Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/62cb542f-e294-3dbd-858b-d603bfe1b1ce.roa
File:                     62cb542f-e294-3dbd-858b-d603bfe1b1ce.roa (raw, json)
Hash identifier:          E9/CNgmArIrprrmhWveMFv9mIOfqjKvCqT//6XgmI8I=
Subject key identifier:   BB:F5:77:AA:3F:23:33:79:5C:53:5D:06:91:60:C6:0E:6A:B7:2A:B5
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F43285849F2E544EEB9A1A21FC23B9480
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/62cb542f-e294-3dbd-858b-d603bfe1b1ce.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     22925
IP address blocks:        205.175.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:44:ee:b9:a1:a2:1f:c2:3b:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=1d9a100a-c4dc-4443-8c40-48d85a212efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:59:f0:9a:38:bc:70:db:00:91:e8:e0:8c:
                    56:a8:0e:91:ed:c5:53:02:d1:6d:0f:5f:84:6c:3e:
                    e2:cc:62:fa:e9:2d:f5:ad:93:65:ea:78:9d:74:d1:
                    ad:7f:06:90:79:48:2e:f4:08:94:36:8a:69:d0:eb:
                    13:90:1c:00:38:89:a2:18:bb:4d:58:b1:dc:f6:03:
                    bd:c9:f4:ac:44:80:5b:de:b7:df:46:21:3b:b7:cd:
                    4f:90:76:e1:ee:f2:6b:a1:f0:05:e3:60:93:97:ec:
                    8d:af:42:1a:ae:44:d7:2a:58:1b:b3:bd:52:1c:87:
                    f4:d1:6d:3c:a2:b9:b2:fd:97:13:f6:30:04:11:87:
                    4d:60:97:6c:6b:06:40:0b:33:67:ee:6b:a5:f5:e5:
                    35:9d:61:83:08:ac:1a:42:5e:1c:1e:85:32:54:a7:
                    17:71:24:91:cd:a9:9b:41:31:d8:94:db:34:93:78:
                    06:5e:a4:71:d8:53:c1:2c:5b:69:34:6d:66:8d:4e:
                    96:39:a3:84:27:5b:0a:10:6f:20:53:c7:75:ba:c2:
                    7d:89:7f:e3:88:b7:c2:05:79:7b:79:d5:92:d4:e9:
                    74:60:95:6f:66:e8:ca:26:5e:df:23:c3:e5:93:05:
                    ca:2f:a7:0c:f8:10:73:3d:4c:64:62:55:82:10:32:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F5:77:AA:3F:23:33:79:5C:53:5D:06:91:60:C6:0E:6A:B7:2A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/62cb542f-e294-3dbd-858b-d603bfe1b1ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.175.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:10:c7:c6:db:4e:4a:f1:c9:ec:f7:69:b3:f2:99:bd:f6:59:
         01:a6:f2:74:f6:cd:25:ce:0c:61:22:59:d9:41:87:51:2f:90:
         65:e1:cc:0d:00:8f:db:bd:d3:71:7e:0d:9c:aa:b5:36:65:dc:
         50:a0:48:75:e9:af:4f:da:1a:9c:6d:55:9a:71:34:b2:03:5d:
         2c:79:a2:d7:03:69:9c:7d:66:bf:fb:dc:22:8b:21:b6:f4:a0:
         7c:8d:4a:ce:b8:1d:21:95:ae:8d:7a:93:30:f1:b6:f1:ba:99:
         d0:b4:89:3a:f2:75:71:32:ab:27:4c:80:9d:20:73:71:73:6d:
         17:80:89:ac:28:af:0b:98:a3:b1:fc:f3:ec:90:6e:0e:41:d4:
         99:58:d6:4f:9d:ae:7c:aa:6c:24:be:d1:20:9d:61:a7:cf:f9:
         3d:d3:1b:89:a9:4f:f7:23:b7:5b:53:a4:ec:92:9e:8a:d9:be:
         9e:7e:2c:31:16:dd:c0:d5:d0:4e:e6:6c:34:be:7e:86:6e:19:
         99:b0:53:90:82:2e:bb:9d:f8:e2:20:c5:63:86:f5:4d:d1:18:
         ea:25:34:96:8d:e8:d7:13:4d:6f:52:a4:36:ac:c7:bf:d7:6d:
         c7:c2:91:1d:fe:d7:bf:32:f8:14:ec:85:56:f2:74:b2:65:d7:
         1c:6f:a2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:07 2025 by rpki-client