Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/eb4d0136-27d7-354a-93ba-5b0f70acd5ce.roa
File:                     eb4d0136-27d7-354a-93ba-5b0f70acd5ce.roa (raw, json)
Hash identifier:          7NvuYRH4L4qXFO1GDccT+uW/aeCxRWajwQJ1V6BhatM=
Subject key identifier:   EE:41:88:9C:B0:FA:77:B1:74:B5:72:15:3D:25:E6:61:60:98:37:D2
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584A146573D39743FAD56D34ED40
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/eb4d0136-27d7-354a-93ba-5b0f70acd5ce.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     21433
IP address blocks:        170.251.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:73:d3:97:43:fa:d5:6d:34:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=0009fcd9-ab1f-4743-9cad-24fba959db8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:e2:e8:6a:eb:e0:04:2c:84:6b:9c:c4:c4:
                    2f:93:ff:25:d3:df:5c:5a:d2:7c:e3:13:7d:68:84:
                    f3:f8:f5:64:ad:b7:92:c1:cd:66:ac:87:6a:77:08:
                    a7:43:eb:a7:f9:3f:20:fa:42:a6:8d:e1:f7:ae:03:
                    2d:14:b4:47:94:f5:99:92:1f:86:f1:f4:5a:a4:22:
                    31:1f:ac:05:f2:b3:06:03:24:74:7b:b4:3d:f3:17:
                    12:64:3a:ef:a6:10:1b:a2:80:0a:68:d7:bb:1a:25:
                    c3:43:0c:73:4e:49:12:0b:63:43:c5:34:b3:f1:e2:
                    1d:a6:ab:03:13:61:81:18:f7:1d:18:41:e2:3a:f6:
                    ef:50:a7:09:58:fe:a0:b7:e8:7b:a9:d7:ba:7d:69:
                    c4:ed:7b:07:a1:78:a3:5f:da:21:53:12:f5:44:ca:
                    6b:eb:3c:42:0f:f6:25:3f:1c:b0:2b:dc:04:ec:37:
                    81:7b:80:af:7f:3b:ea:3e:02:b9:b0:9c:c6:e3:25:
                    3b:1a:6e:df:fa:df:16:3d:e6:3d:42:17:31:df:7b:
                    74:d6:bd:35:b9:f8:87:69:8b:6c:0a:7b:16:a5:78:
                    54:73:1c:fd:69:27:8e:e1:86:11:e8:1c:6e:62:b9:
                    c6:92:38:a1:69:0a:12:4d:25:11:19:81:9d:53:42:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:41:88:9C:B0:FA:77:B1:74:B5:72:15:3D:25:E6:61:60:98:37:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/eb4d0136-27d7-354a-93ba-5b0f70acd5ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.251.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f5:e6:22:1c:3c:4a:4f:c3:37:a0:59:d7:eb:f6:0e:bd:7c:
         54:68:91:6e:6f:ba:19:1a:bf:25:da:57:d5:64:98:47:2b:81:
         0d:29:14:3b:2a:68:77:3a:a2:ce:a4:f0:cb:ae:c1:30:55:52:
         30:0e:51:df:f6:08:7e:89:0f:64:a5:36:f4:8d:54:0e:f8:39:
         8d:ad:d5:97:e3:0c:66:fc:a6:92:f8:11:6b:0f:48:b8:5a:48:
         ea:a5:cd:f1:90:fd:19:96:04:44:93:4f:f2:ea:2c:f3:63:07:
         68:19:29:c5:c4:8d:c2:ec:91:24:74:56:c4:9e:c0:61:0f:4d:
         ab:01:b5:ae:54:2d:15:ff:bf:6a:3a:7c:94:e0:b4:07:85:77:
         48:e1:a0:00:3b:d6:24:c0:e6:f2:68:1f:f9:90:d1:2f:0f:bc:
         34:57:f9:71:67:64:32:ab:60:6e:63:53:4b:f7:1f:6f:49:62:
         77:98:e7:ba:b4:9b:24:3c:3c:42:95:21:89:0e:10:67:d1:7c:
         b4:af:3a:32:64:e7:63:cf:31:0c:d8:ad:fd:5c:ec:6a:b7:ef:
         04:70:03:9a:d6:e8:2c:a6:59:d0:11:84:d8:5a:a7:08:78:0b:
         6e:d0:cb:28:90:89:c5:40:ce:28:ad:ea:c3:7f:ac:b8:91:3d:
         8a:43:53:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:16 2025 by rpki-client