Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f001b637-cd3b-3f79-9db5-e640908c6166.roa
File:                     f001b637-cd3b-3f79-9db5-e640908c6166.roa (raw, json)
Hash identifier:          /MhgPgBUiK1M8D90CHkDH3Z6XuFghv8WyCrB4YHU6do=
Subject key identifier:   78:18:BC:A7:B7:D6:3C:0F:AF:7E:3B:03:5A:A1:55:3C:5E:86:36:1E
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285849EA8521BDEBCC5CCAEB863040
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f001b637-cd3b-3f79-9db5-e640908c6166.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     3223
IP address blocks:        172.94.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:21:bd:eb:cc:5c:ca:eb:86:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=39a0707c-f59e-48a6-9289-aced86ed0b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:29:1e:85:d3:6c:4a:3a:25:1e:82:69:bc:b9:
                    34:85:54:e3:ae:6a:69:84:81:78:61:ea:7b:e6:9c:
                    d3:4d:7e:a1:5d:55:e6:33:b9:0a:8f:d5:f6:3e:6f:
                    97:5a:62:49:21:e0:03:64:93:cf:7a:c2:96:c5:d7:
                    0b:8d:d5:d0:cf:74:26:c8:e0:f0:96:01:21:5a:65:
                    a8:55:bc:96:64:63:29:d7:01:71:87:bb:6f:12:01:
                    03:7f:7e:f4:f7:4b:97:cb:92:6d:c4:ba:95:5f:73:
                    49:bb:03:d5:a4:a4:82:bb:60:34:eb:09:4c:46:30:
                    f1:e5:08:da:e2:50:16:1d:f5:e8:94:88:dd:fd:41:
                    93:1f:a6:4c:1c:f1:a5:6c:d7:0b:c2:07:d0:70:70:
                    a7:bc:77:5d:d8:3a:79:14:67:6a:f4:0c:b7:75:fa:
                    fa:1a:f9:9e:cb:28:dd:7b:94:2f:cc:45:c2:c3:39:
                    95:1c:90:f3:fb:2f:18:f3:be:bd:5a:c5:af:a0:d3:
                    0d:bd:3e:6e:1d:3d:ae:91:b4:4d:ab:7c:41:b9:0a:
                    6f:aa:66:a2:d3:7a:8a:a8:ba:6e:36:f5:1c:9f:4b:
                    1d:be:24:cc:2c:74:1b:ea:c5:6b:12:f6:b8:15:27:
                    08:00:15:41:69:bd:81:7a:59:22:01:f2:ba:81:40:
                    1c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:18:BC:A7:B7:D6:3C:0F:AF:7E:3B:03:5A:A1:55:3C:5E:86:36:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f001b637-cd3b-3f79-9db5-e640908c6166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d7:35:be:6f:ce:0c:02:ff:fa:0d:16:42:f4:21:a1:b4:c9:
         af:b4:cc:a3:4b:5d:9a:2d:60:c4:4e:ba:6c:31:01:0e:be:66:
         95:af:77:61:e9:56:a7:6f:52:18:4e:0b:fc:4d:08:92:22:97:
         92:b7:41:cf:8d:09:4c:8a:da:00:75:a5:1c:51:88:61:78:d3:
         93:f7:72:6f:25:0a:dc:c2:cd:94:bd:3b:3d:46:3c:8f:ac:31:
         38:3f:3d:4e:a6:b1:ee:48:41:ec:b5:db:01:31:03:5c:cc:c4:
         3e:51:56:77:11:8a:ff:50:5b:37:84:88:e9:6a:dc:61:a4:51:
         4e:f0:f3:34:f2:d2:c7:ba:85:ac:b7:d8:2a:dd:6a:86:fd:13:
         b4:fe:47:4e:64:d1:e3:61:7b:03:89:52:e0:17:4b:1f:ce:ec:
         48:c1:1b:f4:d5:bb:54:23:b7:43:75:59:85:80:9f:94:ec:ac:
         16:8f:21:39:fe:84:5c:11:8c:84:25:96:d9:df:fb:f5:9a:46:
         f0:02:fa:4b:63:e2:01:a4:82:4b:e9:ee:05:bb:1d:1c:9f:13:
         e7:fd:3f:f0:1e:32:cf:1b:6e:46:25:74:be:fb:4a:10:0f:e6:
         17:b4:8b:6b:ae:91:e0:a6:09:3b:11:69:48:9b:38:6b:4f:9f:
         ba:96:47:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:40:04 2025 by rpki-client