Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5619dad0-adc5-36da-98cd-88670a8851eb.roa
File:                     5619dad0-adc5-36da-98cd-88670a8851eb.roa (raw, json)
Hash identifier:          vWnJxKkHSKXldeovVshzO0rkMN7v1G+WIA+4DWfLETw=
Subject key identifier:   35:03:98:BB:8D:5C:52:F4:B7:C0:EC:04:17:FA:F0:0D:05:D4:58:7F
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584AA160DEF06208B5727CC093C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5619dad0-adc5-36da-98cd-88670a8851eb.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     9009
IP address blocks:        172.111.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:de:f0:62:08:b5:72:7c:c0:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=ec03d9d9-2642-4136-9119-de1a2ed45ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:c3:fb:21:86:36:e4:65:6a:76:4a:86:6e:
                    a3:ce:1c:1f:6b:e1:97:ba:d8:44:9c:b1:c6:bf:81:
                    2c:a7:eb:01:75:89:88:e1:4b:aa:67:8d:5d:a9:34:
                    67:b9:aa:e8:fd:38:19:22:89:69:31:cb:93:7c:b2:
                    1a:b5:99:c1:70:1c:1a:6d:90:69:63:51:a5:86:f9:
                    29:36:b1:83:13:7a:87:e2:0a:f6:8d:3e:36:e3:30:
                    f1:8f:64:1a:30:b8:9c:c2:9a:bf:97:75:bc:c7:a7:
                    cb:57:1b:92:39:5b:73:5f:09:4a:6b:86:a8:1b:0c:
                    ff:18:2f:74:f0:17:72:75:e0:df:db:d1:9c:5a:4c:
                    c1:da:6f:9b:9b:1a:c9:c8:5e:ef:0a:b4:a8:a9:3a:
                    96:f2:31:4b:26:96:8a:78:38:63:20:3d:99:96:a8:
                    bb:e9:05:68:77:08:bf:ee:a9:c1:ee:01:7f:b4:1c:
                    15:c1:97:d6:f3:22:09:46:4d:dd:89:ff:9b:86:78:
                    db:53:19:45:2b:0b:55:1e:6a:e2:6b:51:b8:df:3e:
                    1d:7f:01:42:55:80:49:cc:b3:08:49:8f:48:a6:42:
                    e5:65:b4:7d:9b:43:cb:f0:a0:7e:97:4a:48:68:7e:
                    d0:a7:47:7f:c6:f5:03:e8:95:9d:65:23:02:67:88:
                    78:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:03:98:BB:8D:5C:52:F4:B7:C0:EC:04:17:FA:F0:0D:05:D4:58:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5619dad0-adc5-36da-98cd-88670a8851eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:6d:a8:44:d4:55:de:29:cf:21:52:48:48:be:51:27:ce:c0:
         81:33:80:da:d5:67:d1:74:2a:a3:2e:fe:a4:ab:31:9e:98:a9:
         ab:0f:e2:88:3a:bf:2a:4a:0e:ec:d5:31:34:07:e1:f5:47:8f:
         cd:40:f5:67:63:e1:9a:ca:46:73:09:bb:9c:93:69:c6:e8:d4:
         2f:7f:02:9a:b8:68:78:e5:88:3a:da:2d:b1:3c:8e:22:14:82:
         fe:d9:b9:23:dd:6f:f1:86:31:44:a2:83:58:eb:ce:23:a5:38:
         36:41:3c:73:71:b9:a9:c9:1e:a4:94:88:e3:a6:25:e7:45:f7:
         0e:9d:6c:6d:05:60:4a:a2:7d:a7:e3:99:4a:61:d5:f8:d4:7c:
         30:11:3c:b1:14:46:f7:0e:12:a5:29:3f:76:3e:4f:83:e6:86:
         40:28:e2:be:a9:70:4e:79:36:1a:dd:eb:44:4f:a4:1c:05:c6:
         38:8c:2d:e4:36:3e:9c:73:ea:59:fb:18:63:18:67:fe:1c:1d:
         98:68:00:fe:bf:3b:23:91:4f:38:22:c7:ab:a5:72:22:d3:02:
         90:88:fa:d8:f3:4f:32:aa:f2:a8:ed:64:4e:80:96:05:71:b5:
         99:28:e8:5b:45:75:ee:46:8e:83:51:02:e8:37:4d:57:b7:6b:
         13:99:44:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:05:47 2025 by rpki-client