Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a01efa5b-614e-3d99-9b01-12a6e3f87492.roa
File:                     a01efa5b-614e-3d99-9b01-12a6e3f87492.roa (raw, json)
Hash identifier:          JaCSpOmdY2rWthS+6MFUkSfPdPIy80V0lQSAqJz+a8Q=
Subject key identifier:   43:6A:2D:B6:D4:2B:76:1E:77:EA:C1:43:78:B9:BD:3A:25:93:59:8F
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499AF476DB1C2A575F17472FE0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a01efa5b-614e-3d99-9b01-12a6e3f87492.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        173.181.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:76:db:1c:2a:57:5f:17:47:2f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=7042fdbc-a019-4b6c-a9d4-57e0fae70453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1a:6b:b1:fc:2c:e0:83:4d:2a:7e:2c:a8:99:
                    35:49:a5:88:79:75:a7:23:33:50:13:83:48:8d:2c:
                    88:12:03:e4:2a:d2:5a:3e:72:90:74:b6:44:7c:b7:
                    34:29:e7:9f:55:85:e1:28:d7:03:17:f3:40:cd:0a:
                    d9:3e:8b:2a:1a:2a:00:eb:bd:fd:83:57:5a:5e:a2:
                    ee:ca:e4:88:51:f6:35:e1:06:3f:0f:1d:54:54:a7:
                    0c:e8:96:9f:8b:e2:48:41:ae:be:27:a8:c5:b6:aa:
                    da:80:92:50:74:12:8c:18:20:91:d0:b8:4c:be:a1:
                    58:a1:97:5f:74:5e:60:5c:a8:52:d0:2b:1a:aa:00:
                    35:e0:ab:f0:c8:1b:14:08:63:e9:28:fd:6d:7d:44:
                    3c:6f:86:a0:ee:f4:c2:d3:8e:ba:73:9a:1e:a7:8a:
                    3d:51:9e:77:6e:ec:b6:e9:17:98:14:de:01:af:18:
                    48:2a:ab:0f:00:e2:db:8f:1d:c3:7d:c7:3b:62:32:
                    7f:c0:57:df:87:12:32:af:b3:c8:ed:4b:e8:d1:60:
                    88:d2:8f:24:93:21:b2:88:87:fb:92:55:dd:a9:8f:
                    1a:4e:79:eb:ad:f1:da:0a:0b:c4:15:22:54:1a:97:
                    90:74:be:84:1b:b6:0d:be:a8:53:19:90:c5:4f:7b:
                    1f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6A:2D:B6:D4:2B:76:1E:77:EA:C1:43:78:B9:BD:3A:25:93:59:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a01efa5b-614e-3d99-9b01-12a6e3f87492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.181.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:7c:10:4e:9e:a8:a2:d6:7b:90:48:73:b8:b1:dc:a6:2d:56:
         c4:77:2e:67:1a:93:67:4c:fa:26:f9:35:95:a5:25:d0:59:a0:
         5d:3d:69:a8:c5:64:21:ba:aa:2f:64:6e:cd:b0:59:d5:0a:79:
         88:81:6a:d8:60:50:f8:c3:db:a6:92:ae:61:2a:05:05:a2:28:
         3e:15:dd:01:b5:92:aa:5f:07:f2:3b:61:5d:30:ac:a8:00:e3:
         4f:86:4f:0d:56:de:1b:50:2d:62:12:28:7b:3a:c1:ab:d7:c7:
         10:e7:28:92:69:5d:12:bc:df:bc:96:db:9c:db:84:4b:a9:47:
         b6:29:77:0d:e5:90:be:68:7b:f6:e3:bf:06:8c:40:fa:8e:e1:
         12:74:20:62:66:58:44:90:c7:88:24:e1:ee:d2:5f:1e:5c:7d:
         c2:24:fe:48:7c:c4:25:f5:f8:b1:86:67:9c:59:28:c1:26:c0:
         b7:2c:a0:e7:90:77:e1:3b:f3:33:d8:1e:bf:1e:2a:71:b2:01:
         6e:40:dc:1c:ce:8d:6c:f9:31:d3:1c:c5:fd:24:17:72:ff:74:
         e0:58:bd:f9:37:90:08:f3:f0:52:c7:5f:5d:98:4f:be:9a:6d:
         f4:07:58:5e:a0:e1:5c:11:ec:39:65:04:93:53:52:a4:de:28:
         2e:5f:21:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:02 2025 by rpki-client