Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/f7762066-c7c8-3be6-a1a3-dea0af5dc1c1.roa
File:                     f7762066-c7c8-3be6-a1a3-dea0af5dc1c1.roa (raw, json)
Hash identifier:          OPt+/OfEnaKC6/+fyQyqpem1PvJctlz+www+Ylg7ss8=
Subject key identifier:   D5:99:02:37:74:50:1A:CD:B6:63:F3:05:39:EC:BA:C9:87:93:E0:93
Certificate issuer:       /CN=d53c327d-4db5-439b-a376-ef8e86042891
Certificate serial:       010D0C9F4328584A146573025BD1986AAF33FA00
Authority key identifier: 2B:70:B1:C4:53:85:E2:E3:19:EB:71:97:EC:C2:D3:99:E3:80:05:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/f7762066-c7c8-3be6-a1a3-dea0af5dc1c1.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     36427
IP address blocks:        143.229.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/d53c327d-4db5-439b-a376-ef8e86042891.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/d53c327d-4db5-439b-a376-ef8e86042891.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:73:02:5b:d1:98:6a:af:33:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53c327d-4db5-439b-a376-ef8e86042891
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=3f307f68-f9d0-4b0d-b69c-2f56a91fdb6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:0e:d2:f7:7f:21:69:65:d2:be:8c:38:bb:
                    cc:0d:09:fc:d1:19:3b:3a:4e:4a:7f:d6:5c:b8:87:
                    07:fa:4f:86:b4:74:46:ff:53:d5:00:6d:bc:18:1c:
                    da:6b:ee:81:25:c0:dd:e8:88:39:be:a1:dd:dc:df:
                    fa:47:e6:f8:2f:07:52:14:ef:2d:b1:bc:ad:d7:2a:
                    bb:c3:29:21:52:47:07:b8:d3:75:04:ae:7a:5a:56:
                    30:a2:6a:47:80:ea:22:f5:9e:ba:91:b1:c5:1f:a0:
                    ea:87:ab:4a:a4:f6:4a:c2:98:5f:f6:c9:b1:5a:fa:
                    d3:b2:19:42:3d:47:5f:e6:6c:29:84:c1:cd:40:88:
                    44:7c:29:26:43:28:a1:45:01:71:8d:56:0b:b3:62:
                    1c:4e:7e:2f:d6:49:00:f2:38:3b:79:8a:95:d2:8a:
                    a6:ec:09:18:fd:e4:02:c5:5b:75:76:d7:42:3a:f9:
                    ae:12:df:29:3c:62:be:19:45:e3:1f:a9:27:03:d0:
                    6b:31:07:d5:5a:e3:f3:67:5a:ad:9f:d6:f8:69:f9:
                    e1:6c:82:11:14:3d:63:76:29:24:de:e6:a4:d4:9d:
                    8c:c0:1e:fe:ab:4b:f9:8f:02:5a:20:aa:e2:79:c7:
                    97:8a:5e:6f:fb:d7:1a:ad:bd:1d:ff:c1:82:bc:00:
                    92:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:99:02:37:74:50:1A:CD:B6:63:F3:05:39:EC:BA:C9:87:93:E0:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/f7762066-c7c8-3be6-a1a3-dea0af5dc1c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/d53c327d-4db5-439b-a376-ef8e86042891.crl

            X509v3 Authority Key Identifier:
                keyid:2B:70:B1:C4:53:85:E2:E3:19:EB:71:97:EC:C2:D3:99:E3:80:05:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.229.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:62:b1:96:09:51:af:75:e4:75:93:98:e0:56:48:e3:a6:03:
         b7:67:7b:59:71:5b:25:6d:9b:bd:43:49:f7:1f:22:91:02:34:
         bb:f4:49:0f:6e:c1:d6:fa:9e:a0:2a:ef:8e:20:c4:58:c2:a6:
         b5:ec:3e:97:43:c0:e1:b3:19:f9:46:0c:94:6f:c1:03:ea:a2:
         ff:d7:ae:17:ca:bb:59:b2:08:cb:2a:3d:15:b5:dd:1c:17:c6:
         a0:d9:32:a9:d3:c0:ab:90:27:6d:73:4f:6d:1d:42:85:1f:ef:
         dd:08:1b:62:09:fa:d7:b7:d2:76:27:07:10:85:81:5e:87:56:
         e1:32:1b:88:45:b9:bc:60:23:51:43:f3:e4:5a:fa:ec:96:05:
         ff:45:cb:35:94:8d:67:d8:47:19:5b:80:f8:b7:b7:8a:78:93:
         54:d2:56:97:ff:1e:90:0c:cf:bc:2a:03:e9:29:f7:db:01:1a:
         48:18:94:99:17:0a:56:90:38:1a:cf:b0:66:7e:84:f7:83:64:
         e3:6f:18:3f:4c:27:7e:4e:48:f7:61:de:df:d9:94:ca:c4:77:
         95:eb:ae:4c:d8:53:a8:aa:e3:a6:77:b5:d5:d2:e6:1c:58:33:
         df:ff:ae:6a:a4:bb:5e:85:3f:aa:c6:e6:08:8f:0e:7d:da:09:
         56:a2:5c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:04:16 2025 by rpki-client