Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2683aa81-e037-31a0-ab7b-107ad06d7f73.roa
File:                     2683aa81-e037-31a0-ab7b-107ad06d7f73.roa (raw, json)
Hash identifier:          RWCZ6h+yqOc4gzqAHuD8tBgRKeFtpyIHlZj3LRJ55QQ=
Subject key identifier:   16:ED:70:64:90:69:E3:DB:E3:9C:CA:24:B2:6D:94:95:79:A6:84:D0
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B25943453BA65032C6CC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2683aa81-e037-31a0-ab7b-107ad06d7f73.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        199.232.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:25:94:34:53:ba:65:03:2c:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=f7f49ea6-18db-4633-9206-9182cc7c8b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:06:e9:0e:c3:99:97:68:00:64:a1:24:5d:
                    7c:0e:4f:73:e3:c3:83:92:8d:03:8d:ca:04:e4:82:
                    30:85:5c:de:35:77:2f:97:6e:79:2b:b5:7a:d9:82:
                    64:46:04:8e:ea:b0:7c:eb:4b:32:06:41:6c:46:41:
                    ab:1d:4d:61:5e:7b:09:42:ab:c7:ab:01:ef:fb:0a:
                    e1:11:ae:69:0f:97:eb:2e:7f:50:3f:45:90:56:75:
                    12:74:4f:7b:4b:96:ee:95:af:4f:16:7e:e4:e0:0c:
                    e3:7c:ff:9c:d4:db:e3:35:a8:d9:a4:bd:f4:f3:30:
                    51:cb:a9:eb:11:03:40:4f:80:e4:aa:b6:d0:f6:b8:
                    07:12:07:a6:f6:11:08:af:41:ab:ed:c5:79:b2:ea:
                    00:7d:2c:78:f1:a4:8a:c5:20:5e:a0:01:dc:69:4c:
                    48:60:47:0d:67:a7:06:41:9a:00:53:d7:bf:08:f7:
                    b9:c9:a5:b6:49:24:7e:0d:72:a4:f5:e8:17:b1:63:
                    94:72:39:3f:95:c5:32:b7:fd:f0:f1:d1:e0:f7:66:
                    31:95:eb:70:31:ea:10:ca:e6:82:ab:b7:eb:f9:e8:
                    a5:0e:0c:bc:97:02:f3:89:7a:b8:1c:e1:7e:f9:31:
                    ed:15:80:de:04:33:b7:94:85:2e:c7:4e:9a:46:c8:
                    be:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:ED:70:64:90:69:E3:DB:E3:9C:CA:24:B2:6D:94:95:79:A6:84:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2683aa81-e037-31a0-ab7b-107ad06d7f73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:df:c0:41:3f:5f:01:8d:c5:6e:0f:8c:67:ab:ae:72:06:72:
         20:1c:45:95:77:bc:55:c4:ef:ae:63:6b:84:e6:f8:cb:8f:dd:
         c3:02:94:db:c9:10:1b:21:40:5d:57:5f:75:db:51:c0:16:72:
         64:6c:69:9b:ad:8b:08:e4:e7:4c:03:29:e1:50:79:77:24:b4:
         f6:df:16:b4:9e:09:76:1b:d2:0e:53:b1:b3:e5:d3:a6:f4:aa:
         1f:7c:4b:0b:55:71:9e:2f:86:80:f3:ed:d2:d8:1a:23:cc:ec:
         3e:d3:16:76:a5:53:fe:58:2c:9a:ca:e0:a9:47:4f:06:ce:83:
         c7:0c:de:2f:bc:dd:b6:ae:fb:1f:e1:d6:8d:3f:f6:f9:da:86:
         88:59:d3:46:ab:d2:b4:d7:9e:44:86:ef:ab:ea:de:87:bc:2d:
         bc:6b:33:5c:92:a9:6b:48:6f:42:f2:0b:5a:11:59:37:5f:77:
         d5:5f:91:b3:38:8d:b0:44:96:bc:6f:f7:cb:76:8d:51:3e:b1:
         02:c0:33:51:ff:4c:8f:72:4a:7c:6a:49:32:db:57:8f:b7:74:
         63:12:bb:6e:68:9d:bb:0a:32:50:b4:da:37:ac:40:d6:72:0e:
         c4:45:09:7c:b7:29:57:b5:ae:1c:0f:d3:e5:52:3d:8a:d3:ca:
         16:2a:ee:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:06:55 2025 by rpki-client