Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/7d5b7357-cf30-320b-9083-c67c3bbcfed2.roa
File:                     7d5b7357-cf30-320b-9083-c67c3bbcfed2.roa (raw, json)
Hash identifier:          B+y5exBTkLas7xKGKcuGD0qSV+K10lrLGmyz+Sw8TNM=
Subject key identifier:   63:BA:02:80:A2:CD:8D:E8:86:95:85:8D:9E:2C:0A:20:6F:A4:43:97
Certificate issuer:       /CN=fd6daa08-5cef-4e98-8808-5ffaa04a497c
Certificate serial:       010D0C9F43285849F44A54F34750C9FD32F5BC40
Authority key identifier: 8C:14:BD:33:A4:76:FC:3F:72:7F:E7:A7:6C:87:CF:ED:C4:5D:ED:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/7d5b7357-cf30-320b-9083-c67c3bbcfed2.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     40670
IP address blocks:        162.219.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:54:f3:47:50:c9:fd:32:f5:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd6daa08-5cef-4e98-8808-5ffaa04a497c
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=f50791cc-7f5d-4801-8fd4-0084a36ea099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9b:e0:07:a3:51:0e:9c:86:c0:73:99:c8:02:
                    af:04:e0:81:89:82:80:f6:82:84:56:65:a2:c7:9f:
                    ff:2b:6e:64:bd:1a:99:7c:1b:95:51:e1:bd:64:81:
                    0b:70:d2:e9:30:8f:46:88:ef:7f:2e:2e:b0:a4:e8:
                    0b:f4:ba:83:58:03:4d:1e:31:bd:c9:ec:25:9a:6e:
                    75:10:45:ac:c4:e5:3d:22:39:7a:80:2e:16:09:ac:
                    0f:ac:33:ff:7d:3b:9e:46:8a:e0:34:d5:fb:13:89:
                    3e:77:84:3f:a4:38:08:e1:07:6d:1c:ee:6f:96:c6:
                    43:44:a2:66:11:28:9d:ab:1f:18:be:c6:f3:71:ed:
                    5e:96:25:2e:ed:08:6c:ad:b7:98:e3:ad:a8:f2:21:
                    fe:8b:15:2a:6b:77:b5:7e:a5:95:e5:2a:1b:bd:2f:
                    bc:ab:66:23:f3:b1:9f:cf:60:db:9f:51:48:a3:27:
                    a3:71:f1:b9:40:75:d4:23:48:dd:42:d6:c3:0d:26:
                    17:85:60:be:2f:1d:f8:8d:a0:c4:32:1f:b2:34:4e:
                    7e:3f:1d:6c:0f:2d:83:27:7d:50:07:c5:aa:e8:ae:
                    f3:6c:d2:0f:20:15:f1:1d:0d:31:40:4f:dc:6b:43:
                    af:e8:9c:43:6a:4f:80:5b:e1:55:30:77:75:6e:e3:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BA:02:80:A2:CD:8D:E8:86:95:85:8D:9E:2C:0A:20:6F:A4:43:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/7d5b7357-cf30-320b-9083-c67c3bbcfed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.crl

            X509v3 Authority Key Identifier:
                keyid:8C:14:BD:33:A4:76:FC:3F:72:7F:E7:A7:6C:87:CF:ED:C4:5D:ED:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:11:17:d1:c6:db:6b:6f:23:4c:92:4a:13:b9:67:2d:46:c1:
         e3:df:32:e0:79:05:82:99:01:de:80:4c:39:f8:a3:68:7e:3c:
         71:70:1e:17:ae:ce:21:ee:9b:d4:cf:e2:0d:7c:62:09:7b:56:
         8b:f0:81:02:70:f5:7b:38:d0:d7:b4:6f:e7:74:8d:79:39:53:
         4a:2f:3d:3e:82:ba:0f:69:f5:14:d0:e5:2d:fe:90:d4:f7:21:
         69:ee:ee:5a:5e:e3:97:5d:c5:ff:3f:ec:52:61:49:02:d2:17:
         7d:a4:13:e0:76:30:20:de:94:ac:a6:19:52:88:f5:d4:89:52:
         46:fb:0d:00:c2:ee:14:dc:81:5d:61:fb:d8:da:98:33:46:11:
         a9:0c:c9:71:6d:f5:d1:c8:82:31:f6:83:b3:bc:d0:bd:40:5b:
         20:86:48:6c:37:3d:6d:86:b9:97:28:46:3d:44:ac:e5:72:4a:
         42:3c:3b:90:ee:c9:01:2a:6b:a1:01:de:6b:06:8f:1a:fd:ca:
         69:90:69:68:39:ed:54:91:2e:fb:89:f2:e7:9d:14:c1:95:ff:
         f5:e8:91:21:14:97:79:43:3f:ec:57:96:a5:a0:9a:66:9d:aa:
         49:9e:b8:2d:f7:c8:b9:b4:2b:f7:9d:bf:cf:5d:b1:e3:4f:04:
         cb:f6:43:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:20:31 2025 by rpki-client