Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/661d0e61-5138-389c-ac94-1b1c855e9970.roa
File:                     661d0e61-5138-389c-ac94-1b1c855e9970.roa (raw, json)
Hash identifier:          MVFVcZpIS9z6BOJ9WLE3LG/ygn3Bc/Mbdj1kkkY7+7E=
Subject key identifier:   67:A7:8F:F3:5E:A0:43:C8:AD:6E:CA:FA:61:B6:F1:42:E9:91:99:A9
Certificate issuer:       /CN=c6e1ed9d-801c-41b9-aa56-1da8ff79a65a
Certificate serial:       010D0C9F43285849C904F351F24277922D3A5C80
Authority key identifier: 96:95:C3:C2:BB:71:AF:28:9F:BE:56:B6:8A:7F:25:C5:47:CC:AD:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/661d0e61-5138-389c-ac94-1b1c855e9970.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     14132
IP address blocks:        192.33.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f3:51:f2:42:77:92:2d:3a:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1ed9d-801c-41b9-aa56-1da8ff79a65a
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=bfe7f972-2407-49e2-806b-219498bd39dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5a:b8:03:d6:f0:cc:41:18:6e:bf:85:7b:2a:
                    0d:8d:bc:0b:fb:3a:3f:39:e3:8d:cb:e8:30:0e:dd:
                    e0:af:48:5e:61:7f:ab:7a:d1:5c:2a:dc:b8:1d:6e:
                    25:cc:a4:c3:c0:e3:59:8f:2e:ff:08:26:13:7f:a1:
                    83:f0:9f:e8:de:cf:c6:41:d5:97:5f:0a:1a:32:63:
                    af:d9:05:33:d7:ca:af:c5:b8:0a:98:08:38:d2:ab:
                    58:11:1c:75:bc:00:5e:f2:ce:fc:34:2b:c1:1e:bd:
                    7b:14:58:86:a1:09:67:81:9e:fd:9f:21:da:73:87:
                    56:ed:2c:fc:b4:8c:8d:c0:86:1b:f4:30:04:1f:e3:
                    f6:b3:bd:87:dc:a2:d0:3f:f0:be:de:6d:84:42:8e:
                    9e:e7:d7:32:21:b8:bd:62:82:ca:29:c4:2a:f9:59:
                    5c:16:78:73:01:7d:57:2e:f9:e5:75:ef:a9:e5:2b:
                    20:e4:1f:b9:97:97:8f:cf:f6:50:ce:2d:12:8c:1c:
                    07:83:05:7e:24:4d:5c:40:98:62:b0:a3:d9:7b:78:
                    7f:a1:b1:a5:2f:31:aa:c1:24:91:e0:77:56:e7:1b:
                    06:62:3f:61:69:68:b6:42:78:5a:8e:25:de:fe:c1:
                    24:1f:68:07:28:f7:dc:2d:2b:b6:24:a1:b3:a6:dc:
                    c6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A7:8F:F3:5E:A0:43:C8:AD:6E:CA:FA:61:B6:F1:42:E9:91:99:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/661d0e61-5138-389c-ac94-1b1c855e9970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.crl

            X509v3 Authority Key Identifier:
                keyid:96:95:C3:C2:BB:71:AF:28:9F:BE:56:B6:8A:7F:25:C5:47:CC:AD:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6e1ed9d-801c-41b9-aa56-1da8ff79a65a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:5b:a9:0a:a9:55:56:4b:ad:fc:a1:86:25:55:7d:fd:74:1e:
         21:1b:bb:d1:32:25:15:44:a1:55:74:18:87:01:a7:57:9b:0f:
         42:43:18:01:b7:5c:cd:be:1a:d3:f0:5a:ea:bb:d9:d7:08:c2:
         0f:ed:f2:ca:4c:1b:e7:49:03:a7:67:60:db:66:9d:98:98:8b:
         cd:b5:92:5e:5e:ec:10:72:9d:4a:b8:10:76:97:4d:92:df:56:
         2e:0d:6b:25:78:0b:06:3e:43:47:05:f0:4d:e6:f6:90:1b:9a:
         1b:46:d3:06:4e:d4:b1:61:3e:f0:04:85:16:8d:aa:cb:b9:24:
         54:91:06:31:52:a6:1d:bc:97:e8:12:6b:59:c8:28:06:1e:e7:
         bb:4b:49:c5:44:e4:ab:7f:d3:c6:82:ae:b6:d7:61:ae:25:f3:
         70:31:60:41:40:f9:74:12:be:ed:3d:9f:34:54:53:a5:69:2b:
         eb:82:95:6d:b7:7c:ad:db:51:05:9d:5b:a4:ba:76:ea:92:31:
         07:3a:e4:e5:3f:fc:41:29:b8:73:b2:86:ae:39:75:07:b4:89:
         b1:56:c0:03:36:36:b9:b6:fe:9c:22:83:d5:00:bd:07:f7:4f:
         23:ba:e5:f4:f3:9c:22:39:99:ab:7f:e9:ee:5b:d8:68:70:a5:
         77:1c:ac:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:30:51 2025 by rpki-client