Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/260a2078-e965-3fca-bdff-75ded175222d.roa
File:                     260a2078-e965-3fca-bdff-75ded175222d.roa (raw, json)
Hash identifier:          uWZ0mTfYmA1vq9jiWFCEkhaUAfIlGpWthS5q4s4hiMg=
Subject key identifier:   77:46:07:C2:88:30:19:D8:FC:C0:87:B1:49:B5:AB:4B:19:F8:63:FA
Certificate issuer:       /CN=1004cebd-7023-4e63-b006-53f0c227de79
Certificate serial:       010D0C9F4328584A07D52AF4935E59D4BF21D540
Authority key identifier: C6:B2:A0:E8:24:20:8F:EA:00:6E:7F:16:CE:CB:34:8B:BF:8C:CA:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/260a2078-e965-3fca-bdff-75ded175222d.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     6579
IP address blocks:        193.149.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/1004cebd-7023-4e63-b006-53f0c227de79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/1004cebd-7023-4e63-b006-53f0c227de79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:2a:f4:93:5e:59:d4:bf:21:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1004cebd-7023-4e63-b006-53f0c227de79
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=1ca28200-d8d1-41b7-8d5b-b91d036f8eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7c:77:0d:4a:77:48:c1:98:27:d5:e6:99:d7:
                    84:a7:62:de:79:28:b6:73:2e:cf:71:63:bf:ba:6a:
                    e5:2b:6f:67:22:bb:5c:4b:42:1b:73:e4:ba:c9:b6:
                    99:5e:6f:ce:c4:55:88:9b:51:82:30:13:a0:c3:bd:
                    80:85:b5:f9:3a:7c:f5:c9:a6:0b:06:37:15:00:8a:
                    c5:03:e3:04:5b:0d:1e:c6:92:c8:5e:e5:46:2d:6d:
                    e4:16:3b:e4:00:03:79:eb:b0:71:47:5f:38:9c:4a:
                    8a:f1:00:d1:56:63:b0:2f:76:f2:e1:ee:ca:a2:2b:
                    44:c5:67:99:45:aa:42:13:d9:b8:94:54:88:f1:99:
                    13:d3:4f:f7:fa:67:1d:8e:62:ec:a6:5f:74:12:31:
                    06:e5:9e:60:f2:3c:7e:b9:f1:39:33:df:c6:43:b6:
                    53:f2:96:ba:d3:28:b9:b7:d7:b1:f6:2b:10:f6:d5:
                    9c:e3:01:b0:ec:27:36:13:3b:00:9f:2d:e8:60:a5:
                    e1:93:37:0a:ae:01:84:71:75:eb:8d:21:e6:56:02:
                    2b:78:61:a9:95:1a:ab:1d:42:cf:81:89:41:54:19:
                    e0:67:8e:d2:4e:32:c3:8e:51:2d:00:a5:4d:f5:0e:
                    55:55:fe:83:64:39:66:64:1f:7e:47:35:ed:55:a8:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:46:07:C2:88:30:19:D8:FC:C0:87:B1:49:B5:AB:4B:19:F8:63:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/260a2078-e965-3fca-bdff-75ded175222d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/1004cebd-7023-4e63-b006-53f0c227de79.crl

            X509v3 Authority Key Identifier:
                keyid:C6:B2:A0:E8:24:20:8F:EA:00:6E:7F:16:CE:CB:34:8B:BF:8C:CA:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a3:05:e5:7b:07:06:b0:d5:e9:5e:69:84:a6:0f:e7:f4:88:
         e5:8d:85:4f:5e:fe:b5:8e:54:7c:9b:5b:dc:0a:43:3f:dd:32:
         88:88:81:79:f2:44:09:6f:72:e7:13:20:71:e4:73:fb:ff:ad:
         93:23:61:e8:7e:f5:da:fa:d5:6b:94:f3:ca:99:6e:b8:02:13:
         36:75:79:bb:86:c7:b9:ff:95:4f:d6:a0:c8:4b:16:e9:fe:2d:
         c1:1e:5a:8f:0e:da:02:ed:c0:6d:61:bc:5d:87:f5:f7:91:15:
         11:fe:44:79:c5:cc:a0:f7:bf:c2:1e:57:ff:50:3c:f5:a9:50:
         79:18:0c:3f:96:65:76:44:66:7e:fc:e4:d0:bd:ec:a2:0c:b3:
         3c:fd:6d:11:ae:d0:c1:28:f9:e4:9e:bd:03:ec:95:69:55:82:
         fb:18:fc:72:5b:e8:f4:af:0f:d4:bb:69:7e:8d:a3:dc:4a:b9:
         ad:cc:ea:0a:ae:a6:57:6b:3e:4e:d4:0b:6a:d7:3b:ae:73:24:
         42:fc:12:03:e8:ef:8e:d2:f0:24:b8:50:65:b4:83:07:f2:74:
         25:1a:c5:14:e8:e5:f8:db:68:9f:b3:8d:0e:c2:34:e6:48:9d:
         72:9b:61:99:30:0f:68:0f:3e:ee:5e:ef:a3:94:f1:6f:82:00:
         39:f4:f5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 18:18:43 2025 by rpki-client