Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/bf24f296-392a-39e9-82dc-54c0877f9775.roa
File:                     bf24f296-392a-39e9-82dc-54c0877f9775.roa (raw, json)
Hash identifier:          H3BQud8qUJJZSjgvhdUHUGH79Vd0t7Gf1Cb9nErAhT8=
Subject key identifier:   0E:A8:53:12:03:6E:1C:73:19:56:EE:16:78:5A:B3:CB:BD:75:CC:7E
Certificate issuer:       /CN=47ab7477-38d9-400b-b1ce-4a8e5418b81d
Certificate serial:       010D0C9F43285849FF751559E76CB037355394A0
Authority key identifier: 07:FD:B3:62:C5:68:00:2F:AB:06:5A:F8:E5:8D:41:2F:27:17:16:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/bf24f296-392a-39e9-82dc-54c0877f9775.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     26475
IP address blocks:        162.254.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/47ab7477-38d9-400b-b1ce-4a8e5418b81d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/47ab7477-38d9-400b-b1ce-4a8e5418b81d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:15:59:e7:6c:b0:37:35:53:94:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ab7477-38d9-400b-b1ce-4a8e5418b81d
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=cfe78e42-63a7-496b-98f7-29c777929467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:78:6a:9b:4a:c4:b6:9a:79:38:e9:18:20:
                    54:19:eb:29:a3:ab:15:f4:16:df:eb:fe:6e:c5:7d:
                    31:32:0e:22:61:3d:33:46:d1:1a:2c:03:5d:a4:24:
                    e0:70:a8:09:92:61:9a:87:e1:a1:bb:49:de:64:b4:
                    0a:69:bb:4a:85:f3:3b:e0:20:1e:ab:13:90:af:c9:
                    0d:76:2a:76:4d:d9:8c:5d:ac:81:0d:61:9b:5d:53:
                    dd:a5:27:e2:9a:d3:68:6a:49:99:c7:1e:23:68:a5:
                    15:36:26:68:0a:8b:18:94:c8:2d:14:50:d5:cc:ca:
                    50:5f:c0:8e:b9:89:34:b9:44:79:c4:cd:7a:9d:0d:
                    80:23:bc:f5:00:dd:44:81:06:b6:05:ef:f3:3b:f1:
                    f8:5f:b0:b7:cd:86:22:78:c5:61:4a:20:ef:22:00:
                    07:98:be:d0:d7:9c:86:20:7b:05:20:32:bd:de:18:
                    f6:b6:ef:ef:b0:5a:b9:6d:d6:3c:73:69:d5:46:cb:
                    a8:82:dd:ad:ed:3a:c8:69:36:98:45:f1:c8:85:67:
                    df:13:3d:4b:6d:a7:36:85:aa:19:56:b5:c1:43:f9:
                    a9:b4:7e:ad:26:e2:de:92:84:d5:4b:e2:fe:8b:ae:
                    6a:8e:72:9a:e3:da:f9:16:91:8f:af:66:c7:e4:73:
                    2d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A8:53:12:03:6E:1C:73:19:56:EE:16:78:5A:B3:CB:BD:75:CC:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/bf24f296-392a-39e9-82dc-54c0877f9775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/47ab7477-38d9-400b-b1ce-4a8e5418b81d.crl

            X509v3 Authority Key Identifier:
                keyid:07:FD:B3:62:C5:68:00:2F:AB:06:5A:F8:E5:8D:41:2F:27:17:16:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b7:6f:e0:a8:8d:79:be:2f:09:99:1e:21:0b:ed:a6:13:6a:
         3e:63:e5:99:b6:c9:fd:08:d1:96:e5:54:fa:e4:bc:08:3a:20:
         a5:bc:ec:e9:57:a8:1f:1f:14:c2:e9:ae:16:30:ff:fb:c1:0f:
         5b:47:88:3f:14:20:67:6f:8a:b9:f2:a9:3d:7d:88:a4:d7:9b:
         9a:ed:5c:c3:12:ea:7d:d1:95:6d:96:43:8e:1d:c8:44:0e:dc:
         e3:d2:5d:57:5e:62:5a:6c:22:94:0c:4a:ff:19:cf:e3:e8:a5:
         33:da:80:e8:b5:30:0d:a3:13:ab:97:d0:a9:7a:57:cc:4f:bf:
         6d:06:92:4c:da:46:8e:75:df:64:83:e3:3d:98:f3:ce:d7:ad:
         a9:02:d6:42:48:c4:6c:7b:b8:f2:5f:28:a6:3d:24:56:e4:8e:
         b9:38:c9:b0:e1:12:10:51:f0:7f:1c:e1:fe:70:66:9a:94:42:
         fe:ef:34:31:3a:21:ad:f7:5f:1b:5a:bf:1a:7a:c0:45:83:d2:
         1e:fa:87:bd:26:cc:eb:cb:f5:5c:56:ad:0c:25:94:ec:32:6d:
         dc:e0:b4:67:39:62:c2:0e:4c:36:a7:9f:b4:60:f8:0f:a7:e4:
         3c:d1:8a:72:0b:82:cf:13:71:ee:a5:38:20:9f:7b:77:1f:ae:
         5f:d1:4d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:13:08 2025 by rpki-client