Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/0177c457-8123-3122-9946-667a61adf363.roa
File:                     0177c457-8123-3122-9946-667a61adf363.roa (raw, json)
Hash identifier:          uXg6/nxcv5641G6nUx8A0v1riHe8DYqke3vnBhUuL4Y=
Subject key identifier:   28:B9:61:DF:33:4E:3A:C7:4C:F1:2E:35:DE:CC:AC:7A:A1:60:41:EF
Certificate issuer:       /CN=a8f51da8-e3ca-4fc9-acce-94103c57aebc
Certificate serial:       010D0C9F43285849EEB50169380EDD387834D880
Authority key identifier: 3A:72:E5:B7:27:34:1C:D3:AE:09:F2:9E:7D:BF:99:D5:A0:41:FD:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/0177c457-8123-3122-9946-667a61adf363.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     62862
IP address blocks:        81.21.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:01:69:38:0e:dd:38:78:34:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f51da8-e3ca-4fc9-acce-94103c57aebc
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=98058256-3add-41ed-b009-a4ab9ba6ea9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:88:f5:e6:5a:3c:b1:13:da:18:0f:aa:c9:96:
                    33:59:2e:05:5f:2b:c4:fd:b6:64:72:88:92:fd:b4:
                    2f:28:f5:c9:13:43:f2:f3:81:f1:2a:bf:48:06:03:
                    0e:e9:fc:86:cc:af:ba:bc:20:f4:67:26:15:eb:71:
                    d9:03:09:37:95:41:71:f2:bc:01:5a:a9:06:ba:6a:
                    0d:18:6e:ca:10:4c:4a:f2:92:8b:19:83:d0:3f:ef:
                    a5:9b:d2:9a:25:16:84:a0:6c:97:84:84:20:86:90:
                    9d:f2:a8:3f:06:73:8e:f5:04:4e:e7:dd:f5:63:0c:
                    1e:6d:16:fb:f2:15:01:83:13:0c:3c:b2:bb:34:dc:
                    2b:de:9a:db:92:ea:f3:ba:77:c0:ea:29:92:8f:30:
                    c7:b1:76:bd:7c:64:35:07:01:75:55:d4:be:09:7b:
                    18:6b:ef:8f:6e:3f:a2:42:75:68:da:96:8a:47:96:
                    23:0f:16:76:f0:2f:96:f3:69:03:b4:b5:36:a6:ff:
                    71:a0:2f:10:d6:4c:97:76:c6:86:5e:55:cd:c9:fa:
                    7e:94:5b:2e:a9:a3:5c:ab:f3:f9:8b:6e:25:ec:ee:
                    2d:db:62:aa:ce:f9:23:2d:ad:59:d2:c0:1d:d9:3d:
                    db:cb:b8:4d:ab:58:6c:97:9e:1e:c0:36:57:69:7e:
                    54:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B9:61:DF:33:4E:3A:C7:4C:F1:2E:35:DE:CC:AC:7A:A1:60:41:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/0177c457-8123-3122-9946-667a61adf363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.crl

            X509v3 Authority Key Identifier:
                keyid:3A:72:E5:B7:27:34:1C:D3:AE:09:F2:9E:7D:BF:99:D5:A0:41:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.21.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:51:c0:06:4c:a6:3a:c6:d8:ea:c0:84:8b:a6:f5:89:ce:b6:
         7c:45:2d:16:a1:71:27:ef:0a:c9:85:d9:9d:72:b0:ab:30:75:
         ff:8f:9b:65:36:ee:95:de:82:c5:58:84:d7:f4:23:a5:01:bb:
         67:41:b5:f8:35:59:a0:da:6c:60:c7:fd:f3:ea:70:50:67:a4:
         08:f1:19:e5:5f:98:3c:a1:01:06:ed:b8:8a:69:05:b9:88:80:
         73:90:cb:8d:2c:1a:02:97:61:5d:81:79:56:ce:52:ad:e4:04:
         ab:4e:ae:93:d2:4b:a0:3c:8e:57:e0:64:ec:cb:7f:7d:34:67:
         9b:de:e3:f5:78:55:d7:5b:94:bd:60:3d:d8:f0:aa:1a:a5:0c:
         20:b0:75:40:aa:42:b5:67:b6:f6:82:88:eb:aa:32:c4:c9:96:
         57:2b:c2:d0:ac:e2:81:54:df:47:e3:93:6e:0a:19:c9:c0:f7:
         48:a5:f3:05:99:67:e8:09:9f:ce:53:76:89:13:d8:23:f8:06:
         9e:f0:a9:9e:0c:86:67:2f:9f:87:c9:9e:f1:22:86:8b:b2:f3:
         78:31:5b:9d:46:70:c7:83:00:14:c9:96:7f:64:fd:7d:f7:15:
         bb:0c:0e:c0:e6:38:80:e0:0e:49:4d:7c:0d:32:e5:be:c2:7c:
         b7:d6:85:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:00:24 2025 by rpki-client