Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa
File:                     2d0193d3-f77e-31d9-a549-a3f230e8d931.roa (raw, json)
Hash identifier:          ijLjGTI2heH3kdLJEY5GzVRVtPESxdHkssG6TYzQXPM=
Subject key identifier:   BE:03:6D:F8:BB:4C:B4:15:C3:49:B8:1B:37:8B:E8:BA:A3:68:92:B0
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F43285849D164E69A3D01CCBF04C98380
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     9009
IP address blocks:        172.85.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:e6:9a:3d:01:cc:bf:04:c9:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=3ac6efe5-c6b8-41f7-a5cb-91b828af473f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fa:69:07:82:20:2a:15:75:a7:78:21:00:d4:
                    95:08:71:3d:c6:7f:bb:7d:16:de:21:fd:22:a9:bf:
                    f4:ed:cc:71:fb:04:96:07:71:a7:87:fa:e4:6d:0c:
                    ae:86:c9:6e:20:b5:72:02:5c:85:2b:3a:b0:d7:b5:
                    e3:35:6f:21:35:89:b8:de:f5:eb:7f:92:1d:c9:fc:
                    68:f8:d6:93:48:8b:16:f3:c1:09:7c:61:11:b5:fd:
                    c1:80:04:69:1e:0e:45:2f:5b:3b:8c:e7:c6:37:44:
                    3b:ed:3e:cf:23:ca:37:a9:bb:30:c3:c2:b3:dc:d3:
                    16:c7:ab:70:5d:7d:04:55:2d:42:5a:e1:0a:5e:59:
                    a5:f6:9c:52:c5:b4:be:67:74:15:21:90:e9:40:8e:
                    cf:ed:87:2e:29:1d:06:3d:c0:f0:56:42:ce:58:1e:
                    26:b0:44:1d:f7:e4:63:2f:30:b0:3d:80:f7:c3:09:
                    ea:b3:25:17:46:8a:9b:1b:34:af:10:0f:47:7c:b7:
                    34:cd:55:d8:a1:b1:36:eb:44:12:8a:fb:50:6c:3f:
                    4b:34:0f:0e:84:f9:e4:7f:5b:9f:16:64:0a:15:e0:
                    09:e3:49:72:38:a8:f3:f8:74:45:6f:7f:a1:ff:39:
                    ee:ed:b0:f2:6a:bf:a0:bb:f2:a4:a4:c5:58:df:f8:
                    90:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:03:6D:F8:BB:4C:B4:15:C3:49:B8:1B:37:8B:E8:BA:A3:68:92:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:11:e8:f3:00:c2:7f:7c:47:2f:33:2f:08:28:94:f6:b9:ca:
         f3:66:9a:9c:5f:02:b9:4a:2d:9c:7f:bc:20:9a:86:c5:89:8d:
         0a:5f:74:25:82:35:7f:1a:0e:fc:b0:41:f3:44:b6:3c:e6:db:
         d1:9e:b6:11:c3:d6:89:f1:12:87:4b:3b:d9:07:77:5d:da:b3:
         ca:72:33:75:0e:7f:91:6f:8c:7a:0f:90:db:c4:13:1f:e8:ae:
         90:f3:91:44:a8:90:a4:72:a1:47:2a:cc:0e:c7:6a:0b:47:fb:
         16:59:16:a2:2a:bb:2e:9c:0c:9b:40:e9:6d:7f:ed:53:22:ec:
         65:08:37:8f:0d:b0:66:2e:d7:96:71:64:9d:36:1c:b1:17:44:
         09:50:91:9a:d2:f3:9e:48:f8:70:ae:6d:1d:6c:82:c7:77:65:
         4b:e2:c4:ba:ee:b7:67:26:9e:ff:e7:22:8e:d9:72:89:e5:1d:
         5c:3c:be:73:2f:81:cb:a5:33:ab:0f:31:4d:80:fd:e7:b3:a6:
         07:0b:89:21:c9:f4:f3:58:f2:23:c6:8f:a2:13:f9:a0:d1:3e:
         0e:34:3e:f2:d8:0b:27:bc:85:3b:e0:1e:f4:38:5b:db:da:37:
         89:9c:5d:26:b5:42:88:5e:54:05:93:34:ff:4e:a8:02:62:87:
         93:c4:0a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:51:24 2025 by rpki-client