Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa
File:                     65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa (raw, json)
Hash identifier:          zzjsf8p9uz9ciMYctiAqVGxGGOJJLOm4ebzisEkb77w=
Subject key identifier:   17:81:D3:88:D2:86:D2:90:BA:F6:51:2B:23:8A:AD:BF:47:F9:43:3D
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F43285849F9DFD10C418E13D1BB8AC900
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     6079
IP address blocks:        162.250.96.0/21 maxlen: 24
                          162.254.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d1:0c:41:8e:13:d1:bb:8a:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=2c057643-0b49-4eba-9a3b-bf06be4df147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:54:8d:68:0d:d2:6f:b5:4e:95:3d:23:90:67:
                    2b:e3:c0:88:8a:23:19:2d:6c:fc:7a:e7:30:92:6a:
                    87:48:0b:49:c1:90:7e:de:a5:e0:e1:63:93:bb:9b:
                    96:cd:39:8e:2b:2c:87:d0:6f:3f:56:58:a0:84:6b:
                    bc:c0:3d:09:9b:d5:3c:c1:be:1a:33:f7:db:61:da:
                    ca:c5:8a:9e:08:44:e3:1e:36:fe:42:90:59:f8:74:
                    06:0b:a2:3b:26:56:bd:4b:b0:3d:a7:d4:91:c2:27:
                    2d:9c:18:34:d9:38:c1:ab:74:93:74:d5:0c:a5:f4:
                    b6:58:76:cf:d3:68:fd:cf:97:1b:ad:aa:68:5b:50:
                    0e:3f:b4:f8:c4:54:c0:ee:95:b9:16:10:f4:1e:8a:
                    35:d3:49:d5:50:b9:c9:de:b9:4a:27:f5:46:86:35:
                    8e:95:30:e3:07:0b:d5:e5:b3:e0:31:a3:8d:1c:cc:
                    03:79:de:c0:88:03:fe:e6:da:47:19:0b:1a:1c:92:
                    cc:45:f7:c5:16:72:d7:15:f7:e7:c6:fa:57:52:2c:
                    bd:f8:47:1b:16:f5:33:0f:7d:b1:9c:0a:95:07:8f:
                    be:00:8a:e0:72:9a:33:19:30:c6:2c:2f:1d:33:1c:
                    e0:3d:f9:d6:b6:a9:07:24:c7:64:ec:66:2a:ac:32:
                    47:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:81:D3:88:D2:86:D2:90:BA:F6:51:2B:23:8A:AD:BF:47:F9:43:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e6:1c:d7:df:e2:57:33:1a:ff:1b:0a:bf:68:09:25:15:80:
         f3:68:64:a8:1e:57:d5:be:3d:d5:71:ec:35:00:72:9d:84:15:
         c5:f3:0b:90:33:8d:9b:ff:94:06:c1:8f:6a:47:8d:4a:8e:91:
         1a:d6:f2:14:02:e1:d0:10:50:ab:c8:e0:93:9d:24:f1:86:a1:
         58:12:eb:08:38:98:0b:41:78:4d:b5:4a:49:7f:94:7b:64:2c:
         20:78:10:a9:e3:7b:71:23:81:8b:06:6a:3f:9c:45:d9:6e:4b:
         ef:99:3d:a6:7e:8d:a9:c7:c5:88:18:17:c3:a0:7d:ff:88:7e:
         e5:d5:e1:bb:7a:ae:8f:d2:aa:cc:38:83:fb:7f:29:91:19:3b:
         d1:c7:db:22:b3:d6:ff:19:91:b4:26:1d:92:c2:cc:02:ba:60:
         1d:74:38:d6:a2:eb:3a:c5:f8:4e:3d:86:d5:45:a3:dc:e4:5c:
         86:e5:48:78:2e:d5:c1:e3:38:e7:94:89:2e:6f:2a:16:bd:3b:
         84:ed:f1:b6:41:c3:e6:c3:fd:c0:c1:bb:18:5d:31:7a:fc:95:
         a5:9c:e6:60:8d:c5:e8:39:12:85:94:8e:54:b0:74:a8:27:ea:
         ce:e7:0f:74:3a:de:77:8a:d7:23:0c:d0:c6:67:2e:3f:82:c1:
         eb:33:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:13:11 2025 by rpki-client