Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/dabf1ee0-d77f-3152-b08c-0fa1ff5bac7b.roa
File:                     dabf1ee0-d77f-3152-b08c-0fa1ff5bac7b.roa (raw, json)
Hash identifier:          eLysmyS4CZgaJugK4Hjmn+uYauS2BGtrORUQ0h4HGgY=
Subject key identifier:   75:01:3A:61:5D:CD:F6:6A:85:F2:7B:A5:7E:96:0A:8B:F5:19:36:A1
Certificate issuer:       /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
Certificate serial:       010D0C9F43285849A7849EDF716052893A388E00
Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/dabf1ee0-d77f-3152-b08c-0fa1ff5bac7b.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     834
IP address blocks:        173.0.96.0/24 maxlen: 24
                          173.0.99.0/24 maxlen: 24
                          173.0.102.0/24 maxlen: 24
                          173.0.107.0/24 maxlen: 24
                          173.0.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:9e:df:71:60:52:89:3a:38:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=0f64057c-5909-4e07-8a4e-7f2391d09e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a9:5d:37:92:35:b8:cd:c0:4f:8d:0d:c0:01:
                    b3:63:ee:8c:76:20:fc:fa:e4:bd:dd:53:70:57:f3:
                    9e:e2:e3:72:14:85:e4:83:62:3e:de:cb:5d:1a:54:
                    57:c5:57:b6:2f:0e:c9:6f:c8:62:c9:47:69:ea:85:
                    3a:8d:42:00:49:0f:fb:ce:61:52:20:20:90:e5:3c:
                    9e:93:6e:be:9b:ac:2d:e5:44:57:ee:b1:06:07:61:
                    00:d5:fd:ee:7a:31:65:bd:f1:4e:7a:b3:e2:b8:da:
                    82:11:34:ce:81:1f:a3:2e:6c:c3:0b:dc:10:33:60:
                    c0:23:1d:52:b3:42:e9:a1:d8:d4:bf:9f:44:0e:4e:
                    ce:fa:98:6c:4a:79:78:a7:34:dc:f0:61:36:27:37:
                    67:4f:13:81:f6:04:85:84:ff:4c:10:65:0d:1a:ab:
                    57:90:b4:64:39:61:f6:5e:45:65:a3:82:62:34:9d:
                    c4:0e:9d:08:25:81:07:ba:42:9f:54:b2:49:36:58:
                    09:3b:30:81:a6:2b:c6:61:5b:5c:01:34:93:86:4a:
                    62:5a:61:27:f9:fc:79:5e:a6:50:9d:ba:11:f4:41:
                    83:ec:8e:9b:22:45:e8:4d:10:ae:b3:50:35:26:34:
                    f6:3e:fb:05:74:79:20:05:2a:6a:7b:42:6a:37:04:
                    37:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:01:3A:61:5D:CD:F6:6A:85:F2:7B:A5:7E:96:0A:8B:F5:19:36:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/dabf1ee0-d77f-3152-b08c-0fa1ff5bac7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl

            X509v3 Authority Key Identifier:
                keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.96.0/24
                  173.0.99.0/24
                  173.0.102.0/24
                  173.0.107.0/24
                  173.0.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:6c:4c:19:e1:f3:17:9a:ef:41:91:6c:bb:79:4d:3c:74:09:
         91:d8:9c:dc:94:b9:de:b1:00:dc:50:d8:ad:a3:d0:31:e0:9c:
         ea:42:9c:7c:a6:60:5a:d7:77:02:1f:a8:88:1a:36:4d:48:5b:
         a9:f7:97:c9:38:64:d5:d7:e8:30:de:4a:c5:16:13:71:25:77:
         22:04:e3:6e:86:c1:ec:f6:fe:0c:c8:64:bb:2c:e2:15:31:93:
         1b:a5:a3:b6:2c:f2:9f:b1:43:e0:2b:86:50:e6:7b:a4:6f:db:
         92:21:99:21:82:57:58:7b:cc:32:0d:f2:a5:d4:68:c3:c8:64:
         1e:b5:92:26:4b:fe:17:2d:30:44:95:bc:ec:91:4f:90:53:6e:
         09:9f:61:71:21:36:93:44:45:94:73:82:e2:7c:d3:95:94:1c:
         e4:31:66:93:a7:31:df:df:a7:57:b8:c6:ec:fe:7d:fe:02:29:
         21:bc:e8:65:fb:89:19:79:31:6b:4c:ba:f3:06:73:37:d0:58:
         15:b5:32:f7:74:b8:5a:ba:04:95:5f:15:aa:be:92:95:5f:96:
         28:3d:a7:b9:bd:65:e2:f1:ec:23:7f:28:e8:59:5f:a3:2e:5b:
         3c:4d:17:6e:96:03:38:9b:ed:9b:42:d2:17:05:0d:fc:78:1c:
         30:eb:4c:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:31:04 2025 by rpki-client