Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807/2dee7aa5-6710-3b43-8bdf-929c958de46b.roa
File:                     2dee7aa5-6710-3b43-8bdf-929c958de46b.roa (raw, json)
Hash identifier:          H/rdzua83iownFyPUTM42CRjfKKrdf99pONm5icZSbo=
Subject key identifier:   32:B2:85:46:DC:E9:93:3B:64:DB:99:A5:0A:51:E6:6A:DA:94:B2:FB
Certificate issuer:       /CN=c019befc-7c35-411f-a118-9d2c05733807
Certificate serial:       010D0C9F43285849EEB502358D4DB582337B67F0
Authority key identifier: 6D:C6:97:EA:A7:EE:27:77:9D:FD:0E:EE:DF:6E:DE:26:53:3B:A7:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807/2dee7aa5-6710-3b43-8bdf-929c958de46b.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     32281
IP address blocks:        174.34.231.0/24 maxlen: 24
                          174.34.235.0/24 maxlen: 24
                          2604:340::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807/c019befc-7c35-411f-a118-9d2c05733807.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807/c019befc-7c35-411f-a118-9d2c05733807.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:02:35:8d:4d:b5:82:33:7b:67:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c019befc-7c35-411f-a118-9d2c05733807
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=26905e91-2cc0-442d-b76f-5321181e1289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4b:ef:97:7b:e6:7f:8b:f9:76:3b:38:a0:69:
                    b3:5d:13:d1:d2:b3:48:6c:14:01:69:e3:b6:17:1f:
                    1e:f9:33:6f:89:31:84:9b:08:ea:9b:b6:4d:aa:40:
                    45:dd:72:06:04:de:ac:3d:b4:84:e8:de:b9:b6:af:
                    2c:ae:29:10:ec:64:f3:8f:62:6e:26:8f:0e:c4:af:
                    65:96:fb:b7:24:57:b8:3a:64:a3:68:46:e1:9c:9f:
                    87:ad:d7:f5:09:e4:fc:ec:70:dc:d5:d3:c1:a6:92:
                    0e:ae:af:82:ab:08:62:f2:ae:62:be:d2:6f:3c:b0:
                    7b:7e:3f:cb:04:6f:67:88:6a:09:ec:01:28:06:32:
                    cf:7b:4f:c7:ea:67:95:39:b0:55:d2:ce:a5:c5:78:
                    34:d9:13:42:05:70:5f:b9:ec:74:a3:ce:1f:9e:6e:
                    40:8c:4d:53:2d:69:59:fd:e9:3d:b0:03:16:62:01:
                    d9:74:d5:be:ba:a2:e0:fa:e1:ce:99:52:59:41:e5:
                    88:2b:94:a4:dc:bd:73:b8:ad:e4:98:34:ce:ee:0f:
                    87:c0:55:2d:8a:ae:6b:6e:2b:c3:28:f3:e1:d6:1b:
                    8b:30:72:13:bf:c3:00:c5:53:8a:d0:70:49:ba:f2:
                    64:c5:d1:1e:b6:9c:d0:20:1f:4d:06:21:38:9b:7e:
                    da:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B2:85:46:DC:E9:93:3B:64:DB:99:A5:0A:51:E6:6A:DA:94:B2:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807/2dee7aa5-6710-3b43-8bdf-929c958de46b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807/c019befc-7c35-411f-a118-9d2c05733807.crl

            X509v3 Authority Key Identifier:
                keyid:6D:C6:97:EA:A7:EE:27:77:9D:FD:0E:EE:DF:6E:DE:26:53:3B:A7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.34.231.0/24
                  174.34.235.0/24
                IPv6:
                  2604:340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e1:b1:a1:50:bd:2c:53:b9:f8:75:04:d2:56:24:98:d8:3e:
         f4:ea:ea:ce:12:0c:c7:57:15:c7:8c:94:19:db:1e:cd:3a:e5:
         bb:d3:16:67:96:fe:d8:02:05:fe:2c:83:8f:82:9f:e0:1d:6e:
         d6:10:02:00:92:23:a5:d8:1b:6e:5f:9a:83:e6:8e:cd:60:c5:
         ee:b5:a4:88:47:c3:22:de:07:3c:32:1e:2c:25:4b:64:cf:e3:
         e0:3b:7f:a2:ea:fd:18:cc:b1:e0:89:22:bb:26:da:dd:38:8e:
         63:9e:00:d4:3d:44:90:14:c0:c9:f9:19:91:ad:ac:76:2e:59:
         08:1d:d1:51:44:14:34:00:55:bd:f4:28:c7:bb:c8:88:00:97:
         7d:52:bc:c2:f0:10:d1:9b:7d:8c:6c:2c:27:c2:02:20:39:02:
         73:da:58:6f:3a:ae:4b:6f:d1:09:5e:f4:52:3b:d0:03:81:d6:
         0a:05:65:31:68:98:a4:ec:7c:5b:f4:21:49:03:ca:c7:1e:5b:
         88:15:f2:8b:48:44:3c:0e:53:5a:b9:71:0d:b8:61:13:c1:55:
         2f:ff:c8:54:71:e5:d6:96:6a:1f:a6:f2:3a:4a:e4:e3:54:32:
         68:df:69:99:3b:67:79:8d:e4:e6:a8:75:8d:5e:02:d2:0c:9b:
         1b:80:cc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:37:42 2025 by rpki-client