Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/c844993d-f4dd-313b-b5c9-8354c562e673.roa
File:                     c844993d-f4dd-313b-b5c9-8354c562e673.roa (raw, json)
Hash identifier:          dR/pUEbqCqx4naJDFvGIdhRIncY0D/x2Uv9eK5ig/Is=
Subject key identifier:   4D:0B:43:DE:33:00:61:C9:87:C7:CE:D2:CA:04:83:20:F9:3B:6F:0F
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F43285849ED4FD45E975C6CBE60EB3880
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/c844993d-f4dd-313b-b5c9-8354c562e673.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     22925
IP address blocks:        107.181.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:d4:5e:97:5c:6c:be:60:eb:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=ff5b1f63-588c-4b9f-8b0e-20250f67bfab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ce:b6:01:d1:95:ac:0d:87:a7:54:f2:44:0e:
                    72:74:38:23:71:05:34:6a:68:28:39:86:0c:58:9c:
                    8c:b0:56:80:39:84:85:e7:87:c4:4e:fe:68:31:5c:
                    6e:0f:1b:46:64:6a:42:b3:9a:e3:9a:03:7d:49:7d:
                    3d:2d:e0:93:28:cb:47:26:2d:2b:2d:c9:4d:cb:f9:
                    0c:cf:d4:24:f8:f0:0a:5c:e6:4e:9c:2c:17:b3:bf:
                    82:53:ef:eb:51:ce:bb:a5:3b:28:98:61:69:94:26:
                    8d:b0:62:03:b3:69:50:a8:6b:b2:f4:44:22:0e:ab:
                    9d:20:73:37:69:5a:c9:2a:7d:a7:0b:f5:98:cf:28:
                    ab:e5:12:c7:0e:42:39:71:18:60:a5:2d:40:08:d1:
                    c9:42:40:60:c7:d1:6a:ab:00:15:05:fc:6a:70:82:
                    5b:fb:ac:76:57:81:11:34:82:ce:4c:27:c4:ce:d4:
                    32:27:c6:80:03:be:4a:2e:d4:2a:e7:b2:67:c9:1a:
                    5d:e2:db:29:e7:c0:99:9f:01:4b:c8:68:56:3e:53:
                    4c:28:d4:bc:f2:12:81:48:64:80:86:c0:c6:21:bb:
                    c3:b0:34:31:5a:02:1d:be:88:b6:9b:75:f2:de:2d:
                    61:f8:81:c8:09:cc:bb:ae:82:c8:ee:cc:62:30:9c:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0B:43:DE:33:00:61:C9:87:C7:CE:D2:CA:04:83:20:F9:3B:6F:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/c844993d-f4dd-313b-b5c9-8354c562e673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.181.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:50:45:f3:7e:9a:e7:02:ba:0b:ef:ba:cf:2b:91:0e:5b:0e:
         f5:29:99:37:6f:16:17:5c:c9:69:90:3c:96:a3:97:4e:69:74:
         39:b4:f7:03:23:7f:80:4e:73:91:31:64:af:0c:fd:9e:66:43:
         86:fc:54:40:9f:d4:cf:62:47:2c:92:65:da:83:eb:ec:13:92:
         f2:05:9c:ed:6f:13:fd:65:e8:a5:78:df:7b:98:ac:7e:46:31:
         e8:df:a5:dc:3d:36:f9:53:01:46:44:cc:19:20:c9:4c:9e:b7:
         b8:6d:7c:60:84:a9:fa:a5:77:a5:ee:20:af:71:5f:aa:c2:8f:
         65:35:e4:91:69:f0:bb:8e:de:f2:b0:29:2e:c0:e0:ac:59:b7:
         af:38:53:d2:c9:dd:5d:0c:b8:a2:20:7f:dc:0d:43:3d:08:8e:
         2f:74:7c:ac:7f:79:08:37:6d:12:b8:54:33:36:46:c3:d8:e0:
         a4:76:9d:8c:c3:0b:0b:ed:38:d9:62:b9:17:6a:9e:59:d6:64:
         37:20:d1:38:dd:a4:9f:a1:4f:e2:25:c1:80:b0:02:68:88:06:
         ce:b0:f4:5a:c3:11:34:0b:4e:92:30:fa:9b:19:dc:d2:0f:51:
         4a:d4:8a:20:29:34:20:7b:38:0b:6c:67:ad:81:41:52:d7:df:
         1a:e5:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:14:18 2025 by rpki-client