Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/11b35ce1-5e53-38df-9ea1-38d466407bfb.roa
File:                     11b35ce1-5e53-38df-9ea1-38d466407bfb.roa (raw, json)
Hash identifier:          K6VDBojzSlfPwA/WuWa2K5+4vade/EmVQWKG3M79m1I=
Subject key identifier:   63:A3:E8:86:2C:9E:37:80:7E:0F:E0:48:F6:DD:DB:9C:B1:8F:12:2B
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584AC2E1092FEBB4232677CDBC00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/11b35ce1-5e53-38df-9ea1-38d466407bfb.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     45671
IP address blocks:        172.111.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:09:2f:eb:b4:23:26:77:cd:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=473bcd56-1553-417c-b59c-44d31a0c2c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:42:f4:ad:a9:fa:a6:3e:33:3e:18:d1:51:47:
                    03:58:02:e9:38:65:69:f7:8c:3e:47:9f:f1:20:42:
                    5c:10:a6:d4:11:8b:1a:a2:40:58:39:be:1a:2d:07:
                    d9:33:2b:c3:f9:b6:ef:be:a9:f4:da:e5:9c:63:b9:
                    75:e8:f5:3e:02:10:0b:ef:ba:22:54:85:40:41:84:
                    e2:4d:e2:72:4b:dd:0e:00:95:bb:e6:b5:61:1d:66:
                    9b:83:66:ce:a0:df:83:ba:a9:53:95:a7:b7:53:89:
                    b6:11:f5:3b:e3:f7:c6:f9:f0:3c:f3:39:e4:05:e4:
                    a1:22:1e:2d:19:1f:d8:71:3c:40:5d:ff:36:af:e7:
                    01:51:69:97:d7:57:a9:5b:34:3d:0d:a9:50:15:35:
                    b8:c5:ca:ec:78:50:61:d5:dc:7a:dc:e9:98:49:de:
                    72:cb:77:de:c4:3d:11:a1:02:c7:a0:91:d6:d4:20:
                    d5:ab:bb:fb:45:7b:be:6b:2c:25:7d:7a:ae:77:de:
                    3e:18:06:e7:ac:7c:35:31:2f:8b:85:b6:d1:a2:7d:
                    12:97:c1:26:f1:87:61:53:42:95:4a:f8:d8:b3:1c:
                    60:a3:21:7d:76:07:bb:d4:ea:be:0f:cd:30:dc:8b:
                    67:45:4b:33:6b:11:94:30:37:bd:d9:4f:03:17:bc:
                    c4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A3:E8:86:2C:9E:37:80:7E:0F:E0:48:F6:DD:DB:9C:B1:8F:12:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/11b35ce1-5e53-38df-9ea1-38d466407bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:5b:66:85:a3:20:94:23:bf:97:e2:d3:c6:b0:ec:7d:62:ef:
         7b:5e:8f:19:5e:23:a1:4c:48:db:b5:61:df:ea:41:55:c4:54:
         9c:d7:ec:ae:b0:80:19:16:6a:b9:e0:83:0c:34:dd:56:4f:ca:
         91:be:b9:97:41:12:35:3e:51:e2:53:8f:ee:7d:fe:a2:df:b5:
         a3:62:cf:f0:9c:13:e2:fc:d1:34:86:3a:41:62:25:17:fb:fe:
         17:ea:24:a6:33:48:25:cd:39:a1:55:2b:b7:2c:5c:72:7a:d7:
         03:17:cd:b7:d3:5e:77:6e:bc:5a:53:ce:9c:d6:43:79:0a:a7:
         b8:10:13:9d:9f:02:dc:dc:79:27:df:93:de:04:f0:4a:8f:78:
         d9:21:b1:0e:d4:f0:4f:67:39:0c:ed:95:d4:f8:fa:4d:1d:71:
         05:9c:53:c7:d6:b5:f5:22:7b:d6:39:1f:22:ed:29:96:41:95:
         cf:48:b1:4f:2a:2a:14:1e:10:9a:bf:77:c6:08:8f:a3:23:ff:
         5e:d1:89:3f:5b:f4:c4:33:17:ff:d1:e8:44:ef:11:b4:12:eb:
         9f:6e:cc:48:26:a8:19:75:70:98:b4:c8:9c:b8:57:25:53:8e:
         ff:0f:87:fa:10:dc:2a:56:32:09:ae:6f:af:8a:44:39:94:e6:
         91:87:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:04 2025 by rpki-client