Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/759913cc-b395-39e2-80ab-8a5ae18118af.roa
File:                     759913cc-b395-39e2-80ab-8a5ae18118af.roa (raw, json)
Hash identifier:          Bq/E4kXPsFAPIdy+A5CDoL9fTTsxEr/qw8ZBQ9F29rw=
Subject key identifier:   66:C1:E4:0C:3F:41:97:F7:69:39:9D:78:E9:BE:C1:F3:59:E6:E9:98
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A1B600983F1269CA94E7BCCC6
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/759913cc-b395-39e2-80ab-8a5ae18118af.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     206264
IP address blocks:        172.94.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:09:83:f1:26:9c:a9:4e:7b:cc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=48919b02-98b3-444f-8b1b-f85c2ab7e9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a6:60:9d:ca:a9:70:9e:ba:39:5a:08:76:37:
                    43:90:09:56:07:90:e5:de:fc:bf:1e:f9:c3:d1:76:
                    ee:b5:22:97:02:46:fd:b5:e8:f6:6f:50:a8:e2:db:
                    2b:88:7f:61:f6:ba:b8:f0:02:75:b3:ea:46:37:79:
                    10:c7:9d:93:92:c8:e3:41:a4:6c:1f:6d:d3:e1:e1:
                    ca:cf:be:0d:99:6c:0b:7c:ca:ab:46:6d:19:9e:a8:
                    38:21:94:67:47:61:e7:46:ae:e5:30:64:fb:31:f1:
                    28:96:e6:2a:2b:98:00:4d:75:3c:05:b4:a9:98:28:
                    3c:50:68:e5:28:3f:d2:81:07:bc:02:f6:53:a3:75:
                    f2:10:35:4e:9f:59:84:78:3d:14:9a:39:3e:b2:a6:
                    3d:65:41:dc:f1:79:bd:fa:b4:0d:79:d2:80:dc:07:
                    b8:4c:d4:a3:a6:6c:78:fe:ee:bb:06:77:a4:e7:10:
                    d3:87:b4:e7:a7:6b:52:ee:a7:53:2d:6d:39:d7:b0:
                    af:d3:76:1e:4d:b6:a4:5d:ab:42:16:85:9e:34:45:
                    72:80:77:f2:dd:69:dd:47:a6:db:2f:6c:5a:39:6e:
                    bd:a0:e2:d7:17:54:cf:75:fa:fe:09:41:ae:44:57:
                    be:18:e7:8e:a0:b7:d2:8c:03:49:b4:f4:ce:c3:9b:
                    c6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C1:E4:0C:3F:41:97:F7:69:39:9D:78:E9:BE:C1:F3:59:E6:E9:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/759913cc-b395-39e2-80ab-8a5ae18118af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:7a:83:53:14:3a:0d:51:17:06:5f:dd:fb:9d:b9:92:e0:12:
         93:36:d7:fd:66:e1:56:bc:63:99:6a:3b:1f:24:88:0e:fd:c9:
         86:a5:4f:f5:78:e9:36:04:0e:16:f3:78:b8:f1:2c:bb:7c:0d:
         53:3c:3a:3a:73:58:92:90:f3:5e:a4:86:ac:37:48:90:05:e8:
         a2:8e:ec:9b:65:ac:7b:29:47:88:a2:aa:08:4e:46:25:71:7f:
         74:a0:85:a9:f3:a5:be:36:87:f6:29:16:ce:ee:c2:ca:75:5a:
         f2:07:8f:c0:9d:1e:18:38:8d:7f:63:47:ac:2b:42:6b:10:a8:
         ec:94:d8:96:bc:96:55:34:d1:93:20:c0:2f:29:c0:ff:d3:59:
         1b:ea:02:52:af:4a:f9:79:ef:84:bb:67:bf:35:cd:86:e9:e6:
         cc:01:48:58:61:6e:c7:7a:0c:b3:1f:1f:bc:86:ae:62:0f:76:
         09:f2:65:fc:fd:a8:a6:c1:a5:ff:1f:f1:f9:1a:13:59:c8:41:
         9b:96:4a:fd:f5:4b:3f:e5:b4:eb:4b:19:51:bf:4e:b6:0d:c1:
         d5:6f:ac:f0:f7:66:59:2d:ad:8c:a8:e0:a3:5f:cf:e8:d0:b7:
         7a:2e:f5:77:7f:9a:f0:61:65:82:11:c9:6a:a7:1b:ab:ac:7a:
         11:03:7a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:41:48 2025 by rpki-client