Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61bf402f-81e3-3147-b52c-113334a06b11.roa
File:                     61bf402f-81e3-3147-b52c-113334a06b11.roa (raw, json)
Hash identifier:          rRG83gG2zf2lGUPPLKXWZILw3M9BQs3csGWphdR1p4I=
Subject key identifier:   A3:6E:35:CF:5D:B7:DC:76:C0:EC:69:AA:BA:90:8E:11:4C:D8:89:4C
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A268AC12B2D8DA3727D0E5680
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61bf402f-81e3-3147-b52c-113334a06b11.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     212238
IP address blocks:        172.94.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c1:2b:2d:8d:a3:72:7d:0e:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=155f4687-3cc4-4cdd-9c2b-c7fcfd254a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1a:ee:41:bd:82:85:f8:2b:d2:ab:cb:ed:48:
                    05:d9:ad:12:0b:57:f6:1d:68:96:3e:ec:22:ef:23:
                    f9:b5:e1:4e:8d:3a:59:1d:a7:32:72:f6:eb:68:c3:
                    4d:60:72:21:2d:52:7b:49:3d:ac:5d:f9:d3:51:34:
                    20:b9:8a:a6:2e:c9:6e:a8:46:a2:87:57:28:06:bb:
                    51:a2:b3:69:21:de:3a:94:69:d9:23:44:f7:ce:96:
                    0d:0f:e9:f1:5b:cc:8f:b5:6e:bd:22:0a:72:2a:28:
                    84:8d:72:e2:1e:71:d2:7f:6b:f2:d0:dc:29:94:0c:
                    e6:f6:7b:00:ac:1f:a3:e6:53:e1:9f:f3:68:c0:62:
                    d2:4f:05:1b:30:82:d6:72:3f:4f:d6:13:30:10:99:
                    a0:5d:52:88:41:49:52:78:75:e5:4e:07:f5:e7:43:
                    98:35:c3:9c:01:93:60:d2:cd:f7:d0:da:2e:d4:50:
                    35:10:d7:4d:9b:d8:d5:0b:e1:72:b6:a0:76:f8:cc:
                    05:10:c5:d9:24:6b:53:c8:bf:2c:fa:bb:75:f5:de:
                    17:ce:06:ea:56:96:3b:0f:d7:8e:69:b6:57:eb:82:
                    0a:a5:b9:40:60:39:6e:5c:47:ad:07:e9:a9:03:71:
                    cd:cf:41:fd:01:8b:3a:48:a3:9e:3c:ba:9f:f6:2a:
                    fc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6E:35:CF:5D:B7:DC:76:C0:EC:69:AA:BA:90:8E:11:4C:D8:89:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61bf402f-81e3-3147-b52c-113334a06b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:10:7d:0c:29:14:eb:21:3f:70:c8:c1:40:bf:45:02:e4:e9:
         f0:fc:85:72:35:c7:52:86:a4:bd:e2:9c:48:9d:6f:a7:35:44:
         74:56:12:cb:1e:c9:58:9a:f5:a2:8d:be:1a:7f:5a:d9:49:74:
         98:89:63:9f:2d:ab:cf:28:c5:66:09:85:f3:3b:d3:c8:88:15:
         37:3c:09:af:9b:21:6b:9c:fb:9c:70:08:07:7e:30:56:6e:0c:
         3b:03:19:30:8a:8d:5f:e8:3b:77:5d:c9:43:86:a1:dd:89:d2:
         c2:73:4f:81:69:8d:39:69:b4:b1:78:f5:66:4d:23:b0:f1:9f:
         0e:93:6e:ba:86:78:43:43:a7:7c:13:62:09:8c:a4:91:62:ae:
         7e:d2:76:eb:ab:9f:30:8c:ae:e7:19:f7:e1:99:75:30:06:c1:
         83:9e:0d:db:3c:4a:ea:ca:70:b4:ad:aa:9d:00:ff:5e:80:ed:
         27:02:cb:21:37:aa:68:23:ec:0c:cd:cf:c0:c5:b3:b3:57:4a:
         20:e9:d4:a0:ae:0d:c6:16:42:02:67:87:cb:61:0e:0b:8a:8e:
         6a:7e:b1:59:dd:18:60:b5:d9:81:60:3a:42:f8:1b:b9:18:e6:
         95:b9:11:c2:39:d3:6d:96:88:63:54:22:d9:7a:76:ac:d7:72:
         1c:79:7a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:14:11 2025 by rpki-client