Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/27491df0-f813-39fd-ab8d-b28cf78a26fe.roa
File:                     27491df0-f813-39fd-ab8d-b28cf78a26fe.roa (raw, json)
Hash identifier:          ujFXpqAKKX9BArYwiBWfeDnilaHW74kW26ynUyKZf5o=
Subject key identifier:   D3:55:0C:4B:4F:45:A7:82:30:B8:43:27:4D:2B:3C:41:04:D5:08:B2
Certificate issuer:       /CN=f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76
Certificate serial:       010D0C9F43285849B6DF4F37E7BF036767EEFAE0
Authority key identifier: B0:D2:B9:31:C6:54:9A:BD:94:59:80:DF:EF:60:E8:85:59:C2:5D:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/27491df0-f813-39fd-ab8d-b28cf78a26fe.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     32123
IP address blocks:        162.254.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:4f:37:e7:bf:03:67:67:ee:fa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=206ec8eb-cb13-4866-b9d0-1a0491b6b82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:62:73:09:03:d6:9a:08:25:17:8a:2f:cb:50:
                    2b:04:d6:7d:2b:0e:38:fa:ae:03:ca:fa:41:a8:36:
                    72:3a:de:50:45:dd:02:c7:d3:aa:99:0d:3e:ba:47:
                    32:4f:47:61:71:2f:0a:38:b8:5c:78:f4:b0:f9:90:
                    31:9d:0f:20:b8:8f:4f:aa:7b:80:25:2a:a9:6d:25:
                    b9:f4:cf:56:98:8e:5c:4a:86:1a:70:44:b8:f2:99:
                    d7:c6:35:75:a1:62:58:9a:06:b7:18:33:0b:12:a2:
                    24:5a:db:2a:7d:a4:66:81:99:89:93:ca:2c:d4:4a:
                    53:e3:34:36:de:6b:2f:6b:fb:4c:76:89:f7:c4:bb:
                    cb:ad:e4:c4:90:fa:5a:32:25:fd:0b:55:ce:2d:e7:
                    20:30:32:42:9a:f2:8d:f3:c4:9d:42:71:2c:bf:9a:
                    83:98:22:31:a8:77:c5:ef:f9:22:cf:1a:18:df:03:
                    a2:e7:dd:8e:97:49:2b:58:9d:09:e2:74:d6:b0:0c:
                    7c:27:10:1b:00:49:d3:49:af:91:56:7d:8c:77:60:
                    b8:48:3a:aa:a9:3e:05:f7:8e:e2:fd:a4:e2:28:b6:
                    82:72:da:36:46:b8:35:da:39:20:36:1b:66:97:e7:
                    d5:13:31:8f:84:51:27:82:f1:c5:8d:2d:45:6e:8f:
                    c5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:55:0C:4B:4F:45:A7:82:30:B8:43:27:4D:2B:3C:41:04:D5:08:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/27491df0-f813-39fd-ab8d-b28cf78a26fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.crl

            X509v3 Authority Key Identifier:
                keyid:B0:D2:B9:31:C6:54:9A:BD:94:59:80:DF:EF:60:E8:85:59:C2:5D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8f9e1a7-9196-4ed5-9f1e-fc6dc728cb76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:10:c8:d1:83:92:9b:6c:fe:75:1f:c0:cb:c7:bf:db:7a:28:
         10:47:74:0d:16:1b:0c:27:19:da:18:9d:ea:b9:18:97:bd:7c:
         31:5d:bf:6a:84:fa:08:56:a3:dd:31:d6:cf:00:aa:a5:8e:2d:
         03:f7:f3:d2:3c:0d:8d:9c:79:20:46:07:22:00:c1:04:37:f5:
         11:1b:31:dd:47:db:e4:cb:e8:02:bf:6f:61:fd:a7:e8:2f:99:
         18:02:5c:c1:7d:83:41:41:31:7e:e1:88:6e:70:f5:01:ac:6a:
         42:5a:7a:72:55:6f:8d:9d:85:33:90:36:f1:d3:54:9c:c7:ed:
         7c:d3:df:c2:f8:ec:ab:ab:b8:68:d3:f0:09:42:7a:ad:8d:a0:
         5c:6b:40:8c:29:96:72:71:a8:a5:cd:9e:c8:70:f6:27:97:5f:
         ab:14:a9:03:6f:5a:01:1d:6c:a6:e2:b0:19:e7:34:be:23:43:
         71:cd:e6:cb:2b:6f:cf:0d:7f:1e:73:3e:3b:7b:e6:53:ba:0d:
         a1:20:38:1a:97:96:66:3b:29:4e:a4:5c:76:83:f0:3b:5a:3d:
         4a:e7:3e:24:66:20:d2:28:0c:fb:65:3b:4d:cc:2a:7b:f5:aa:
         41:6c:50:16:e5:8b:08:5b:8c:2a:c1:af:94:93:e1:39:69:b9:
         e5:ed:b9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:17 2025 by rpki-client