Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/00bfdc6f-8d00-3d44-8e6e-526a40918136.roa
File:                     00bfdc6f-8d00-3d44-8e6e-526a40918136.roa (raw, json)
Hash identifier:          m5WkhQNh2k9IEsk6Ek96kPc81aQPZgQIzO6ymp0TyBM=
Subject key identifier:   2C:7C:AC:45:E8:68:59:D0:3F:48:70:91:93:94:0F:46:06:93:5A:60
Certificate issuer:       /CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb
Certificate serial:       010D0C9F4328584AB650F0D9500936717CA77000
Authority key identifier: 17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/00bfdc6f-8d00-3d44-8e6e-526a40918136.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        170.52.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f0:d9:50:09:36:71:7c:a7:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee86bab0-ef7e-4e23-84fe-bcd5cee869bb
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=e007426b-e30b-44ba-aae9-c3f7a1f63238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:39:fb:f5:a1:e0:e2:75:32:80:6e:0e:73:
                    1a:d2:e5:25:50:06:a2:13:bd:e1:bc:59:2c:dd:af:
                    f5:ff:5a:b5:fa:59:81:24:9f:be:f5:50:2f:e2:30:
                    4d:fb:d9:ef:29:95:07:03:fb:f6:03:27:9b:7c:da:
                    eb:ee:77:62:c9:ce:d1:25:c4:7a:2a:5c:bf:74:ea:
                    e7:fc:b0:3e:09:b8:28:04:ee:e4:b5:74:72:14:12:
                    63:8f:8d:eb:43:34:6c:0e:98:d0:d5:b7:ca:6d:c1:
                    7f:d7:0a:73:32:6b:ef:36:77:7f:87:29:86:f8:e3:
                    68:8b:0e:d9:6e:9c:54:ed:55:b2:4d:2e:7e:63:64:
                    08:ad:b0:87:ca:12:9b:0f:5a:db:36:92:64:62:c1:
                    06:25:35:ec:86:0a:ea:15:e0:9d:d7:fc:9b:40:ff:
                    69:8b:e6:69:1e:ed:c5:b1:38:ea:f1:17:01:c8:1e:
                    48:85:f0:d5:33:68:2c:a1:21:f3:7b:1c:71:ea:29:
                    3b:46:75:66:9b:d0:5c:06:5e:9a:ed:03:cf:3f:e7:
                    f9:3e:ca:3d:13:3b:cd:df:48:7e:13:85:bd:97:a0:
                    06:dc:b6:30:d8:84:be:76:31:67:39:a5:dd:41:3f:
                    fd:52:f0:9d:e6:3b:7c:69:47:e0:44:86:60:90:65:
                    f6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7C:AC:45:E8:68:59:D0:3F:48:70:91:93:94:0F:46:06:93:5A:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/00bfdc6f-8d00-3d44-8e6e-526a40918136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.crl

            X509v3 Authority Key Identifier:
                keyid:17:D3:83:21:A7:3C:E6:27:6D:07:DB:A2:70:2D:1B:95:C2:EE:2F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ee86bab0-ef7e-4e23-84fe-bcd5cee869bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.52.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:33:c2:97:eb:84:e5:2c:6c:2e:22:b1:b2:6d:fd:2b:27:57:
         f6:59:57:1d:cf:0a:34:0a:3a:76:2f:0d:f4:4d:cc:04:b6:8a:
         c3:ed:b0:25:6c:93:82:34:e3:d5:f4:02:65:bf:63:67:a2:cc:
         14:cc:e2:b6:20:70:c6:1f:2c:0d:db:b5:31:aa:30:7c:ad:55:
         1b:86:4b:01:bc:3b:35:aa:22:89:2f:c1:fd:ef:e2:62:a9:0d:
         8c:b4:b0:d8:46:ce:83:4f:bd:c1:54:e3:87:1a:a6:d9:f6:33:
         fd:24:c7:28:f5:93:40:d6:e4:12:f3:ef:28:6f:af:c0:63:56:
         6e:a1:03:20:b9:7a:08:b6:8a:50:68:a8:ce:40:e2:fb:e7:71:
         8d:f8:ee:bc:cb:2b:71:0c:f7:b1:98:06:53:f6:4d:0e:26:57:
         6c:27:b0:26:3f:e4:19:67:25:f3:eb:3a:25:08:ae:05:11:1e:
         0c:a2:6a:b8:b8:9a:e4:f2:b0:ca:f5:5b:31:56:92:94:0f:2d:
         e4:fa:ee:49:e7:b7:a1:f4:21:64:8f:df:fa:4a:68:b7:52:63:
         75:d0:cc:26:0d:16:fa:17:ac:30:5e:1e:b1:48:9e:8c:b8:d5:
         a1:70:ec:7e:0b:87:d0:72:55:e3:10:32:60:05:c8:87:77:e3:
         c6:63:17:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:25 2025 by rpki-client