Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa
File:                     576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa (raw, json)
Hash identifier:          3vxMxJ8JXl0IpYAv3Ep4ra+XTuU6rRLHzll9+Avv5nc=
Subject key identifier:   CF:67:EE:7B:ED:6B:0D:10:F5:E1:98:10:2E:A6:42:01:9C:E6:0B:54
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F43285849F17FB89B2ABF78BA4708E500
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     8075
IP address blocks:        161.221.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b8:9b:2a:bf:78:ba:47:08:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=03b836d6-200c-4578-92b5-99615c124d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:59:82:b9:2e:d3:8b:b1:a4:b6:72:c9:d8:
                    5d:01:6f:e3:7b:d3:12:2b:9f:11:fe:d9:68:10:20:
                    55:d7:bd:81:a0:3f:05:9a:21:97:c4:ef:3f:6f:f4:
                    b9:76:63:97:a6:a1:52:c8:3d:84:48:aa:93:62:a6:
                    b8:e9:d2:a0:b1:29:28:8f:61:a9:3a:c2:ba:ce:b2:
                    1f:a2:df:54:d3:e4:9a:00:15:ff:d8:72:75:7b:d5:
                    05:e4:f1:79:5d:a8:a6:e7:f5:1e:5e:9f:12:db:aa:
                    c2:dc:75:c7:8d:0d:e2:fd:ef:6f:26:4b:7f:2d:b6:
                    cd:f6:15:53:02:0a:e9:84:c1:2e:33:f8:46:f0:ed:
                    2d:56:59:94:fd:d8:46:ce:63:25:ff:48:85:58:13:
                    e3:d9:95:03:6f:da:50:d9:a9:34:84:06:97:eb:34:
                    8a:af:32:99:e8:72:a9:4e:0f:38:c5:ee:a3:20:4b:
                    ae:bc:f9:15:c7:03:18:2d:5d:9c:c4:50:27:f8:a0:
                    5a:e9:65:de:2e:27:c0:a9:7b:3b:a5:81:14:65:a4:
                    ec:4b:e5:59:e5:0f:5b:ed:33:23:68:89:75:b0:c2:
                    4f:e7:f6:44:2a:ef:f5:4a:59:b3:3f:05:d6:25:a0:
                    11:52:7b:07:74:93:9d:7a:99:83:83:1a:33:29:a0:
                    a8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:67:EE:7B:ED:6B:0D:10:F5:E1:98:10:2E:A6:42:01:9C:E6:0B:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c5:7f:5c:a4:5d:66:0b:bd:5d:16:64:e9:f0:ea:09:2a:db:
         f3:31:f0:6d:24:63:c5:a5:89:30:4c:d6:f5:6b:f6:66:86:bb:
         b6:d1:51:a3:2b:2a:19:9f:63:99:dd:7c:16:c4:f7:f1:e0:8d:
         5f:1c:46:e3:44:aa:27:d4:a4:7c:18:fb:07:2d:60:c5:45:38:
         96:a7:8f:b4:94:91:8f:62:60:28:0e:32:7b:68:23:5f:b9:73:
         b7:12:e9:a6:ca:5d:42:e1:8c:d7:fd:33:ed:d8:ad:af:9d:2f:
         21:77:b4:ed:d0:9d:69:09:34:85:e0:d1:ed:e2:39:2c:22:18:
         65:ea:5d:91:84:8e:89:e6:77:55:03:f6:ab:9d:7a:c4:4b:ce:
         94:bf:3f:23:37:ce:0f:07:ad:eb:6b:b3:9f:0c:cd:50:cf:d7:
         cf:47:14:e5:e4:e3:9a:20:c6:79:ef:b3:d1:ed:a0:24:ad:b5:
         3c:d2:f9:1d:92:cd:2f:f7:15:60:17:6d:fe:57:63:0c:e1:fe:
         47:ce:7b:b9:b9:0c:6a:ae:ef:75:49:47:f0:84:64:13:9d:da:
         dd:22:17:6c:4c:15:c0:12:eb:62:bf:a3:3a:06:76:e0:e8:88:
         aa:28:21:3b:e6:b4:51:7e:95:d2:d3:39:71:fb:dd:fd:9c:82:
         46:c9:1f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:46:01 2025 by rpki-client