Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/4b30ad89-116c-3528-9808-423be92dcb42.roa
File:                     4b30ad89-116c-3528-9808-423be92dcb42.roa (raw, json)
Hash identifier:          xhRKf6KdMKsLehonHziQZJTEQpBt0pyxH1nTqUml8ic=
Subject key identifier:   84:8D:83:B2:D6:2C:9E:95:F5:63:62:64:A3:46:4B:21:D7:5F:D5:25
Certificate issuer:       /CN=d1323e63-bc87-48fa-aebd-d6c6f1b01ef5
Certificate serial:       010D0C9F43285849C20A21FA0851FC3165DD4180
Authority key identifier: 80:01:2E:93:9F:2C:7B:65:CE:1A:79:3B:CE:88:C5:4C:A1:92:9A:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/4b30ad89-116c-3528-9808-423be92dcb42.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        199.175.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:21:fa:08:51:fc:31:65:dd:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1323e63-bc87-48fa-aebd-d6c6f1b01ef5
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=08d7961b-5b31-48ac-a924-050179d448fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:c9:87:0d:3b:c0:50:5c:cc:fa:4a:64:b9:
                    2f:f7:60:7d:d1:e3:11:18:e0:8c:64:7c:bd:e1:76:
                    87:c8:b4:80:c6:2b:52:d3:c4:bf:76:f0:5f:e3:42:
                    ec:4e:82:86:bf:de:ca:06:7f:60:c6:92:90:2d:2d:
                    08:b5:ce:67:f3:1c:97:03:64:3e:11:c0:55:6b:42:
                    00:65:98:8a:4e:51:4e:19:57:24:9c:c6:3b:51:91:
                    9e:21:3b:68:4b:ce:02:b9:ec:41:50:84:65:f3:27:
                    8a:b0:3f:58:51:e3:c4:85:ee:9a:dd:01:df:88:16:
                    7a:2f:8e:c4:9e:68:33:a3:ae:0a:79:0b:be:bb:df:
                    6d:a2:e8:7b:63:9d:0b:de:76:32:44:83:4f:11:1c:
                    e6:eb:82:53:f2:34:48:de:eb:4c:31:67:19:25:54:
                    e4:8b:0c:6c:20:66:31:de:95:5e:92:25:1b:6c:74:
                    47:c1:0b:72:45:b5:b8:ec:72:0a:49:4d:90:00:a0:
                    17:95:cf:7b:8d:35:bf:31:9e:0e:92:65:c7:21:07:
                    7b:d9:fd:43:46:1f:22:68:2b:77:94:ed:a1:95:bc:
                    12:1a:98:66:57:10:da:ff:e8:72:a7:cf:e0:79:a1:
                    13:88:18:c0:41:bb:2a:92:0f:7d:9b:12:67:48:3f:
                    93:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8D:83:B2:D6:2C:9E:95:F5:63:62:64:A3:46:4B:21:D7:5F:D5:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/4b30ad89-116c-3528-9808-423be92dcb42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.crl

            X509v3 Authority Key Identifier:
                keyid:80:01:2E:93:9F:2C:7B:65:CE:1A:79:3B:CE:88:C5:4C:A1:92:9A:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d1323e63-bc87-48fa-aebd-d6c6f1b01ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:d4:10:49:3b:de:e8:d4:14:72:7e:14:58:d9:77:84:36:9a:
         63:70:c6:d1:24:60:0c:f3:a8:2e:0c:4f:8c:84:fa:3c:30:93:
         de:3f:0a:d1:9f:73:e4:be:8d:fe:d6:21:ef:2e:f0:d8:a8:04:
         6b:c6:50:4d:4b:f4:c1:eb:3a:2b:77:63:e3:09:a3:51:40:87:
         e1:72:ca:22:ea:18:d7:89:c7:35:fe:b4:2e:f8:b8:f9:18:2b:
         b3:6f:b3:32:37:10:f4:c8:b7:50:5c:92:6e:88:4a:fd:df:62:
         8a:d6:58:ff:63:77:57:49:27:39:2c:fa:19:c6:d5:8a:cb:71:
         b7:eb:81:c3:11:ca:23:10:78:57:b2:2d:28:19:9e:cd:69:15:
         ba:6e:74:80:fa:5b:8f:b0:0d:01:76:63:9a:d9:b0:ea:27:5d:
         65:97:bb:87:37:ca:80:25:01:28:98:30:49:f4:88:64:fb:81:
         1f:3a:7a:10:a4:71:e5:9f:fa:13:7a:3b:29:24:92:a8:e7:7b:
         04:ec:11:2a:38:26:d0:8e:75:ad:51:70:4a:f0:c9:d3:b8:20:
         23:1b:73:23:ff:8a:5c:18:71:d8:01:51:7e:77:b9:cc:e1:52:
         86:b1:69:ba:d1:b3:80:b5:12:6b:8a:94:f2:fd:22:6f:ca:01:
         c5:29:26:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:21:12 2025 by rpki-client