Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa
File:                     2253824c-087b-31f9-b1ec-ba694703e8de.roa (raw, json)
Hash identifier:          k0VBNhtv/qeZEgvawA6pLO/4kDvSu1q0Uh6lU/bIido=
Subject key identifier:   4C:5D:3E:39:26:03:B3:E1:AE:80:20:FC:D1:5C:C4:FE:37:EB:41:40
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F43285849D16508BDFB558221DA2C0E00
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     11650
IP address blocks:        65.255.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:08:bd:fb:55:82:21:da:2c:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=f8152122-e790-4389-8f93-c36228ceff53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:61:be:68:42:0f:ee:50:66:78:da:4d:65:2c:
                    1b:d1:d4:1d:1e:57:c1:7a:38:8d:58:1e:b0:ad:38:
                    b3:b9:02:be:e3:9c:38:73:f8:d6:c5:d3:f0:b2:1c:
                    83:09:f4:87:d8:6e:c2:a5:d0:f5:92:b3:b6:b2:79:
                    53:51:d9:fb:55:40:f4:e2:7d:51:d8:1c:25:1d:70:
                    7d:ec:0d:92:8a:5b:42:66:8e:0c:d8:86:4b:a4:49:
                    20:67:12:17:ba:01:c2:74:af:c4:4d:53:8c:4d:69:
                    4c:61:7d:4f:5b:a9:66:ac:cc:5e:1e:12:b9:e3:65:
                    e1:d9:f7:00:99:86:71:c9:e6:86:4c:2d:4d:89:8c:
                    02:b2:6e:18:a4:8c:e6:d4:88:f2:e0:b4:03:af:fa:
                    a0:52:0c:c3:7d:49:e7:fd:e2:da:c0:d2:f5:c8:62:
                    86:5d:68:e8:c0:be:55:c6:15:a9:de:5e:fa:7e:35:
                    f2:d0:89:ab:1d:78:00:8a:54:1c:58:07:e4:2b:88:
                    20:9b:ea:f4:6b:5e:68:6f:58:54:f9:47:be:d1:88:
                    3b:f2:20:de:90:f6:35:c8:f2:34:51:c9:75:9c:02:
                    81:e2:55:00:80:50:08:8a:84:a1:92:c5:74:b2:8a:
                    c4:0f:c4:e1:01:fc:fe:d0:16:cc:2f:d3:5b:c2:1c:
                    1d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5D:3E:39:26:03:B3:E1:AE:80:20:FC:D1:5C:C4:FE:37:EB:41:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.255.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:df:24:dd:57:da:ce:6c:2b:5e:28:05:ea:28:ea:b6:a2:18:
         99:39:d3:f5:9f:4f:81:24:45:fc:af:be:ff:a5:6f:f4:e0:bf:
         b1:de:71:48:97:8f:00:e9:b0:54:20:c2:62:f8:93:ab:b0:fd:
         e4:54:91:bb:8b:d9:16:ef:7a:aa:42:d9:4f:6f:61:ac:1b:70:
         a4:e1:53:26:91:e2:46:8c:a6:73:fe:ab:3d:a6:6c:4f:25:13:
         44:01:1d:2d:cb:88:02:f9:c7:a0:df:8a:8c:3c:3e:1e:c2:73:
         e5:97:39:b6:65:15:eb:32:bb:00:da:64:43:14:74:36:a7:80:
         be:44:fb:f5:b4:44:65:0c:2f:fc:20:b7:e6:bb:42:2b:d6:a6:
         cf:dd:76:65:f0:e2:2e:6d:07:57:f2:28:5a:e5:c3:21:1d:22:
         39:86:ac:65:de:53:7d:87:0a:3a:c2:8a:e4:cd:27:dc:61:23:
         d8:c3:bc:c3:97:a3:46:d1:80:34:9c:05:79:56:30:4d:c7:e2:
         0e:18:2b:f3:f0:16:3c:d6:f9:26:ed:80:55:f2:76:cb:06:75:
         7b:dc:7b:bc:0c:21:c1:10:09:8d:25:1d:e5:c2:d5:88:34:00:
         7b:98:15:c3:98:18:11:aa:c1:e8:8c:8d:7f:0d:18:24:a5:0f:
         70:2f:e9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:20:34 2025 by rpki-client