Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/5eef130d-0c76-3809-a4ca-7c2b066f7eae.roa
File:                     5eef130d-0c76-3809-a4ca-7c2b066f7eae.roa (raw, json)
Hash identifier:          /wl/eayPiUfHWfTko00v6M/oXuBxt3BXxIehPNvZmsk=
Subject key identifier:   A1:47:37:77:94:43:37:B5:12:43:23:03:40:E0:9B:82:9B:F3:91:AC
Certificate issuer:       /CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235
Certificate serial:       010D0C9F4328584A28DB95855A425A2D70B85E00
Authority key identifier: 7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/5eef130d-0c76-3809-a4ca-7c2b066f7eae.roa
Signing time:             Wed 11 Jun 2025 20:55:32 +0000
ROA not before:           Wed 11 Jun 2025 20:55:32 +0000
ROA not after:            Tue 09 Sep 2025 20:55:32 +0000
asID:                     20
IP address blocks:        199.89.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:28:db:95:85:5a:42:5a:2d:70:b8:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235
        Validity
            Not Before: Jun 11 20:55:32 2025 GMT
            Not After : Sep  9 20:55:32 2025 GMT
        Subject: CN=dd8a09dd-e5e9-4a2b-ac5f-7697a1eb1b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:04:f5:9a:ec:d0:75:c4:a0:f9:bc:f6:73:
                    ce:b7:bf:1c:d1:2a:59:b7:22:e3:6d:3c:76:4e:93:
                    93:11:05:50:81:86:2c:84:75:cd:5f:5d:16:c4:29:
                    ac:a9:51:d1:50:06:30:5c:12:f1:eb:59:45:bb:9d:
                    c9:c0:d2:be:83:6a:a0:58:e4:a5:0e:55:96:00:f1:
                    89:5c:51:26:23:7f:c6:d9:fe:c0:cf:71:3b:af:f7:
                    c6:70:99:cb:06:25:c8:3f:a1:a3:ad:20:f0:27:0f:
                    73:c3:3c:a1:ca:77:4c:92:7d:57:ec:38:9b:58:89:
                    c3:de:5a:5c:e4:73:f8:3f:89:a1:f7:2e:76:66:27:
                    bf:31:c4:53:ae:d7:6b:e3:4b:24:d7:67:09:62:4a:
                    62:50:cf:f4:3e:d4:22:84:a3:23:72:25:c1:69:c1:
                    4f:aa:ec:af:c8:00:d7:3d:dd:27:ac:7d:f4:d0:ec:
                    8d:2e:91:79:fb:13:f3:08:e8:0e:b3:9e:38:53:5b:
                    8e:49:0e:dd:6f:94:06:92:7b:8e:98:6f:ab:56:10:
                    31:76:2f:c0:2c:66:89:57:ad:02:ff:64:b6:68:12:
                    ed:ae:b3:42:32:df:a5:67:c6:d2:1a:c0:8f:b4:a2:
                    8c:d9:33:3e:1b:a9:20:70:ec:a9:e8:60:53:0a:5d:
                    2d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:47:37:77:94:43:37:B5:12:43:23:03:40:E0:9B:82:9B:F3:91:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/5eef130d-0c76-3809-a4ca-7c2b066f7eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl

            X509v3 Authority Key Identifier:
                keyid:7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.89.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c3:34:bd:c1:04:73:27:5d:dc:8d:b9:49:0c:33:89:9a:f1:
         00:ba:ee:b3:86:7d:d0:b1:63:4e:4b:a0:f6:05:04:d7:53:29:
         47:46:86:88:5a:96:cd:43:a5:2e:db:3d:97:36:28:2a:d5:3a:
         b1:5d:ba:5d:94:90:eb:b2:11:f8:46:c7:3a:f3:bd:b6:9e:c7:
         51:05:0f:df:30:07:5b:cf:aa:df:82:e0:d1:0a:d9:fa:a4:6c:
         44:be:4a:92:10:a9:a6:dd:ec:44:23:2d:8b:82:8c:cc:3b:15:
         e0:a1:8d:a3:77:56:39:b1:10:18:f6:4e:fb:f9:67:8c:fb:d3:
         c3:d2:4c:c5:fe:f6:86:d7:8f:8a:93:8f:7a:3e:b0:37:9d:e7:
         96:21:6b:6c:53:49:df:04:ea:ab:08:0c:0d:ab:97:4c:81:ed:
         1f:fc:62:96:7d:58:04:17:ff:62:fe:e6:c1:a1:82:8e:57:06:
         d5:75:bf:81:a9:12:ae:6c:cd:85:4a:d9:04:ee:a2:19:c6:9a:
         21:23:ad:a3:7d:fe:59:94:20:b5:05:35:e7:c7:e7:08:c1:b7:
         0b:22:25:91:0b:36:d0:7f:cc:eb:2a:e8:be:d5:79:3c:fd:ef:
         81:06:f0:95:f6:d8:b6:75:b0:cb:b3:9b:72:93:37:f9:62:04:
         68:ce:8f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:26:36 2025 by rpki-client