Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/47ffb887-3489-3759-98ab-1771ce7903db.roa
File:                     47ffb887-3489-3759-98ab-1771ce7903db.roa (raw, json)
Hash identifier:          1eMCdGXa13jli40+3wHfnKZvWHfJlYEBRBhIzuPL6Sw=
Subject key identifier:   AC:5A:66:7E:B8:D8:98:67:D2:9A:9F:1A:B3:52:22:CD:E8:09:BB:43
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584A34801D7C699D92F73079A680
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/47ffb887-3489-3759-98ab-1771ce7903db.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     4540
IP address blocks:        205.233.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:1d:7c:69:9d:92:f7:30:79:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=2c1f74d8-fcb3-421b-aa43-2a8cf831adf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:10:a4:dd:02:aa:8e:08:5d:ac:8a:6f:8a:96:
                    cb:5b:d9:e7:50:34:a7:59:88:4d:28:4b:0e:d2:bc:
                    77:49:10:32:2e:7f:84:2c:ee:57:ba:80:ad:4a:96:
                    64:80:d7:3d:6c:aa:e9:78:93:54:b8:77:d2:da:56:
                    07:15:09:81:39:1c:bd:fb:aa:eb:3f:8b:f4:45:bf:
                    ea:be:89:3d:3e:7f:f8:51:fd:d6:de:49:d2:15:3c:
                    94:1d:e7:32:21:cd:c7:50:33:cc:6d:71:8c:10:2c:
                    fd:38:77:99:58:ce:c2:1a:8f:7d:dc:b6:dc:87:8c:
                    a4:cf:b5:7e:3e:87:dd:84:f9:a3:5e:9a:cf:e8:9f:
                    f8:9d:8c:c9:a2:91:5b:3f:40:1d:7f:13:a1:9f:9a:
                    43:1a:d3:9a:08:5a:56:e3:34:c9:06:ee:3b:05:39:
                    97:05:60:92:00:cc:99:d2:51:35:1f:7a:a6:68:1d:
                    7b:b7:e1:84:01:76:80:b3:9d:0f:22:f8:54:e8:b6:
                    ec:ef:0e:5c:1b:a7:c1:cf:2b:f5:e5:86:0d:13:81:
                    bb:90:a6:46:6a:aa:36:4b:a4:62:84:7b:f5:b3:df:
                    aa:00:f0:88:23:dc:d8:0f:03:34:fe:68:a3:bf:8a:
                    2a:2d:f7:62:ab:63:62:5a:af:90:fd:ee:f8:e6:ea:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5A:66:7E:B8:D8:98:67:D2:9A:9F:1A:B3:52:22:CD:E8:09:BB:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/47ffb887-3489-3759-98ab-1771ce7903db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:c2:c8:5d:31:4f:9a:e8:c1:1c:a9:10:d4:f3:04:50:81:d0:
         4e:62:71:da:8c:4c:ef:3c:2e:2c:cc:15:16:46:c8:68:31:d8:
         cd:cc:09:92:de:a3:6f:fb:40:bd:81:b4:dd:c3:ff:b4:0d:ac:
         35:c8:8e:bc:2f:09:f4:ee:d8:86:ab:01:a1:52:b3:98:54:4a:
         c6:f7:46:df:eb:50:fc:da:e0:ea:83:55:e8:aa:65:15:0e:aa:
         b5:ea:54:44:aa:95:60:25:22:5a:9e:a5:fc:b3:ba:b0:11:5a:
         b8:e2:f2:95:c0:2c:aa:6b:06:b0:c8:4d:22:d4:fe:c9:c3:24:
         62:5c:ec:67:1c:e4:12:5a:a2:29:bf:2b:75:89:d6:32:e7:dd:
         5f:79:f1:18:b1:ae:e6:c9:23:52:7c:dc:f3:50:f3:9a:85:da:
         fc:24:d0:f2:4a:13:1a:cd:1d:4a:1c:7b:96:90:2d:89:c3:7a:
         dd:ee:53:c9:d5:df:81:39:0b:1d:d5:6f:89:44:2a:6e:ed:06:
         9b:b2:f6:83:69:f9:e4:74:55:dd:c0:60:24:cd:58:99:99:c6:
         35:4a:2e:88:df:48:01:62:13:61:f3:09:b3:61:09:38:15:9d:
         a6:c0:f9:a2:c2:e6:34:c1:ca:51:b1:3f:b1:4b:49:1e:57:fd:
         7f:bb:5a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:29:21 2025 by rpki-client