/9f369f04-c75d-4933-944f-a75f93d45cbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd/9f369f04-c75d-4933-944f-a75f93d45cbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:ee:7a:2f:06:53:0b:41:e3:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f369f04-c75d-4933-944f-a75f93d45cbd
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=0c10b933-01a8-46a8-8aa3-5f7f400edbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:e5:cb:04:1f:ac:0a:7c:cc:f6:94:b5:10:
                    af:f2:00:23:b0:fc:17:87:83:06:0f:da:2e:7c:ee:
                    4d:e3:d1:45:d4:03:37:85:8d:3f:f3:c8:c1:dc:3e:
                    52:a7:15:2f:c0:3a:6c:98:6e:42:3b:63:16:79:11:
                    c9:b7:38:11:f6:e5:fd:f3:83:33:94:14:c2:7f:20:
                    f9:d3:f8:75:14:b8:b6:c7:c6:bf:cc:f2:0d:67:40:
                    0d:0b:9f:01:6e:2c:60:1c:93:b1:52:9f:5c:8d:0b:
                    4d:d2:f9:95:5a:65:2f:ec:8d:21:ab:42:1f:ca:62:
                    ab:5e:2d:38:8a:71:f6:9f:9b:44:3b:b9:64:de:c5:
                    f4:9f:35:4a:f8:57:c7:00:16:2b:dd:32:12:92:08:
                    ea:58:4d:12:79:2c:cb:58:00:fb:9f:a5:8f:82:32:
                    15:65:70:ef:cf:92:bc:66:ae:74:3d:a8:3c:77:a8:
                    b6:50:a2:6f:44:f0:d4:96:bc:06:90:08:4c:c5:c1:
                    be:a1:dd:e3:38:90:92:4d:1a:e5:8b:2a:66:bb:25:
                    a1:3f:30:be:18:e3:b7:97:39:33:cf:1c:a0:19:d3:
                    9e:69:d4:ac:6f:df:91:3b:53:1a:2f:39:ae:e0:89:
                    33:32:fa:67:86:28:13:25:23:d2:2b:7d:50:f7:b1:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5B:CD:D4:D6:A9:62:71:95:F3:0A:AB:D8:F4:69:45:47:B3:86:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd/5c6e09bd-ae59-3abd-8ffe-a958461a4d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd/9f369f04-c75d-4933-944f-a75f93d45cbd.crl

            X509v3 Authority Key Identifier:
                keyid:CF:ED:B6:39:EC:47:B6:26:31:BB:B4:2A:C9:0A:E3:61:28:DC:05:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9f369f04-c75d-4933-944f-a75f93d45cbd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:7f:7a:e2:14:6c:09:e4:3f:a1:bb:73:3a:27:8d:73:be:92:
         25:24:60:08:b2:2c:5f:d9:aa:9d:45:67:98:41:92:2e:6b:c4:
         ed:ef:51:e9:7b:b2:64:6e:83:a0:df:f4:22:10:48:92:a1:71:
         7b:ce:ad:bf:db:29:59:6f:1b:a2:c0:c8:a3:42:b3:2d:86:e9:
         e2:2f:37:4d:01:d5:f5:74:17:f5:5e:02:84:90:41:21:95:e8:
         30:41:a5:d1:5b:81:a4:84:43:04:0e:0e:61:22:61:a4:13:e0:
         95:e3:03:85:f8:ed:71:7a:9c:a0:34:2c:ab:d8:0c:f4:bd:8d:
         c7:2f:50:bd:f7:96:53:c1:03:69:7c:90:67:e0:01:13:c2:ab:
         cb:c0:4c:36:5b:41:7a:d4:f8:bc:cf:16:ee:cc:a5:4c:e5:89:
         89:a1:2c:6a:91:44:8c:39:e0:e6:77:84:65:70:50:25:31:1b:
         cb:fd:f9:14:e9:62:6e:13:e9:00:7d:3c:ab:a1:e6:b8:28:45:
         76:5b:80:50:cf:6e:7a:30:35:22:e1:24:a1:82:38:0d:4d:9e:
         4e:1c:8e:fe:3b:d8:8d:ed:8f:a3:72:eb:fc:b5:b2:a9:18:1e:
         24:b1:40:ae:c3:78:b9:52:b4:9a:50:54:d8:78:ad:7b:95:ab:
         3a:18:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:29:56 2025 by rpki-client