Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/5757907e-a152-3421-ae20-7d46415d4c4e.roa
File:                     5757907e-a152-3421-ae20-7d46415d4c4e.roa (raw, json)
Hash identifier:          2fjfjhO2DOvHpR53qtUIkF9j62wDbJMmKkI/aMMz2Ak=
Subject key identifier:   B3:7B:1C:74:64:7B:75:FF:E4:A8:E7:A2:58:32:6B:0F:2F:1E:EB:C0
Certificate issuer:       /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial:       010D0C9F43285849E4EFC132D120C675FCFA6480
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/5757907e-a152-3421-ae20-7d46415d4c4e.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     36634
IP address blocks:        205.221.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:c1:32:d1:20:c6:75:fc:fa:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=91a9466b-c308-4739-90b5-d601b2bc0468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:ae:62:fd:f9:4a:e4:1d:29:ae:f5:6b:85:
                    00:80:22:4c:da:e8:a6:71:77:fe:6f:f0:b0:af:49:
                    af:32:72:8b:d1:d0:e0:d5:65:eb:07:88:6f:aa:2d:
                    fe:f7:72:6a:fa:97:2c:cd:ff:dc:2e:e5:b4:ac:07:
                    77:ad:6a:d9:d7:2f:fa:ee:f0:55:46:a4:0c:e0:56:
                    23:8d:35:c6:01:2e:be:0e:6d:34:71:53:00:c4:2b:
                    75:d8:c4:cd:c1:83:39:06:fe:81:98:0f:ed:24:78:
                    1b:ad:5c:08:3a:36:04:6d:01:7d:e4:4e:5a:f8:f3:
                    50:fe:a1:b0:ac:8f:9d:ca:c1:4c:45:d5:e2:d6:1f:
                    3f:ea:30:e2:d9:4d:77:54:7d:72:e5:3b:49:a4:a7:
                    28:97:dd:eb:36:89:1a:2c:1f:d9:cf:8a:35:dc:da:
                    71:10:e2:76:ad:48:a3:de:c8:4d:12:25:89:99:40:
                    e2:53:e4:e1:1c:bb:c9:1d:6c:3c:42:e2:2f:b3:98:
                    eb:25:bb:f4:60:8c:b7:b3:e4:9b:d9:c5:83:54:e4:
                    58:12:6f:21:d3:95:79:98:61:0d:08:04:b2:a0:00:
                    6c:1c:05:e0:e7:84:19:b3:77:08:85:36:f6:46:9a:
                    fa:e7:64:bd:5a:77:d2:21:7e:d7:46:a4:bd:7b:62:
                    1a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7B:1C:74:64:7B:75:FF:E4:A8:E7:A2:58:32:6B:0F:2F:1E:EB:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/5757907e-a152-3421-ae20-7d46415d4c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl

            X509v3 Authority Key Identifier:
                keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.221.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2c:25:aa:1c:b5:a8:2f:2c:10:c6:6d:6b:44:b1:5e:3a:85:
         44:c6:ba:d1:0a:20:7d:6b:7d:8b:c4:6e:3f:52:75:c9:83:3e:
         f3:4b:89:cc:95:42:fd:fc:04:6c:88:02:7c:4a:6c:c0:0f:ad:
         72:70:65:31:19:a5:5e:45:9c:b3:80:28:22:30:4f:93:a8:30:
         45:46:11:c1:cc:bb:c0:2b:31:ee:82:8d:d0:2f:79:f7:93:47:
         1c:a9:9f:3e:d7:ec:6c:78:aa:a4:0f:db:71:c9:43:9c:ae:09:
         5d:22:9c:c2:65:21:84:95:a3:60:e1:01:d7:07:b0:cb:af:d1:
         af:af:71:a1:82:e7:b3:02:2d:42:6e:01:23:ac:a7:f0:3e:2e:
         3a:85:e9:c8:a3:d9:ac:69:95:99:97:86:62:fe:95:c3:46:fb:
         fe:68:d7:cc:91:d7:31:f3:06:67:ca:b3:13:1f:35:8b:42:ba:
         47:e7:cf:3e:05:18:20:0a:9b:d1:cf:41:81:d0:ae:64:a3:8f:
         07:81:f6:6b:45:e6:fb:74:a0:6c:73:61:6d:1a:df:3a:a8:0c:
         69:5c:53:b1:06:e1:1f:91:ba:9c:3e:83:41:f8:7a:19:04:9e:
         03:ff:69:01:8d:66:b1:97:c6:9b:5a:55:b5:34:99:32:3b:ba:
         94:72:ba:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:08:06 2025 by rpki-client