Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/82fd5f1e-5970-3e0e-a860-0ff654c5ac86.roa
File:                     82fd5f1e-5970-3e0e-a860-0ff654c5ac86.roa (raw, json)
Hash identifier:          ewRuT2OR7lQb33WBDhNfXwoCghKnnzTIRiwyf7aC5Fc=
Subject key identifier:   0E:8F:16:D4:D1:A1:06:D4:19:85:52:B9:8E:F6:85:6E:4A:E9:3D:29
Certificate issuer:       /CN=6ec5d668-721f-4186-82e6-1391fb7784bb
Certificate serial:       010D0C9F43285849AD1A093C4BFBF021A394D100
Authority key identifier: 7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/82fd5f1e-5970-3e0e-a860-0ff654c5ac86.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     212238
IP address blocks:        172.81.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:09:3c:4b:fb:f0:21:a3:94:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec5d668-721f-4186-82e6-1391fb7784bb
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=98855250-3e67-4fd3-9a28-49c13ec8ce2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:9e:17:59:99:9c:fa:d5:6b:a6:24:ff:b9:
                    8b:d3:48:2e:e3:86:74:b7:a7:74:8c:6d:d8:50:d1:
                    95:ca:7c:55:01:a5:c4:f9:0e:5b:a8:d1:d0:5c:67:
                    55:17:58:cf:c9:42:3b:9f:48:b1:73:b2:fb:43:40:
                    18:59:4d:b7:36:71:b8:70:58:b2:2f:aa:80:d6:ca:
                    04:5a:52:e9:61:f6:6b:c7:09:39:4f:69:4c:b6:86:
                    17:66:53:33:81:c5:a8:54:5f:16:c0:68:1d:0a:22:
                    07:6e:97:42:75:20:0e:a5:8f:91:f5:bc:d3:70:4c:
                    b4:c2:a3:37:7e:06:44:45:a6:0b:29:c9:fc:7f:79:
                    28:09:dd:4f:88:3e:85:11:ae:3a:0b:20:0d:31:ef:
                    83:c5:a7:c2:df:66:87:70:00:a3:4c:0b:e2:df:74:
                    13:d6:a5:25:9f:25:3f:d8:84:1e:a0:5a:c6:93:ef:
                    54:97:05:63:de:94:fa:b6:21:5d:fa:03:c2:8d:12:
                    98:ba:fc:af:79:f9:e9:1f:c2:c5:f5:73:8e:3a:93:
                    51:55:48:af:62:80:4d:57:13:1f:39:52:d2:17:41:
                    e8:8a:8b:2c:dd:74:d9:d9:83:cd:82:40:4c:bb:f6:
                    62:d5:0a:9c:46:db:9b:87:e7:a1:ce:50:36:d2:5f:
                    73:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8F:16:D4:D1:A1:06:D4:19:85:52:B9:8E:F6:85:6E:4A:E9:3D:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/82fd5f1e-5970-3e0e-a860-0ff654c5ac86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:e4:0e:c7:fb:7d:07:a6:a2:11:8e:32:69:31:f6:fc:d3:9f:
         07:19:86:97:b7:56:19:8c:96:0e:17:d5:30:29:f2:55:98:a2:
         b5:c1:84:21:da:1e:4f:87:39:77:62:aa:3b:71:6c:a3:25:5a:
         83:bc:c2:6d:a6:42:7e:1d:b4:98:d9:f8:09:81:e4:dc:55:a2:
         c1:f1:0a:29:b6:2d:2a:6d:12:46:24:e6:18:f9:3d:fd:1a:da:
         4d:10:83:a9:af:55:b1:df:c5:6f:18:06:30:48:1e:c7:e5:46:
         94:51:12:d9:72:d6:7f:04:66:e9:b0:47:57:85:58:37:91:65:
         c5:9f:78:8e:02:0e:03:6e:9b:e2:e3:a3:37:a3:1e:22:bc:22:
         4a:d2:ad:b6:39:43:14:a4:52:5b:28:5b:8c:f6:73:a5:64:01:
         61:37:cc:9f:65:53:d3:bb:39:da:6c:b2:5c:81:b8:b6:97:94:
         0e:5d:34:7b:a0:dd:68:b6:b1:51:d0:f1:21:63:e3:01:9e:7b:
         cd:82:40:33:89:f3:ea:03:29:bb:d3:ea:6f:cf:3f:0c:f3:3e:
         40:de:43:0f:c9:bd:63:b3:a3:49:79:d9:09:e7:72:b2:7b:e0:
         62:e2:fa:c2:2c:c3:8c:00:29:45:d5:7c:c9:56:35:01:84:c7:
         1b:01:32:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:35:25 2025 by rpki-client