Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/77b2f57e-d588-3a37-b4ad-da94b0080555.roa
File:                     77b2f57e-d588-3a37-b4ad-da94b0080555.roa (raw, json)
Hash identifier:          vgJhiLu7JAsBYYZCs6XKFEOJ2m5Sp61NbnhBms5FZgA=
Subject key identifier:   12:8B:9A:91:F8:89:1E:41:98:45:56:7E:68:BE:76:9F:9E:FD:43:0C
Certificate issuer:       /CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
Certificate serial:       010D0C9F43285849ED4FC458814ACDBA1B9E17C0
Authority key identifier: A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/77b2f57e-d588-3a37-b4ad-da94b0080555.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     399091
IP address blocks:        172.81.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:c4:58:81:4a:cd:ba:1b:9e:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=2af6171b-0831-4b03-ba18-f2991c684770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:7f:77:ef:f7:63:df:9c:3f:37:22:ad:88:
                    76:8b:98:3d:e0:5e:d6:c5:f6:bd:41:21:cc:19:7e:
                    b5:05:e3:a0:e5:56:d3:6a:e0:08:ca:f9:ee:53:68:
                    62:9b:38:68:ef:1b:24:eb:58:e0:f1:00:4c:10:f8:
                    bd:ff:ca:ba:d8:0a:c6:ec:1b:09:8f:9e:16:cb:ad:
                    a5:a6:8a:d5:62:ac:18:82:9a:6b:d6:63:c9:ab:a6:
                    1c:f6:f3:17:e6:55:bc:f6:19:86:cf:5f:87:0e:87:
                    8a:d0:42:1d:de:4c:ef:1d:b1:eb:a5:e5:1d:93:82:
                    e2:9d:c5:2b:4e:23:e6:74:ee:0e:0b:68:96:45:2b:
                    69:ff:a9:ed:c0:9b:eb:d4:80:d2:d8:9b:e6:de:82:
                    a6:89:5b:5c:80:97:c7:7b:ef:a1:39:fe:d6:c5:98:
                    86:a3:e1:a7:1e:7c:83:1d:10:e9:f3:27:b5:61:a9:
                    bf:83:26:bf:12:0f:3f:56:0d:71:ec:84:a2:10:ee:
                    46:d9:38:96:91:de:32:9c:11:f8:31:b5:5f:f1:1a:
                    b8:85:3e:92:63:44:48:22:e8:1b:34:91:6b:b3:e6:
                    db:47:d0:e3:f3:37:d8:1b:cc:9e:02:c9:c6:48:a7:
                    ec:4d:90:60:a9:96:31:51:ee:7d:cc:9c:f4:1e:ba:
                    d4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8B:9A:91:F8:89:1E:41:98:45:56:7E:68:BE:76:9F:9E:FD:43:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/77b2f57e-d588-3a37-b4ad-da94b0080555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl

            X509v3 Authority Key Identifier:
                keyid:A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:25:a2:40:e4:a0:ef:1d:51:81:d8:09:23:6c:8c:c5:67:3b:
         33:ca:5d:21:79:5c:43:0f:7b:2e:7b:d3:db:60:54:44:db:13:
         14:18:1e:9d:66:32:41:d3:60:51:da:b5:42:0e:ec:f4:1d:ea:
         4e:bb:38:8e:d5:53:7e:e2:b5:ff:45:63:1f:51:67:ed:8d:11:
         95:04:c4:23:ad:72:04:08:61:84:8c:4c:e9:78:56:ac:3d:fb:
         9e:4e:c5:d7:4f:15:7e:5f:32:32:f8:45:8c:c5:4c:d0:07:dd:
         a7:25:05:a7:04:45:44:d1:c4:76:75:6e:64:e7:9e:2e:97:a6:
         2a:a1:3b:be:ce:d6:3a:a1:e2:fe:db:bb:9e:7a:e6:42:6a:26:
         19:14:dc:f1:8e:43:03:b2:7c:8f:ed:82:8f:aa:a1:2b:1b:95:
         09:9b:5d:e4:2a:81:ad:27:dc:69:4b:72:68:d1:31:e6:8a:5a:
         ad:da:bc:d3:94:2b:01:89:3a:ae:09:a0:d4:be:7c:92:b0:52:
         41:05:20:03:d2:3f:db:01:3a:e0:5d:e7:a5:ee:38:cd:5f:1d:
         49:c0:34:d0:47:50:93:72:0f:42:7f:68:af:9a:82:04:cc:4d:
         23:ca:79:5c:32:b0:65:c8:98:62:62:58:1d:e7:bd:52:43:99:
         0a:cb:e3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:19:34 2025 by rpki-client