Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/f10dfbf5-eaf9-373a-9d5a-18534f287e39.roa
File:                     f10dfbf5-eaf9-373a-9d5a-18534f287e39.roa (raw, json)
Hash identifier:          5/BPrT5ZERNLod9kKiWiMC3+UQKmkNLSfd93rhc1YAA=
Subject key identifier:   90:0A:CC:71:27:A1:C5:2B:43:6C:E9:AF:94:9C:6C:D2:83:1F:76:C5
Certificate issuer:       /CN=ccfe663c-8878-4cc0-a772-17e76a493040
Certificate serial:       010D0C9F43285849D9EB7D0D8341A65693662300
Authority key identifier: FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/f10dfbf5-eaf9-373a-9d5a-18534f287e39.roa
Signing time:             Wed 14 May 2025 14:18:43 +0000
ROA not before:           Wed 14 May 2025 14:18:43 +0000
ROA not after:            Tue 12 Aug 2025 14:18:43 +0000
asID:                     0
IP address blocks:        199.176.72.0/24 maxlen: 24
                          199.178.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d9:eb:7d:0d:83:41:a6:56:93:66:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccfe663c-8878-4cc0-a772-17e76a493040
        Validity
            Not Before: May 14 14:18:43 2025 GMT
            Not After : Aug 12 14:18:43 2025 GMT
        Subject: CN=a0c9ca05-ad89-46ca-b447-87b14787b0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:68:2c:a4:ca:77:4e:57:14:b5:01:13:1f:
                    fc:76:98:7f:49:7c:70:5a:58:fe:dc:e6:62:da:0a:
                    45:af:d1:89:0b:22:18:39:09:66:41:6c:17:54:e2:
                    9e:69:04:99:ae:7a:60:8d:97:35:eb:12:d4:05:33:
                    bb:0c:6c:a3:20:0f:67:a1:e5:42:9a:b2:0b:73:db:
                    e5:29:27:46:0b:d6:d5:f2:71:a1:35:b7:bd:8d:60:
                    b0:75:b2:30:3f:f1:d1:08:46:01:fe:57:d2:a5:8b:
                    69:cd:97:ff:60:46:b3:19:37:21:96:b2:d8:66:0a:
                    23:81:be:ad:1a:38:67:27:ee:96:86:83:96:fb:bd:
                    7a:79:a5:cc:ce:d4:68:f6:1d:73:ce:4e:4d:05:42:
                    6b:f6:1b:d0:74:c2:bb:36:8c:f8:e9:54:93:66:c1:
                    ac:99:5b:7e:23:a2:07:97:f4:88:bd:99:17:0f:b1:
                    93:ed:9b:15:5f:c9:84:ee:c6:f8:5d:da:63:1e:1a:
                    ae:c4:b3:03:e9:60:fc:07:22:dd:42:0d:57:f8:a3:
                    68:0f:56:9b:b3:7f:73:c1:bf:e9:10:89:de:5d:76:
                    a7:28:1c:7e:08:0e:30:1a:93:f7:fb:8f:25:3f:90:
                    8d:76:d9:8d:9d:c3:3a:0d:78:3b:e6:32:75:0b:6e:
                    9e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0A:CC:71:27:A1:C5:2B:43:6C:E9:AF:94:9C:6C:D2:83:1F:76:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/f10dfbf5-eaf9-373a-9d5a-18534f287e39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl

            X509v3 Authority Key Identifier:
                keyid:FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.176.72.0/24
                  199.178.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4e:e4:2d:3a:1d:d1:31:c8:f1:dd:94:d7:e7:14:a1:47:36:
         5d:19:45:bb:b5:59:ae:9e:e1:55:c5:77:cc:2d:63:01:30:14:
         22:ce:f7:7b:18:fa:21:f6:1f:5a:d8:99:e2:be:73:ae:5d:9c:
         4a:be:91:67:18:6c:36:8c:52:fa:eb:47:6f:f2:7e:5a:4a:1a:
         b0:08:a2:bd:31:8a:d5:c6:15:53:b3:3e:d8:96:76:37:d9:ef:
         a3:81:a7:50:9c:29:a8:df:e0:aa:ae:ae:0c:b5:c4:6b:1f:e8:
         74:e6:d0:1e:44:76:f0:cd:ac:3e:fc:4a:99:71:71:d4:2a:26:
         8b:d7:46:61:1c:2c:6e:2e:78:35:1c:7f:80:ce:25:fd:46:1f:
         5f:01:75:e1:b6:93:b6:b7:cb:0a:95:20:80:52:90:11:fb:2c:
         cd:dc:1c:2c:bc:f6:60:19:50:19:b6:18:d0:4c:fe:3f:d4:cf:
         cc:ae:91:a2:a1:ff:73:bf:c3:24:ad:9f:70:3f:1e:61:1f:d4:
         e6:05:cf:cc:f8:48:51:c6:94:38:00:d1:e2:41:26:f5:3a:4d:
         24:d1:e9:ec:b3:06:ba:03:ae:f1:d4:85:37:07:65:3c:0c:6e:
         ba:16:0b:f6:bf:08:1e:3e:17:15:41:c7:a1:aa:c4:2a:ca:55:
         d2:e0:48:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:46:57 2025 by rpki-client