Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d75eb5d-4044-3eaa-9cc6-00b76796d42f.roa
File:                     5d75eb5d-4044-3eaa-9cc6-00b76796d42f.roa (raw, json)
Hash identifier:          qx+QRa2+2EokQT7T+e9faOEL03Ar2DickvLHis4DtBA=
Subject key identifier:   AC:B2:AE:05:AA:E5:81:21:7F:34:3F:44:82:3C:38:49:F2:D3:A5:54
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A126D45EA7500840F267D8180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d75eb5d-4044-3eaa-9cc6-00b76796d42f.roa
Signing time:             Tue 03 Jun 2025 20:05:29 +0000
ROA not before:           Tue 03 Jun 2025 20:05:29 +0000
ROA not after:            Mon 01 Sep 2025 20:05:29 +0000
asID:                     3855
IP address blocks:        199.172.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:12:6d:45:ea:75:00:84:0f:26:7d:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  3 20:05:29 2025 GMT
            Not After : Sep  1 20:05:29 2025 GMT
        Subject: CN=55cb6f50-a449-408b-915b-1e3ab9b9603e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:86:e6:4f:8b:46:af:a4:e9:f1:32:c8:f9:78:
                    73:43:c8:a0:81:73:3e:83:b4:1b:cc:ab:2a:f7:f8:
                    24:a2:7d:37:cc:1c:37:b0:4c:e7:1b:50:f6:ef:34:
                    dc:91:e5:f9:90:a4:57:e0:f8:76:eb:22:86:3f:00:
                    11:38:90:0e:81:b0:99:91:d2:41:f2:4f:12:0f:51:
                    87:ed:2a:24:a7:21:86:1d:e1:49:74:d6:4c:f1:c9:
                    0e:d4:c5:ec:f3:73:67:98:c4:5c:92:ca:b4:89:e2:
                    20:e6:d5:75:a5:57:f2:f7:16:ce:41:5f:ea:6b:e2:
                    b6:e9:7b:86:28:4c:1f:2f:be:0a:f3:65:e3:34:08:
                    62:99:e3:9f:2d:f8:39:e5:5d:c3:37:cd:2f:d7:c1:
                    5b:e6:d3:52:7b:df:21:ad:a0:de:50:dc:4a:5d:cc:
                    1f:84:12:3b:c1:7e:08:31:8c:6f:6f:52:ca:71:44:
                    8d:4a:8a:47:2b:62:a9:c3:4a:3e:45:fe:45:af:09:
                    27:84:16:57:30:0e:0a:58:c9:36:d5:b9:08:18:f2:
                    29:46:83:2d:75:c4:fd:b4:70:ed:cc:27:cf:f1:aa:
                    63:c4:94:23:cb:7d:6b:41:98:b6:96:99:77:94:be:
                    03:48:8c:00:9e:09:1a:cc:d6:de:39:e8:65:78:a0:
                    3b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B2:AE:05:AA:E5:81:21:7F:34:3F:44:82:3C:38:49:F2:D3:A5:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d75eb5d-4044-3eaa-9cc6-00b76796d42f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d5:8d:2f:bf:b7:a9:16:28:1c:78:b7:1b:31:11:80:59:e4:
         ed:db:ab:6b:38:7c:c1:76:05:01:93:d2:33:ed:9b:bb:31:3c:
         49:37:16:da:ba:16:50:fc:b3:1c:a2:22:47:e7:9d:89:cc:b4:
         53:22:ce:26:cd:19:29:e5:e7:46:96:91:51:9c:0b:26:4a:96:
         47:f5:1d:0f:44:79:63:0b:6c:de:82:37:27:cb:e1:15:35:a1:
         3c:50:c3:54:eb:d0:7d:af:cb:74:9a:70:b5:1f:aa:d4:ef:e7:
         b0:a0:80:5f:00:aa:95:92:bb:b2:80:ad:9e:1e:68:d0:43:11:
         f8:7c:98:87:55:42:2d:c4:51:37:95:d4:ed:71:61:91:33:77:
         44:86:1f:4d:13:0c:d1:3f:90:b4:5f:2c:11:c5:30:51:7b:7d:
         8f:b7:32:46:09:16:61:5e:54:59:af:bb:87:f1:41:85:41:cf:
         93:ce:26:ba:52:b9:4d:e5:6a:d8:bb:cc:35:12:78:05:62:16:
         10:13:4c:4c:e0:4e:89:7d:d0:38:b2:d2:df:3d:79:e1:b2:31:
         d2:a1:60:ea:9d:2c:b7:0d:7a:86:48:20:91:09:b4:1e:ca:8e:
         eb:03:ce:ff:43:dd:6b:02:11:ff:3b:bb:72:88:8f:94:9d:8e:
         14:30:ac:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:30:02 2025 by rpki-client