Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/054686b0-2bd8-3e47-9d3f-5e6b041e896c.roa
File:                     054686b0-2bd8-3e47-9d3f-5e6b041e896c.roa (raw, json)
Hash identifier:          H3B3YJxsZu+ec3SPcRZc04LRVF5eRhi2okOMhJP6uAM=
Subject key identifier:   5C:A8:59:74:96:51:40:CC:63:6E:DD:2A:78:47:1B:64:19:C3:CF:E2
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F432858499294A284931625312927D780
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/054686b0-2bd8-3e47-9d3f-5e6b041e896c.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     19886
IP address blocks:        171.162.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:a2:84:93:16:25:31:29:27:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=7944eb2b-a64b-4a05-9c79-5c350c6f77a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:70:70:15:56:37:09:7d:8b:a9:f7:b6:e6:ac:
                    f2:cc:22:96:ac:94:e2:b5:08:2a:26:8a:99:d6:88:
                    f5:a7:0c:4b:7c:d4:3e:b7:c7:27:f4:a6:8b:4c:14:
                    df:ca:8f:20:03:c1:6d:d2:20:3c:27:5b:32:76:70:
                    93:19:db:8e:6b:da:d7:87:a7:49:7a:65:83:0e:81:
                    03:66:69:72:6c:39:af:fa:b2:2e:2a:57:7b:91:b1:
                    08:a7:e0:b2:d0:2e:42:83:a7:5f:21:43:30:0c:5e:
                    72:39:b8:50:02:26:c8:eb:47:1a:d0:4a:ed:00:02:
                    ce:47:0a:45:f4:73:28:c3:1a:05:d4:a8:22:50:9c:
                    85:30:3a:49:e9:79:27:e3:9b:b7:1d:c2:e2:c1:3b:
                    02:b7:f8:53:b6:c8:12:6a:67:e5:1d:66:ef:22:07:
                    3d:3d:db:58:3b:b1:43:7b:30:4c:c8:4c:1a:2b:4b:
                    37:0b:26:c8:46:08:7f:0d:dd:82:88:63:59:62:7b:
                    a8:ce:ab:a1:7b:02:1c:49:10:df:37:dc:d1:e5:57:
                    19:c7:02:dc:65:37:53:03:2c:1e:ad:11:91:fe:7d:
                    69:2a:b8:cf:a1:cb:ce:91:29:df:86:b6:f3:26:1f:
                    a0:49:22:80:b7:77:f3:a4:f7:fb:21:e9:5c:8b:4d:
                    d3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A8:59:74:96:51:40:CC:63:6E:DD:2A:78:47:1B:64:19:C3:CF:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/054686b0-2bd8-3e47-9d3f-5e6b041e896c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:c9:63:09:96:8f:f9:1a:94:ac:8f:b1:3d:1b:69:76:d5:82:
         ea:04:f3:14:01:45:f2:30:d6:2f:7d:7d:3c:3f:bb:c7:2a:e8:
         6f:8b:d3:28:5e:11:8a:40:e4:a7:33:b4:7b:45:73:7e:01:e0:
         34:34:c2:32:8b:74:14:af:aa:0e:ad:b9:ac:5e:fb:cf:ee:28:
         2b:ab:fe:24:df:ab:8c:4f:eb:1a:a8:86:8d:f7:53:66:62:b5:
         3a:c3:57:4d:65:25:22:dd:f7:c1:8b:ad:27:70:16:9d:af:fe:
         27:96:c2:98:1a:83:3f:cd:c9:5c:c9:03:f4:7f:21:08:ff:c6:
         7c:69:f3:5e:1d:e4:2e:b5:1b:ea:22:d5:a5:f7:e3:88:55:1a:
         94:1f:13:c2:bd:da:75:88:37:ce:75:aa:67:9c:36:2a:9a:c3:
         e0:b4:bc:06:c7:68:b8:38:d3:9f:9f:b7:56:d1:db:ff:37:f5:
         5f:46:2b:97:1a:97:3b:9b:96:c9:9c:b1:cb:7e:d7:e6:f9:db:
         50:ca:39:fe:d3:38:37:65:a7:82:39:01:dc:e1:96:2b:81:cb:
         dd:c7:7c:56:a3:58:ec:35:05:17:ab:4d:a1:1a:67:71:55:0f:
         e6:28:ed:96:ba:d1:37:80:d7:2b:9b:17:91:83:7d:de:09:8c:
         44:45:7b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:24:51 2025 by rpki-client