Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d54abf1c-414d-3325-b626-9905dc9f7438.roa
File:                     d54abf1c-414d-3325-b626-9905dc9f7438.roa (raw, json)
Hash identifier:          3HqByg5VvGau7ooKiZnPzCo0/DLC8udEFQ/JJs6do5I=
Subject key identifier:   0A:E8:FB:D2:6F:97:0B:6F:C7:9F:CF:01:36:A2:D1:85:1B:83:E5:3C
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F4328584A2C2020F91A778DCB77BE6260
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d54abf1c-414d-3325-b626-9905dc9f7438.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     19740
IP address blocks:        172.84.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:20:f9:1a:77:8d:cb:77:be:62:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=64d45593-5602-4ed5-8b6a-8766c75d7914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:ff:4e:6d:b9:aa:43:a1:a3:34:43:50:88:
                    5a:2d:54:91:79:d9:78:05:74:cb:2f:af:9e:2e:6b:
                    50:de:12:91:90:49:be:45:5d:e7:1f:52:f8:a3:d0:
                    3b:2c:b6:8a:07:83:e3:7b:b8:87:1e:f2:d2:5e:82:
                    4f:fe:26:86:f2:51:d5:b7:30:fc:51:76:b8:f1:bd:
                    ae:d3:ee:f3:50:22:06:1f:93:58:85:e1:76:4f:81:
                    1d:03:ee:51:32:e9:4a:d0:2b:48:71:ef:0d:f6:1f:
                    72:57:46:70:6b:42:71:31:94:64:9b:d1:a2:b0:c7:
                    88:a2:f5:a8:08:7c:0b:25:3a:bc:ac:a1:99:0c:dd:
                    56:46:05:db:ff:a1:5d:4e:b7:46:4b:4d:7b:ee:a1:
                    13:45:3c:e9:83:a4:e5:7e:fb:3e:7d:09:a9:2e:11:
                    18:8f:c7:cd:31:1a:de:44:20:83:9b:b2:28:f1:9a:
                    86:df:4c:c5:f7:f7:96:60:03:71:58:d1:64:e2:67:
                    a3:3e:03:eb:41:96:59:23:75:59:d0:fc:87:9f:80:
                    94:84:aa:9a:70:7d:01:64:e5:f8:bb:6a:d7:28:13:
                    98:c5:cc:02:7f:a0:92:18:c5:8e:c1:4d:0f:59:0a:
                    82:d6:3b:81:24:10:9d:4b:26:92:a5:1e:72:b1:5e:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E8:FB:D2:6F:97:0B:6F:C7:9F:CF:01:36:A2:D1:85:1B:83:E5:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d54abf1c-414d-3325-b626-9905dc9f7438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:62:4b:3e:8b:ed:65:7f:38:43:3e:2e:52:f1:1a:dd:f7:da:
         e0:e6:ca:61:8f:fe:98:ef:06:c4:2a:d8:7e:82:28:ca:de:99:
         00:16:cb:54:1b:f6:55:19:7b:fd:d8:9e:ad:48:c6:66:05:e3:
         4a:49:12:a8:7c:6e:58:40:3f:fe:b7:95:78:9c:c4:7a:0b:fd:
         17:2c:14:fc:7f:bf:65:58:b1:d3:5c:ca:6e:d1:21:86:ec:f5:
         92:99:f2:cd:08:e6:c6:a5:31:32:f1:c4:c5:14:81:cc:67:bc:
         5a:e1:0d:82:2a:3d:d5:c7:d7:72:9c:87:bc:98:9b:24:42:98:
         09:42:b1:87:ee:26:d5:88:90:a4:5f:49:c7:ac:ac:ed:8c:2c:
         81:71:b6:ad:47:53:11:9c:93:26:0b:29:67:57:af:d3:98:4a:
         b6:1c:d5:ea:38:1b:35:f2:b1:62:95:aa:ec:f2:45:d0:62:0f:
         14:ed:e6:ad:3e:97:a3:37:f8:fd:8c:a6:5e:9a:d2:34:d0:e0:
         6e:fc:1a:ec:30:88:05:87:c0:4d:54:88:41:a3:d6:f7:22:c1:
         37:78:61:a2:b9:66:cb:10:27:c4:82:e1:3f:ad:42:d7:92:54:
         81:1d:75:c0:96:c3:04:e2:41:ea:1d:31:88:17:20:54:44:08:
         58:a4:db:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:29:26 2025 by rpki-client