Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e5a24e9b-55eb-3b9c-bf2f-6ec80ce2d7d7.roa
File:                     e5a24e9b-55eb-3b9c-bf2f-6ec80ce2d7d7.roa (raw, json)
Hash identifier:          TqXpLnDwuLtmK+MCLZJUMviaaXmye1aVnXg2fKmuKAA=
Subject key identifier:   58:CD:5A:B0:FF:1B:51:91:75:82:AE:FE:14:F0:2F:28:92:0E:C9:E6
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285849DC8FC541D7C0053AC70FA740
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e5a24e9b-55eb-3b9c-bf2f-6ec80ce2d7d7.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53508
IP address blocks:        142.79.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c5:41:d7:c0:05:3a:c7:0f:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=2178da3f-03bf-4c99-bac1-f8432e5694df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c7:a0:1e:84:ab:b4:7a:a9:0d:f6:ae:59:c2:
                    53:5a:5e:39:4c:40:73:aa:53:77:c9:ed:cf:7f:b7:
                    db:8c:3a:f0:16:aa:c8:6b:9e:2b:bc:2b:b6:c4:2f:
                    3f:9a:8e:0e:e0:d9:9d:c5:6a:6c:68:25:d9:01:87:
                    14:09:b9:f7:cf:99:6d:54:c0:4e:6e:f0:45:0e:2e:
                    b7:d7:f9:cb:17:ba:a6:61:a2:34:db:0f:59:38:d8:
                    70:c6:50:da:d9:4d:33:8b:6b:13:bb:55:e2:df:11:
                    6b:38:40:6d:38:ac:76:72:8f:bb:e7:e9:a1:57:fb:
                    22:9f:1e:f4:ba:a5:2c:69:65:db:b2:4d:01:ec:33:
                    0f:cf:5d:7f:03:55:d9:85:54:4a:49:5c:c1:4e:34:
                    be:10:d9:fb:bd:2e:f2:d3:47:c6:ce:ec:31:1e:75:
                    0f:cb:f0:0b:ca:0a:1b:9e:d3:a3:09:42:23:bf:15:
                    9f:95:d0:20:58:da:ce:94:a9:5a:84:e0:d3:3b:bf:
                    fb:14:8c:62:da:6a:2d:53:a5:15:df:ae:ce:81:47:
                    be:b3:5d:ef:1f:49:b0:fd:45:58:2b:ca:70:2b:1a:
                    ca:a5:e4:67:41:3b:34:b8:ce:0b:a3:18:b0:05:78:
                    fd:bc:ec:f3:6f:e6:2e:00:a1:0f:de:01:25:fb:52:
                    7a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CD:5A:B0:FF:1B:51:91:75:82:AE:FE:14:F0:2F:28:92:0E:C9:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/e5a24e9b-55eb-3b9c-bf2f-6ec80ce2d7d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:65:48:18:98:2c:48:e0:21:26:7b:f8:04:f7:06:ad:2a:b7:
         52:79:0a:b6:ee:7a:95:60:45:0e:f2:e4:42:94:d6:9e:d5:f2:
         ce:b5:9b:2a:21:78:f9:a6:5d:14:4f:90:12:46:ca:d3:cb:65:
         c0:67:6d:a8:e2:f5:c6:e7:52:7e:ce:f8:96:b4:26:0c:8f:cc:
         24:3f:8e:a9:4e:c4:81:d6:f3:6a:1e:e6:db:a8:40:6f:f2:91:
         24:55:e6:41:7a:88:bf:54:a2:71:ff:c5:f8:01:61:b7:32:c4:
         4c:a1:6a:6e:aa:ab:cc:58:0d:be:03:18:7f:83:48:25:f4:ea:
         ff:0d:40:a3:d3:5b:fa:7d:ef:17:27:72:98:6e:1b:2d:6f:4f:
         42:a4:1c:1a:72:3e:5b:43:cd:2a:02:dd:8f:38:9e:e5:60:8e:
         2a:34:5c:c4:a1:7f:2b:36:f8:cf:b4:23:69:03:a3:e7:5e:0e:
         9f:73:22:77:12:cb:7d:39:cf:45:ee:1f:f7:80:66:3c:cb:0a:
         db:86:ee:86:95:f3:6d:0a:65:df:01:4f:38:67:bb:e0:86:39:
         a7:3f:82:b8:58:b5:3b:39:5b:d5:11:4b:b2:1b:5c:c6:93:98:
         e0:46:bd:e0:8c:d1:bf:5a:fa:fc:5e:a1:d5:6a:1b:72:d0:7c:
         a8:34:59:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:52:35 2025 by rpki-client