Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e7892961-7225-31aa-a19f-633419ec2b31.roa
File:                     e7892961-7225-31aa-a19f-633419ec2b31.roa (raw, json)
Hash identifier:          +Y4Ecg+bkc3k2UnFXgiS1vK3b9RGMXe+0sA0CNWM9Yg=
Subject key identifier:   CA:7D:62:D1:A2:36:2E:BD:84:14:C1:65:07:68:73:1E:33:B3:40:7A
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F4328584A3CE02248698967E88BABE7F8
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e7892961-7225-31aa-a19f-633419ec2b31.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     36184
IP address blocks:        217.10.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:22:48:69:89:67:e8:8b:ab:e7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=14f68445-c4eb-4a96-b4e0-9c5761085358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:ba:8f:5d:3c:76:bd:b4:3f:28:43:7f:f8:
                    0e:82:ce:4a:69:41:6b:d3:09:d7:74:88:58:9a:7b:
                    7f:98:85:26:51:b1:f5:60:49:19:42:c2:0c:f3:6f:
                    d1:0d:b0:14:84:cb:5f:d8:48:04:b0:3b:81:d3:d3:
                    47:6c:41:90:ed:e4:97:f9:e8:51:df:89:11:ff:61:
                    11:b5:07:09:06:a1:c8:74:c0:f0:48:8c:04:b7:a8:
                    6a:aa:87:5e:d7:a6:52:6f:c5:b5:f3:fd:88:37:8e:
                    ac:15:6a:d6:c1:7c:18:36:f6:5a:6a:c5:da:e8:df:
                    c4:d2:4b:1e:65:2c:41:d1:a5:25:c2:44:2d:ca:7b:
                    ad:56:e8:ec:7c:2e:54:e6:76:66:f8:9b:a4:91:80:
                    1c:8f:16:00:04:36:20:89:b5:71:8b:25:39:0c:8f:
                    e9:5c:b4:bd:5b:56:25:f8:38:53:e8:27:64:1a:da:
                    04:f7:1f:89:dd:e0:48:bc:63:fd:8b:d2:f3:0b:0d:
                    58:e4:fb:4e:53:29:c7:bc:d0:69:8f:75:62:82:ee:
                    df:ef:a4:d8:43:21:78:57:92:e0:60:02:2a:8f:5f:
                    da:b8:2d:2e:65:3d:29:7e:3b:6b:84:b5:d8:99:0f:
                    70:e5:c6:36:36:f3:33:d5:33:62:ea:de:df:37:4a:
                    ed:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7D:62:D1:A2:36:2E:BD:84:14:C1:65:07:68:73:1E:33:B3:40:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e7892961-7225-31aa-a19f-633419ec2b31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.10.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:77:91:9e:64:2c:7e:b8:e9:18:c3:c3:0d:98:8d:5c:61:9a:
         11:65:94:2d:92:0a:a0:d0:66:74:d7:8e:42:16:d4:37:61:9f:
         1f:32:63:a7:c8:75:68:8c:56:2f:39:01:e2:31:b1:c2:5d:86:
         b3:48:75:04:74:5d:d2:42:b2:af:7a:ac:df:61:31:1d:97:4f:
         36:79:37:59:e2:d8:75:db:3a:4b:19:c4:57:76:6e:fd:ef:6c:
         72:0f:ff:90:8e:32:5b:2c:ae:e6:0d:30:7b:8a:43:40:af:fa:
         c5:20:8d:1c:70:b5:03:29:19:2f:91:98:35:4b:ad:88:c9:b3:
         cb:6a:65:60:56:99:2c:be:6b:27:e3:01:06:83:8d:3b:9b:c6:
         58:a3:39:24:d8:a4:a4:41:49:40:00:e2:0f:2b:96:54:cf:cd:
         58:a4:9e:3b:85:ca:a5:12:94:96:ca:4c:28:1e:d2:20:b6:94:
         78:fb:98:65:2b:34:10:32:8a:5c:47:85:ce:96:d0:07:4d:d3:
         4e:60:ad:d8:d7:57:73:d0:83:63:bb:16:42:63:d7:b0:09:76:
         64:9c:e9:7f:3a:45:aa:c1:77:1f:ab:c5:3f:72:30:e6:6e:13:
         2f:d4:21:71:92:3f:2d:7d:7d:7c:a1:62:4a:33:6d:28:07:27:
         44:06:ec:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:06:52 2025 by rpki-client