Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/5e12d111-87e8-36ec-ab7a-c2771a0aaa8f.roa
File:                     5e12d111-87e8-36ec-ab7a-c2771a0aaa8f.roa (raw, json)
Hash identifier:          6ymSE7YbyCTzwRN3kW6BJvz4K9Ens3HxKhReo5fTTKk=
Subject key identifier:   F9:F2:AD:29:D6:9F:94:D2:1A:0A:3E:12:E2:94:B4:BA:EF:A2:D5:6A
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F43285849F2E54B2DECB4FFCDB38AB400
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/5e12d111-87e8-36ec-ab7a-c2771a0aaa8f.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     33182
IP address blocks:        107.161.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:4b:2d:ec:b4:ff:cd:b3:8a:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=737bfabf-ede6-41c7-9837-9d618c5792e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:68:02:0b:92:78:fe:8c:e4:f8:63:cb:6c:
                    89:70:bf:64:8a:e3:4c:38:8a:36:77:c3:b8:da:65:
                    39:be:c7:0e:e6:74:ff:15:3d:e4:f9:dd:4e:28:af:
                    1c:6b:a7:fd:d8:f0:fa:65:db:42:59:e4:17:24:8f:
                    61:cb:23:a2:1f:a9:7b:7a:23:47:ed:4d:c5:db:b9:
                    c4:8d:58:f6:a1:80:68:30:72:d7:3f:b8:24:39:6c:
                    be:45:95:c4:9e:7f:8c:29:e3:9f:26:c7:ca:6d:c1:
                    05:a5:1a:18:ab:30:25:8d:69:54:c0:45:22:07:a9:
                    a7:9e:97:b4:83:3a:d8:3a:bd:1f:cc:6c:ff:9d:ed:
                    5e:2c:f6:5f:db:18:11:6c:2e:de:45:fb:be:ac:97:
                    ef:10:2d:a5:e5:00:b8:4d:17:2b:02:50:44:e4:a3:
                    a7:f1:ee:f8:64:35:91:1e:59:7a:53:55:b1:92:fe:
                    db:89:08:41:63:ca:9d:31:22:0c:40:98:38:27:9a:
                    7d:ed:0a:ce:5d:4d:63:ee:bc:28:48:13:93:91:20:
                    b9:70:f0:1f:d8:98:9a:a8:04:e6:2f:39:9d:c4:79:
                    ec:3c:1d:ca:44:a5:bb:0e:75:bf:8b:7e:7d:f4:62:
                    0f:d4:78:22:83:5b:51:ac:0e:d7:3f:aa:90:fc:a0:
                    9b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F2:AD:29:D6:9F:94:D2:1A:0A:3E:12:E2:94:B4:BA:EF:A2:D5:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/5e12d111-87e8-36ec-ab7a-c2771a0aaa8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:eb:02:4a:90:f1:38:24:a4:7c:79:d1:93:6a:7f:30:ac:74:
         f5:15:b4:e6:9b:29:e0:7c:7a:9e:56:50:ea:f4:98:fb:bf:d5:
         f7:5f:fe:58:17:9e:0b:82:78:6a:e5:36:24:a9:66:33:7c:9e:
         cb:c2:50:bc:93:d0:bb:66:c3:f4:bf:e7:33:4f:34:ea:3e:1c:
         fb:83:d0:cb:58:a7:f0:c5:03:df:28:ac:4e:7b:be:95:a0:ce:
         c1:0d:fc:7b:53:4a:19:c1:cb:5d:02:a1:4c:36:47:d7:0a:9d:
         ad:9b:d8:0f:97:a4:46:ab:ba:6c:c9:d7:0a:5a:a8:ac:b8:fb:
         fd:2b:18:db:83:e3:e1:d7:e0:38:46:34:71:22:40:7c:d4:b1:
         dc:a6:3b:76:6e:6f:f4:6b:48:18:e4:b0:89:c8:62:98:77:0f:
         a0:ad:8f:91:29:13:12:e0:8e:7a:f8:2d:4f:f5:db:fc:4a:ce:
         ba:aa:08:40:05:be:28:c5:9a:50:2d:67:d7:53:55:af:f2:ee:
         3a:0f:ff:fe:e9:69:fb:99:b8:72:38:ed:05:1d:13:5e:26:3c:
         35:2e:30:d8:09:37:6b:91:b6:0b:f6:6e:19:5e:2e:41:0f:20:
         30:2b:80:22:5a:3b:74:fd:f8:5d:c4:50:b5:61:f9:e2:f7:89:
         6c:b6:ba:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:33:46 2025 by rpki-client