Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/8da58bd3-3c1e-31c2-8681-b5644c200c95.roa
File:                     8da58bd3-3c1e-31c2-8681-b5644c200c95.roa (raw, json)
Hash identifier:          EjfxCZ4BTMiF7fIbKG62nBKEhXroWKhFgDWirC0rIC4=
Subject key identifier:   EC:72:28:B6:0D:BC:55:0C:30:99:2A:6B:5A:B0:12:18:30:B5:BB:CA
Certificate issuer:       /CN=f37ae11d-629c-4443-bc37-2c3eebd09453
Certificate serial:       010D0C9F43285849F9DFD56A129573EC47FDC700
Authority key identifier: 57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/8da58bd3-3c1e-31c2-8681-b5644c200c95.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     394708
IP address blocks:        209.143.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d5:6a:12:95:73:ec:47:fd:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f37ae11d-629c-4443-bc37-2c3eebd09453
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=14d775e3-3f0f-4137-b27c-3ca75463206d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:83:fe:f9:ba:6b:aa:37:0e:db:1b:aa:f2:e1:
                    3a:c9:d2:30:c7:55:ec:64:99:2b:9e:f4:b7:ca:65:
                    f7:59:0c:9c:b2:36:90:68:e4:c9:ed:f1:dd:0f:8f:
                    aa:a5:35:45:f7:50:e1:c1:3c:70:b8:bf:f5:e1:50:
                    31:e4:ae:be:bb:f9:2d:55:cd:9b:cc:fc:64:e0:50:
                    78:b6:26:05:ac:80:e6:b0:e3:38:f0:9d:a9:8c:1a:
                    38:20:41:5a:32:47:95:82:51:12:51:10:09:bc:1e:
                    13:57:47:1b:e7:a5:82:57:28:d7:9f:66:2e:64:75:
                    e8:30:14:a4:bf:8c:70:4c:0a:94:67:0e:7f:b2:17:
                    c2:89:13:c0:f8:d1:ea:95:a1:0e:75:57:b4:53:68:
                    4f:9c:4c:7d:56:9d:19:17:d4:b6:d0:16:d8:01:13:
                    65:43:20:5f:b0:e7:0f:ed:32:95:63:6e:2f:c6:48:
                    25:85:5d:1a:22:40:df:a1:12:5b:96:57:a6:31:da:
                    ea:e2:46:90:e8:f2:ca:c0:e7:c1:bc:9b:ef:f7:c1:
                    45:2f:41:f5:b3:89:27:cf:04:95:f6:02:b6:d6:45:
                    68:de:4b:8b:0d:a5:2f:a2:82:74:ff:f9:28:e2:d9:
                    26:e2:7a:6e:b2:f7:0d:e4:72:27:72:ab:be:67:b2:
                    fc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:72:28:B6:0D:BC:55:0C:30:99:2A:6B:5A:B0:12:18:30:B5:BB:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/8da58bd3-3c1e-31c2-8681-b5644c200c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl

            X509v3 Authority Key Identifier:
                keyid:57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.143.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:1a:be:a2:a5:b7:b4:e1:48:a4:e9:ed:b7:a1:b7:40:8f:
         89:57:1b:11:31:fb:ec:16:59:ab:27:b0:b4:ec:12:fc:92:c9:
         d8:4c:98:c8:dc:27:86:d9:36:24:79:9b:0e:8a:fa:5b:61:1c:
         5a:a8:4f:8d:25:3d:6f:52:e5:39:95:05:3d:57:c8:2c:4b:f1:
         0c:2b:74:68:36:e7:d5:cf:64:f8:31:32:d4:9f:f4:43:60:3f:
         47:9c:da:fb:b3:0d:f6:4e:5e:0a:ae:3b:a8:8c:b2:c1:5e:75:
         b1:a4:4b:7b:c6:69:2f:2e:9e:bb:d8:6e:a3:cd:27:ce:02:ae:
         55:b4:23:68:49:a6:4c:4e:3f:2f:d0:70:72:d2:88:0f:d5:10:
         5d:9f:78:1e:c4:87:9a:f9:36:39:51:09:57:f7:02:79:fa:a1:
         69:bf:0c:ee:bc:97:2c:a1:46:87:76:a9:66:6d:e5:02:0a:57:
         9b:17:64:4b:b2:d3:38:20:0d:75:3c:8a:78:b9:1f:2f:ed:3d:
         35:ed:f6:17:04:db:d8:3b:0d:f8:95:c1:ff:34:06:02:4c:5a:
         a6:0d:66:41:ad:19:fc:92:38:a1:51:82:3d:b0:b2:0e:91:b9:
         a7:e4:be:9a:da:1d:3f:5e:19:2d:70:ef:0b:09:f6:76:fb:59:
         3a:27:61:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:13:35 2025 by rpki-client