Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/6b8167ae-4d0e-365f-8b41-54201852e793.roa
File:                     6b8167ae-4d0e-365f-8b41-54201852e793.roa (raw, json)
Hash identifier:          gtwbElrjIZ3uOKxuGff+xhRTbp69/T9TfYMjeKMgWIE=
Subject key identifier:   C5:51:0C:60:A3:FE:C4:40:67:B6:27:62:C8:93:73:0D:81:28:EF:34
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F43285849D6FA4C8CD211F9B38762A700
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/6b8167ae-4d0e-365f-8b41-54201852e793.roa
Signing time:             Tue 13 May 2025 13:01:02 +0000
ROA not before:           Tue 13 May 2025 13:01:02 +0000
ROA not after:            Mon 11 Aug 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        170.225.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:fa:4c:8c:d2:11:f9:b3:87:62:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: May 13 13:01:02 2025 GMT
            Not After : Aug 11 13:01:02 2025 GMT
        Subject: CN=1a477eb6-8d27-4daf-9259-a6c1cc4db9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5b:a7:a7:52:ba:d9:2c:f4:46:44:02:8c:bf:
                    b7:f2:0a:5d:60:07:bd:61:fc:44:f2:7b:4d:4a:b1:
                    a5:3c:cf:f3:0d:f7:54:80:bb:87:ca:f9:b2:08:10:
                    75:d8:cc:0c:c5:13:19:95:d3:48:d5:4d:d7:fc:21:
                    80:e8:e9:4b:2d:72:9d:b4:67:af:d4:b0:ee:b3:ff:
                    18:22:d5:3f:e3:f5:8e:42:fa:c8:05:89:c2:bf:32:
                    95:a3:59:95:8d:6d:6c:d2:b7:d2:ed:6f:5f:8f:b3:
                    e5:68:40:85:08:77:93:ba:25:4a:c8:1a:27:d2:13:
                    6b:59:ce:fd:f0:72:5d:a9:6c:6e:15:f0:07:d8:02:
                    c8:54:17:45:3e:3f:53:40:06:07:ca:bd:94:62:c6:
                    a9:dd:8a:57:6a:29:66:bc:4a:da:46:20:24:41:ba:
                    35:ec:4b:c5:af:ab:0f:0c:63:f1:91:bf:a8:a8:18:
                    68:13:3f:48:6e:63:c2:e4:37:d1:af:01:48:f2:1f:
                    3a:f2:d1:4f:5c:78:7b:a5:99:38:bc:6a:e6:93:4f:
                    68:22:c0:39:3c:23:42:77:b2:53:0e:ed:4f:23:59:
                    38:34:4a:5d:fc:11:d7:76:1e:2b:4d:ef:aa:15:3b:
                    d6:b2:29:f6:75:28:9a:b7:82:8a:16:aa:ce:0b:9b:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:51:0C:60:A3:FE:C4:40:67:B6:27:62:C8:93:73:0D:81:28:EF:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/6b8167ae-4d0e-365f-8b41-54201852e793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.225.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:8f:49:94:d6:ea:68:3c:ae:13:64:76:d9:fc:fa:53:89:bd:
         10:7b:bd:ac:98:73:80:ce:cc:9f:df:70:e3:12:9a:3f:7d:07:
         b6:d6:7d:c9:36:34:ad:82:b9:1b:31:24:30:88:75:37:ca:34:
         99:83:b5:a7:a9:89:f5:4f:96:16:0e:17:8e:96:4c:5b:5f:04:
         b4:c4:15:fb:93:f8:42:e6:72:09:bc:0f:5f:4a:ce:db:a3:ef:
         53:da:39:8a:6d:41:8e:70:56:4f:d4:8b:11:05:4f:c1:4e:41:
         69:64:ad:0e:d0:77:5c:0e:79:38:a7:22:32:50:9e:ca:db:a7:
         45:8b:cc:69:4b:e4:aa:27:a2:66:f4:7d:d5:2a:e5:85:c4:19:
         67:9e:91:2e:e2:0e:90:da:9d:90:b9:3f:e9:4f:93:95:64:83:
         a9:27:da:36:23:3c:7b:bf:07:89:25:7f:a0:a1:96:98:af:4f:
         80:47:23:cf:01:2a:63:8b:cc:25:8c:c4:08:f1:16:b0:dd:8c:
         af:2f:c3:a1:c0:c9:df:fe:e3:6d:f9:2a:96:27:7c:e9:2c:b9:
         ae:ca:54:9e:c0:cf:2f:67:ee:e3:e0:12:ef:34:52:63:d0:f1:
         ce:bc:68:ee:25:de:af:e6:ae:e1:e1:65:1c:4c:ba:2a:67:ed:
         9f:7d:3e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:50:48 2025 by rpki-client