Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/aba5abac-4660-3a9c-a43a-78c1329525af.roa
File:                     aba5abac-4660-3a9c-a43a-78c1329525af.roa (raw, json)
Hash identifier:          jRJoFhiGlq+FlJIIq9Vb8W7b92KrM2T62S7zxlm9OqE=
Subject key identifier:   A9:A3:E1:C9:82:F6:54:DF:9D:82:C4:01:B3:30:59:3A:EE:B6:84:E4
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285849D42FA1546A9F9242D6F66B40
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/aba5abac-4660-3a9c-a43a-78c1329525af.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33072
IP address blocks:        199.6.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:a1:54:6a:9f:92:42:d6:f6:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=efbd61d9-b33e-475b-8895-a24a6971f9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:50:00:5f:b3:ff:73:0d:12:62:cb:35:8f:03:
                    d4:b9:87:1a:e0:75:1e:89:f8:f3:40:34:de:2d:0d:
                    5f:ca:ae:b9:c9:c9:36:c5:27:f5:9a:ed:37:7a:af:
                    ab:4e:54:94:df:a7:50:4b:6d:3a:4f:5e:61:3e:b4:
                    6b:d3:37:28:8d:5f:b4:0c:da:1d:5a:8f:35:3f:eb:
                    4f:07:f9:d3:85:59:00:d0:6d:21:b2:1d:9a:85:5d:
                    b2:cf:c1:51:ac:c4:96:e9:6e:0c:a6:f3:4b:29:6c:
                    69:da:26:fe:bf:e5:3d:19:1e:f2:72:33:22:05:9b:
                    f9:3a:3e:bf:f2:8e:fa:5c:b4:27:5d:de:0e:f0:f0:
                    dd:f7:fd:d5:d4:ba:76:4b:6e:41:8b:b2:89:92:63:
                    68:c5:77:eb:14:4e:b2:c3:cd:d0:45:b5:f3:fe:f9:
                    d7:07:84:74:77:0a:e8:e3:2a:7f:68:a4:93:0d:fa:
                    9f:e4:d7:9f:80:81:ea:17:5a:09:32:c7:ed:90:95:
                    d4:8a:84:fd:ba:95:69:70:76:6b:cf:04:a6:79:09:
                    96:7c:6e:9f:76:7b:3b:c0:a5:c5:02:3d:8e:f7:be:
                    20:39:c9:79:56:f4:01:91:54:92:18:33:01:bd:ee:
                    2a:fe:8b:e3:91:81:52:c9:a7:9c:88:b1:3f:33:43:
                    76:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A3:E1:C9:82:F6:54:DF:9D:82:C4:01:B3:30:59:3A:EE:B6:84:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/aba5abac-4660-3a9c-a43a-78c1329525af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:52:3a:a8:6c:b1:33:32:85:bf:57:df:5b:02:97:09:29:32:
         41:09:01:72:1c:42:de:56:b2:3c:89:b4:3f:a4:17:c3:87:f3:
         fd:7f:d5:f8:2b:04:07:20:10:3e:0a:e9:58:52:b8:29:90:0f:
         7d:c9:3a:8f:93:3f:36:d5:e0:43:00:8e:ee:f4:8f:41:a4:c4:
         bd:98:24:ed:7f:d0:77:60:bb:64:b5:5c:ef:6a:43:a3:38:20:
         24:1b:7a:cc:bd:87:86:82:02:03:40:67:9d:ab:d5:8c:f1:9d:
         c9:4c:55:b4:71:23:94:07:2f:68:ff:5d:14:6f:d2:6d:e3:1f:
         76:5f:87:47:59:f4:cb:c4:0b:28:f8:e5:2c:b0:72:17:a6:71:
         ef:f3:30:bf:5b:22:85:64:22:14:7f:50:6e:db:52:8c:5f:75:
         e8:b7:4b:4a:48:90:de:22:61:a7:0b:a0:83:d8:57:b7:44:43:
         7a:b7:53:59:6c:bf:93:d8:73:e4:2d:96:db:cc:c8:24:cc:42:
         e0:ac:53:b8:19:cd:70:6e:82:7b:b2:10:b2:40:db:59:f5:f1:
         c2:47:ec:5f:2c:58:a5:49:de:03:e8:92:78:20:1f:0c:7a:a9:
         95:56:58:42:a4:3c:39:e5:fd:45:0c:0a:3b:25:2c:9c:71:aa:
         fc:bc:05:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:55:24 2025 by rpki-client