Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa
File:                     aafbf529-4916-398b-bbf0-e5bb5123a67b.roa (raw, json)
Hash identifier:          iHHqFcQVWRTO82BHJ6pEjMuYkxAJ4+LN81NGCwGgckA=
Subject key identifier:   2A:DE:E5:24:80:AA:8A:BC:2E:C6:EA:67:1E:6C:AC:A0:58:44:62:D4
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285849CE9A603AEC3D11B72448B220
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     2734
IP address blocks:        67.212.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:60:3a:ec:3d:11:b7:24:48:b2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=dd9834cd-2d5a-4f5b-af65-53725d0c747d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fe:80:83:54:ee:e9:65:3b:27:6c:22:56:08:
                    00:10:b9:42:73:d7:14:1c:96:77:d2:3c:60:f1:14:
                    c6:9a:1b:02:2b:bc:45:85:24:7e:96:19:58:d0:84:
                    48:8d:a5:24:4a:79:ba:9b:60:d1:d0:ae:bc:53:b1:
                    96:e9:6f:e5:fd:2a:b8:43:2b:c1:8a:cf:4b:0a:aa:
                    43:cf:17:ef:8d:c7:99:bd:18:c4:65:ff:a9:13:81:
                    d1:1f:97:b1:a8:1f:5d:86:79:74:f0:be:1a:51:ef:
                    65:9b:03:79:3f:15:c2:da:8f:94:1d:83:c9:21:28:
                    26:05:a3:9f:69:24:a5:c6:a9:af:fc:c9:5c:d5:bb:
                    18:08:ab:02:cf:56:2c:a5:5d:57:5d:8e:6b:a3:16:
                    b0:d4:a7:10:42:81:af:df:67:02:b8:6f:e9:9c:68:
                    f9:c6:6f:3c:de:05:36:88:bc:89:90:53:b5:df:28:
                    ee:bd:27:4c:36:06:8d:8a:8f:5e:f1:e3:8d:78:77:
                    64:23:08:0f:6c:d0:b2:37:e4:84:50:f1:bd:9b:2d:
                    25:6e:1a:45:ad:aa:46:d6:3d:58:cb:dd:99:27:36:
                    8b:68:2e:f3:a8:aa:9e:4e:0c:12:99:3e:8c:cd:0a:
                    6c:1c:3d:db:88:83:8e:1b:0d:6a:6b:ab:f4:4f:d2:
                    06:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DE:E5:24:80:AA:8A:BC:2E:C6:EA:67:1E:6C:AC:A0:58:44:62:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:66:fe:04:9d:b6:11:e8:cc:55:a8:6b:6a:6b:76:82:dc:
         77:d0:83:b5:92:45:ad:28:72:d1:4a:3b:9f:04:58:08:5a:fa:
         62:86:07:1c:3f:a9:7f:fd:ee:b2:42:0d:f1:ca:e9:2b:8f:21:
         22:27:32:9b:38:2d:a4:4c:72:8c:b7:4f:40:d0:2b:19:34:cd:
         d9:f7:c8:d0:c0:4a:61:72:f5:a6:7d:c3:7d:49:b3:50:b3:8f:
         95:7a:fe:53:2c:09:f8:ee:35:48:c7:17:95:6c:96:0e:32:28:
         af:eb:32:51:ad:b0:84:c1:87:cb:b7:51:b2:d8:b9:87:ac:bb:
         ec:4e:dc:6b:94:95:b6:e9:46:17:1b:81:bd:9a:6b:98:eb:45:
         d7:7d:6c:4f:92:cb:d1:dc:38:7b:4b:9e:f6:dd:33:6d:c4:f8:
         b6:d8:ac:51:3f:f1:fe:d5:92:41:73:85:3e:bc:60:aa:4f:5b:
         48:e7:77:82:b7:56:a5:50:de:dd:fb:34:e5:09:db:6c:96:39:
         e2:ff:93:cf:f1:6d:d3:7d:ba:35:74:db:fb:65:aa:c5:22:00:
         43:a1:11:5e:6f:47:79:67:2a:aa:05:f5:b5:95:72:44:5b:89:
         80:38:d7:62:5c:37:62:61:85:82:1c:e6:10:64:76:48:e6:5a:
         11:f4:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:25:45 2025 by rpki-client