Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/d379290d-66d2-34d2-a150-78081960fa2b.roa
File:                     d379290d-66d2-34d2-a150-78081960fa2b.roa (raw, json)
Hash identifier:          46c1JAsStI9w0p4Wjo4XpGO0V9K85uGb7Kt2hIwWw4g=
Subject key identifier:   30:DB:70:50:D1:1A:D0:3A:68:B4:56:E1:6F:B1:FE:65:7D:F2:86:10
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285849ED4FD3242F33055DACFC2980
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/d379290d-66d2-34d2-a150-78081960fa2b.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     6128
IP address blocks:        173.251.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:d3:24:2f:33:05:5d:ac:fc:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=9f18c558-2d0e-439e-b7ca-f4242ff75bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:61:01:71:6b:c2:90:0f:e6:7e:ae:8c:42:
                    33:6e:07:85:c0:7f:c7:bc:2a:41:68:4a:cf:3a:84:
                    c6:21:a5:c1:0c:bf:8e:86:61:7e:75:01:aa:63:2d:
                    c0:27:3c:f9:2b:94:4d:dc:24:8f:f5:79:35:68:4b:
                    0f:82:a9:e9:60:8b:55:7d:f3:a4:b5:1c:88:93:b9:
                    05:b2:56:46:3e:2e:94:50:1e:7b:7b:b9:7f:05:15:
                    0b:22:f8:b9:9d:bc:c7:fa:1f:12:66:e0:ac:c7:94:
                    0f:88:f8:33:e9:3a:ed:9a:62:d8:37:c1:fb:11:d3:
                    4a:65:bd:a4:e2:bf:c3:94:ba:07:be:73:27:f5:17:
                    35:5d:d4:5d:50:79:56:16:d1:db:0b:56:49:51:c4:
                    b6:12:df:ae:5e:66:73:9c:d2:d7:2b:cd:f4:66:5a:
                    00:ea:c3:ae:99:c6:2d:8f:01:3f:93:92:4d:d0:36:
                    e5:25:c4:23:4e:14:ca:19:09:a7:1f:f8:ec:0a:14:
                    ec:60:e2:f1:96:f0:f3:d9:c5:22:2f:87:c6:31:3a:
                    5e:ef:46:09:bd:99:10:ce:e4:63:48:13:bb:f7:c9:
                    85:11:2e:9d:e3:19:aa:d4:44:a0:ed:1e:86:37:7d:
                    fb:70:27:f3:fa:a6:7d:24:46:71:b1:81:d7:89:99:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DB:70:50:D1:1A:D0:3A:68:B4:56:E1:6F:B1:FE:65:7D:F2:86:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/d379290d-66d2-34d2-a150-78081960fa2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.251.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d9:95:67:63:32:f9:9d:d5:3f:17:2b:61:7e:9c:99:36:d2:
         a7:9e:69:11:0c:cf:44:3c:c1:21:a3:12:05:0b:61:df:d9:81:
         bd:7b:e1:5c:f9:23:1a:dc:6d:72:da:09:42:6a:a3:11:1f:c7:
         7a:c2:34:ca:f0:b9:01:0f:26:a7:90:57:e6:d2:22:be:6f:b9:
         f2:80:23:e5:e4:14:ec:44:8b:98:04:e8:ba:42:fc:41:3a:6c:
         5c:89:fa:10:f7:db:3c:fd:ec:90:09:76:3a:dc:e4:75:4d:69:
         52:c9:61:95:93:0f:e4:91:59:63:3d:aa:f6:0c:f5:1f:74:0f:
         e2:a4:e8:1d:56:da:4e:84:75:20:03:fd:f8:42:08:5d:98:96:
         c3:eb:bb:8a:83:63:fe:2b:a8:7f:71:4e:07:1b:33:d5:71:c1:
         be:48:a0:41:02:92:a4:e4:12:16:db:ef:c4:69:d5:7f:39:d8:
         22:b6:87:2e:06:d1:7a:a8:51:42:ed:54:a3:c8:fb:7b:f7:e8:
         cf:5f:a2:55:87:20:23:b7:f2:45:2c:59:3a:29:eb:67:fa:22:
         a3:7d:e1:eb:68:81:db:25:5a:bb:59:50:d4:70:00:1c:5e:25:
         7e:1a:95:e4:71:64:3a:52:c6:02:29:c7:68:17:44:80:bd:c9:
         f4:42:a4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:19:13 2025 by rpki-client