Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5a4d2d10-351b-3e3b-a8d4-d28df02f6a5a.roa
File:                     5a4d2d10-351b-3e3b-a8d4-d28df02f6a5a.roa (raw, json)
Hash identifier:          ZeP+edPX/KsnrKZRfhxfbE7yz3vZ4UBF4+9FItHnODo=
Subject key identifier:   6A:21:9C:66:F7:82:61:DA:B0:E9:0B:80:6B:57:ED:D5:CD:A2:DA:5E
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F43285849AFB6FE3E0BA3122551E90D20
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5a4d2d10-351b-3e3b-a8d4-d28df02f6a5a.roa
Signing time:             Tue 29 Apr 2025 11:29:00 +0000
ROA not before:           Tue 29 Apr 2025 11:29:00 +0000
ROA not after:            Mon 28 Jul 2025 11:29:00 +0000
asID:                     174
IP address blocks:        173.213.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:b6:fe:3e:0b:a3:12:25:51:e9:0d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 29 11:29:00 2025 GMT
            Not After : Jul 28 11:29:00 2025 GMT
        Subject: CN=76fb70a2-7630-4c5b-83b9-27e5571fed1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:91:9b:d2:f0:1c:6d:8e:0d:93:5a:6d:b4:e4:
                    43:06:1e:49:a9:b7:e7:98:c9:b5:92:e6:9d:c9:3d:
                    78:a7:d8:0a:76:5e:c0:48:e4:18:68:d6:cf:7b:40:
                    f3:e9:0e:a9:65:58:83:ff:e5:d2:b6:4a:2d:16:46:
                    36:74:51:fc:44:f7:e1:a1:bc:b9:c0:a1:89:dc:8a:
                    6d:3b:15:e5:03:7f:3e:6c:cf:dd:0d:a2:51:35:31:
                    f4:a5:a6:ab:04:de:13:dd:26:42:e2:ea:fa:bf:78:
                    45:c1:67:09:0e:95:48:d7:9b:34:fa:cf:10:17:64:
                    1c:25:83:c7:c9:b2:4d:d1:9d:f3:52:4c:ef:86:a1:
                    7b:5d:32:aa:f8:71:59:d7:17:f8:ad:c5:d8:44:71:
                    e6:b5:0c:d4:6a:8c:9e:5b:06:b3:ed:d5:69:b5:70:
                    6c:28:47:ab:6c:ab:ca:5a:87:4a:8a:3e:9a:fa:dd:
                    4c:ab:73:78:af:ca:48:58:ab:7e:3c:cf:38:74:42:
                    cd:41:bd:73:5f:fa:32:67:da:fd:bf:1d:cf:9a:78:
                    5c:15:be:85:98:d1:c8:79:50:ff:37:4c:7e:68:b1:
                    c7:9d:6a:ec:42:40:da:4f:c5:b3:cd:67:dc:19:dd:
                    98:ef:f0:3f:a5:f7:36:64:b6:39:35:20:d0:63:f9:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:21:9C:66:F7:82:61:DA:B0:E9:0B:80:6B:57:ED:D5:CD:A2:DA:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5a4d2d10-351b-3e3b-a8d4-d28df02f6a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:93:ae:37:30:3a:ec:15:19:4c:57:4e:b5:c7:98:a0:c8:27:
         20:57:a8:af:55:fd:85:bd:ea:dd:f7:7e:26:82:e9:50:54:82:
         93:09:48:bc:90:df:6c:72:82:74:ea:0c:b1:22:69:ef:9e:50:
         2d:29:17:f0:52:25:32:e2:66:e4:3e:4b:cd:fb:8f:5c:6b:de:
         23:66:55:e0:da:68:6b:0b:da:d1:b2:f2:d8:5f:d7:6d:04:d2:
         98:6c:36:1f:02:62:cc:af:cd:67:13:a3:ee:d6:f0:ea:a8:c4:
         51:da:36:e4:ec:69:3c:f4:bf:0d:b6:29:35:a6:e6:e7:ef:20:
         66:ad:2e:32:0f:9a:ce:2d:a9:4f:71:5b:55:24:d4:e1:e2:80:
         bb:36:54:e1:84:5f:bc:fc:c8:8a:5a:61:2e:c1:8f:bd:6f:b7:
         01:6c:ff:1b:dd:c5:df:9a:86:06:11:97:55:31:2f:f7:74:43:
         d4:45:77:cc:93:cb:d3:31:09:6e:50:e8:2d:72:9e:fa:5a:81:
         15:a9:f4:a4:35:56:0d:04:59:91:51:a0:11:f4:71:28:12:6b:
         a3:63:04:e0:c6:e4:3e:b4:a4:0d:a2:48:da:df:0c:9c:6c:aa:
         d5:8c:30:15:37:3a:a8:c6:c2:ac:af:c6:85:82:e5:ae:1e:f5:
         40:ec:a8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:53:06 2025 by rpki-client