Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/7993d267-af3b-37cd-8527-dfc865e86277.roa
File:                     7993d267-af3b-37cd-8527-dfc865e86277.roa (raw, json)
Hash identifier:          mV34Ck49bqu6xx+ifaI/4A6RP9KBYCvC44MZdZDuuFw=
Subject key identifier:   6E:57:95:8A:C6:FA:0D:B8:7A:1C:B3:75:44:BA:51:F0:43:28:E2:0A
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F43285849DF5A673B6C40E68285D06080
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/7993d267-af3b-37cd-8527-dfc865e86277.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     16509
IP address blocks:        170.176.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:67:3b:6c:40:e6:82:85:d0:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=d71020c0-c4b1-4b51-83be-19e1ec905f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:01:a9:36:1c:f6:49:83:b3:af:8f:a8:26:fa:
                    73:2a:90:2e:41:da:79:c4:6f:ef:37:c6:45:f1:dc:
                    85:61:5b:ea:2b:e2:62:b3:d5:2f:5e:d8:f9:15:01:
                    1b:cc:f6:61:0a:56:9f:18:ae:f5:95:bd:04:18:e2:
                    93:c9:03:01:6e:d7:b8:f4:c1:c2:ec:8b:59:e5:d6:
                    71:f3:67:24:94:a9:a7:c2:9c:f3:29:24:6a:3a:88:
                    e8:f2:c1:3d:69:86:3b:6c:0a:16:e2:56:2b:2f:07:
                    b8:08:3e:5e:89:62:55:e8:0e:73:a1:9f:60:f7:35:
                    e4:a0:4b:a6:f0:ff:f1:34:93:3c:ec:d9:21:97:fc:
                    24:b2:12:e4:b0:2f:b4:40:c0:39:bd:a1:2d:8b:40:
                    e9:6d:44:d4:28:79:b6:51:ff:a7:ce:41:b2:4a:38:
                    44:36:f9:4a:67:d6:34:49:86:5e:ad:f5:72:45:63:
                    a2:66:3e:f8:ac:67:f6:49:5d:33:d7:2f:6a:4b:d9:
                    75:3f:0d:7f:d2:2e:a1:ed:02:f6:d5:4b:73:52:1c:
                    69:8a:d6:aa:94:1e:72:f4:15:b3:91:0e:ee:1b:12:
                    8d:0d:a1:03:a4:8c:6e:2e:29:93:d8:54:ec:14:60:
                    de:24:7f:60:6e:92:50:80:ef:d0:e5:d2:64:13:a1:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:57:95:8A:C6:FA:0D:B8:7A:1C:B3:75:44:BA:51:F0:43:28:E2:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/7993d267-af3b-37cd-8527-dfc865e86277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f2:c2:cc:d2:32:91:65:ce:99:21:b0:14:d9:96:73:cb:34:
         4c:54:19:66:02:4b:27:0d:11:aa:fe:a0:27:28:f1:1f:d5:19:
         75:c5:5b:7d:05:e1:26:c0:b6:87:79:a3:b4:52:c7:1a:80:1a:
         5f:c9:8e:5b:5f:48:3a:73:73:ff:83:fc:f2:4c:5f:12:28:06:
         07:5f:c4:d6:03:98:18:56:fb:91:5d:c4:35:fb:a6:63:0a:3d:
         00:68:4f:4a:b7:57:e3:a5:b7:2d:48:49:68:f5:52:ee:85:29:
         a3:a6:1c:57:54:75:20:d9:92:dc:80:a8:5d:54:e3:9f:38:bc:
         8a:b8:67:e7:bc:22:d9:ea:7f:04:d4:3f:9c:62:41:e2:d6:bf:
         1c:de:04:11:df:52:2f:04:23:51:7c:89:3c:bb:e4:13:63:6b:
         d0:a5:c4:3b:63:f8:85:bb:ba:d0:82:d1:e8:70:59:d6:86:05:
         c3:c6:29:cf:90:c5:2e:0f:ff:e3:c5:69:d1:01:b5:52:c3:ec:
         dd:6f:7f:72:67:7f:ca:36:1b:5a:98:a7:d1:6d:cd:c2:ea:3b:
         e6:64:db:df:8f:cc:ee:07:69:d2:a6:87:a2:e3:1b:46:40:25:
         6c:b6:06:f8:0a:ed:89:7e:c3:45:4f:0c:d1:ec:df:5d:8c:8f:
         55:e3:b0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:09:38 2025 by rpki-client