Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa
File:                     55c10b42-1e3f-391a-803f-94a6efd0d529.roa (raw, json)
Hash identifier:          V9U1IDhtLdg4SGqyGvE9Gpjpon6jck7hh6sWpge3yYk=
Subject key identifier:   6D:CC:AE:AC:31:4E:EB:FC:D3:47:0E:A9:F1:69:D3:81:4E:6F:49:D2
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584A34801B4E0FD97F25129B0640
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     21949
IP address blocks:        173.243.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:1b:4e:0f:d9:7f:25:12:9b:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=099ff4f5-99fe-4c7f-8ea6-b15e53f5a967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:45:a4:35:57:b0:c7:06:f4:96:a1:05:9a:ba:
                    a7:9a:1c:71:b2:e1:43:e7:b7:f3:52:40:64:f8:39:
                    e2:a3:9c:94:67:38:38:ea:4b:11:fb:0b:48:4a:2e:
                    10:a4:fd:7a:62:58:09:4e:52:5e:56:7c:9f:45:82:
                    b7:4a:d4:6a:24:b4:d3:c4:99:45:c7:0d:52:1b:4b:
                    b8:44:2b:f8:5d:0a:ad:7e:e9:7b:85:bf:1f:44:e8:
                    84:9a:2e:48:e1:65:95:03:a9:4e:a0:a7:c7:bd:03:
                    b3:c8:31:fd:30:e0:e6:37:3a:65:f0:66:3f:89:e5:
                    41:8d:85:b1:ef:8c:f1:ff:2d:8f:22:64:e0:65:de:
                    76:ed:df:98:46:05:0f:ec:55:d1:e4:36:2b:d2:4a:
                    6c:05:a6:eb:e6:43:56:8a:e1:f5:96:8a:58:df:1a:
                    51:ea:8c:60:97:73:0a:6c:af:13:72:01:56:73:1f:
                    7c:df:65:9d:85:fb:02:ab:cd:b7:04:f3:cf:f8:18:
                    a9:e8:44:eb:3d:60:9e:ae:5e:07:4c:32:5f:09:00:
                    10:82:b1:77:e2:57:42:92:20:e4:47:42:76:ec:28:
                    26:ed:1b:39:bf:53:d0:39:59:80:8c:78:51:9e:09:
                    f8:8a:4c:bd:ae:fa:79:e3:76:1c:13:34:27:a6:a4:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CC:AE:AC:31:4E:EB:FC:D3:47:0E:A9:F1:69:D3:81:4E:6F:49:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.243.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:77:c6:73:94:83:23:66:f5:34:57:fd:11:6e:f9:da:43:c3:
         50:36:9e:5c:60:5f:e2:33:9e:22:da:8f:dd:e3:81:8a:49:7e:
         de:9e:86:f6:29:dd:0e:6b:a5:e1:01:64:88:36:f6:a4:22:9f:
         d6:9d:e1:19:53:63:b4:04:ae:3c:6c:a1:fc:25:32:da:cc:b9:
         4d:66:a8:97:7a:ba:07:d5:c5:f9:6f:b5:a7:45:a4:a6:bf:f6:
         8b:43:85:97:21:47:54:e5:90:da:94:fc:b4:44:6f:da:d3:f9:
         59:fc:34:3a:d1:50:66:5c:59:d5:1d:7d:08:0d:58:5c:a4:07:
         fd:d6:08:85:8e:e6:1d:ed:9b:e9:5c:ef:7f:cf:21:b0:b9:95:
         b1:01:f9:a9:2d:10:4d:d1:61:c2:19:02:8a:ff:88:7b:e2:6f:
         0d:b0:d2:55:e6:6d:f1:0f:0d:09:fc:82:c9:5d:b1:35:08:16:
         58:c0:2b:bd:90:92:8d:99:b6:33:e3:4f:ac:3b:9c:2f:89:3b:
         14:98:22:63:3a:dd:94:ca:0e:6f:ef:8c:c8:33:e1:a8:06:72:
         42:02:51:85:c3:cd:48:c2:37:d6:89:e0:e1:cd:7c:4c:bb:50:
         29:a8:47:90:71:32:02:cd:99:6a:27:b8:eb:b4:14:5c:f7:ba:
         56:ea:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:00:30 2025 by rpki-client