Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/1ac33f1a-75fc-3467-8f36-1064e3e2098b.roa
File:                     1ac33f1a-75fc-3467-8f36-1064e3e2098b.roa (raw, json)
Hash identifier:          NupXFqZs5qZid2eDEOGPEiUz75sbAt4i5+8wkKI5LfM=
Subject key identifier:   41:A5:E3:08:FD:61:7B:35:F3:AE:E2:52:9E:25:83:66:47:E1:B3:40
Certificate issuer:       /CN=cb079463-85da-4da7-b699-7f92f9faff04
Certificate serial:       010D0C9F4328584A119AB3AB70C29606536EB900
Authority key identifier: 90:19:F1:21:95:02:6C:A1:2B:92:FF:1C:49:51:AC:D2:F8:7D:97:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/1ac33f1a-75fc-3467-8f36-1064e3e2098b.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     25956
IP address blocks:        205.166.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/cb079463-85da-4da7-b699-7f92f9faff04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/cb079463-85da-4da7-b699-7f92f9faff04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:b3:ab:70:c2:96:06:53:6e:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb079463-85da-4da7-b699-7f92f9faff04
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=cc56c5dc-60ca-4eb0-881c-58e035329591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e6:42:b4:4b:04:10:b2:78:1b:08:1b:77:3d:
                    a4:00:96:a8:7e:7d:2d:c0:8a:9a:f2:bd:98:4b:0e:
                    02:40:95:69:98:bf:7f:01:81:5b:76:a1:48:3e:b6:
                    fb:d6:29:f9:48:02:8a:76:56:e1:2d:ea:1b:c2:5d:
                    7f:66:ae:d7:3b:c8:b3:af:e9:2f:e8:07:6c:61:ae:
                    37:ce:d0:34:7d:03:8c:5d:7e:b3:53:a1:21:52:c8:
                    ca:b3:0a:e8:55:f3:6a:77:cb:51:dd:26:71:95:8d:
                    64:32:d9:93:f5:90:ea:b2:e5:be:3c:29:5e:b0:e3:
                    57:9e:2d:7a:6a:1a:69:3f:91:48:b9:c3:e5:9b:ea:
                    be:39:11:8b:fc:d3:02:e2:05:6d:f0:06:df:ee:2b:
                    47:78:11:aa:18:25:7c:0d:3c:04:70:dc:d5:9f:a0:
                    dc:5d:fc:76:ce:ba:c9:a0:12:26:f9:38:eb:f0:d7:
                    30:92:56:d9:3d:3f:f9:e9:4b:33:f0:72:1e:23:47:
                    33:4a:a0:b0:34:67:c2:e7:d9:f2:ff:53:c5:f3:87:
                    65:a7:05:c1:e9:c7:bb:07:8d:c4:e3:31:48:17:11:
                    37:bb:e0:59:6d:c3:24:15:39:91:11:64:4d:f7:84:
                    75:e3:6b:13:ed:fc:61:17:2d:c7:5a:9e:8f:31:27:
                    d4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A5:E3:08:FD:61:7B:35:F3:AE:E2:52:9E:25:83:66:47:E1:B3:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/1ac33f1a-75fc-3467-8f36-1064e3e2098b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/cb079463-85da-4da7-b699-7f92f9faff04.crl

            X509v3 Authority Key Identifier:
                keyid:90:19:F1:21:95:02:6C:A1:2B:92:FF:1C:49:51:AC:D2:F8:7D:97:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:66:1e:c2:e8:e8:09:e0:6b:3c:de:3e:9e:ea:c5:ab:25:9d:
         22:d5:cc:49:d0:7b:83:1a:ec:e1:91:c9:31:8e:d7:d0:e9:6c:
         45:65:93:ef:58:31:15:cd:f4:5e:a7:f0:a8:d1:dc:a5:d7:ea:
         49:8f:bd:df:89:74:0d:80:94:b9:29:22:5e:9e:d1:a1:f2:f4:
         e7:51:cd:7f:8e:cf:b9:66:a6:f8:cc:90:64:80:b0:06:bd:c4:
         90:fd:b4:02:b4:d2:34:bf:00:3e:4a:11:0c:ac:f9:d6:25:5b:
         32:fb:c3:6d:28:91:ab:b2:51:54:1a:5d:2c:a9:eb:31:f8:98:
         f0:ac:e6:dd:00:03:24:71:41:b8:71:ac:c1:77:96:e9:5d:5f:
         b8:f0:90:df:fc:27:1d:b1:d1:cf:fe:37:11:bc:d4:fc:96:fc:
         ba:06:50:c8:f1:7f:87:6c:25:b7:24:2f:e5:6d:a7:c3:a5:01:
         31:a8:44:ca:b5:d9:1d:30:b6:e5:f2:08:f4:2d:e3:b1:d7:bc:
         99:0f:f3:f9:28:97:1d:55:5e:45:01:f2:b5:2e:72:85:3f:48:
         58:8c:ab:6f:52:b2:e9:8d:e7:28:fe:0e:74:d0:82:c7:1d:30:
         68:c2:1b:74:d6:a8:ea:ca:6f:73:fc:e3:a7:48:21:ea:e0:f8:
         dd:46:72:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:04 2025 by rpki-client