Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa
File:                     2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa (raw, json)
Hash identifier:          b/Yq6Elozn4OdIAdY0QzaeM+zGSyRIDJZeyPPuft/VY=
Subject key identifier:   64:C0:E8:AD:AF:F1:9F:0B:42:E2:97:3D:C7:BF:26:A8:26:D2:B3:0D
Certificate issuer:       /CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc
Certificate serial:       010D0C9F43285849C4D4CD540846FBDB9674EC80
Authority key identifier: E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     8987
IP address blocks:        173.252.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:cd:54:08:46:fb:db:96:74:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=18d26d69-6f86-4842-b74e-27c52b055621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:28:42:66:a1:93:65:48:09:6d:8e:38:14:5e:
                    a2:52:89:30:bc:27:06:05:00:f9:2d:01:d0:96:a5:
                    6a:d1:a2:a9:22:42:22:be:f6:38:8c:5b:e9:69:4a:
                    6d:58:ba:95:29:d1:44:67:9e:18:87:12:ab:0e:61:
                    03:37:9d:54:23:16:86:a3:2a:10:6e:27:41:4d:3f:
                    bb:21:22:c0:17:56:bf:08:52:58:f6:e1:ae:f9:72:
                    26:70:4a:e3:71:b9:09:7f:59:ee:6a:57:b7:cd:e0:
                    b3:dc:e1:b1:4f:54:a9:de:aa:e2:fa:29:ba:66:23:
                    2d:ac:32:9f:70:73:e7:01:da:8d:49:7d:3b:b6:19:
                    5b:6b:63:09:34:04:28:90:dd:37:36:4f:8e:1e:f2:
                    9e:30:67:3e:ef:d7:74:f7:9d:ad:45:10:4f:2e:02:
                    89:79:10:7b:b1:b3:91:47:04:29:9a:62:d9:20:a5:
                    6d:ab:10:50:9c:32:d5:51:6c:28:48:fc:2c:79:61:
                    47:e9:ff:a9:ca:53:6d:9a:ac:bb:cb:b2:13:3e:26:
                    67:c4:81:bf:8c:ea:83:f2:8a:7a:8d:53:66:c5:16:
                    48:5c:96:a4:65:00:90:1d:30:92:4b:fe:f2:c3:5b:
                    a4:c2:33:74:ab:f9:4e:45:bc:bc:54:f8:19:7b:dc:
                    8f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C0:E8:AD:AF:F1:9F:0B:42:E2:97:3D:C7:BF:26:A8:26:D2:B3:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl

            X509v3 Authority Key Identifier:
                keyid:E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.252.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:30:d5:d5:36:75:a9:3b:47:a9:a4:9d:21:dd:1b:23:20:a3:
         3a:d2:73:5d:4f:d8:22:8b:61:11:26:78:c9:05:1c:b5:c6:dd:
         f7:5c:0a:99:6a:fa:da:b1:7c:9e:57:05:6f:be:90:df:a0:78:
         f0:ef:4f:70:4a:a8:99:6e:b1:f1:13:7d:3f:1d:bb:a2:63:83:
         cc:e8:ef:b7:04:f7:67:0b:2f:04:c7:e2:e7:ae:92:0e:01:74:
         93:5f:72:c6:20:c8:98:69:2e:9f:e7:bc:b7:81:fd:05:bd:c1:
         23:6b:fc:1b:5a:6f:a8:1d:57:a3:7f:e4:bc:72:c1:e9:02:41:
         66:e8:23:0a:bd:44:e5:8a:17:b5:2d:5d:99:8a:98:67:08:39:
         c8:fe:ab:b5:2a:70:09:27:f4:31:ba:c2:31:42:41:af:5b:6b:
         82:9f:b5:48:40:86:a0:4f:29:fd:dd:e3:b9:22:a8:6a:53:b3:
         87:b0:08:f0:44:04:85:80:65:e1:0c:b0:68:7d:97:32:db:3c:
         74:4f:90:dd:f9:47:3d:82:ea:1b:b5:e5:96:d9:1f:ea:ce:31:
         7d:9b:db:ad:e3:fd:3e:b7:28:d2:0a:ff:b2:fb:6b:d7:f6:56:
         53:cf:1a:94:16:f5:3b:79:e5:ba:50:6c:52:59:07:ad:42:95:
         af:e1:2e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:53 2025 by rpki-client