Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/45ce1f1e-d56c-35c7-a66a-8e01492d2312.roa
File:                     45ce1f1e-d56c-35c7-a66a-8e01492d2312.roa (raw, json)
Hash identifier:          fg4Cmo7yeFvsmK/GgaoIgB9RJIBtN1g+bQwCSzI7Pe4=
Subject key identifier:   F4:11:24:0E:35:24:AF:AE:CA:BB:2F:6D:3B:63:24:DA:A4:40:4A:E1
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285849F17FB4A682A0C6BA5B755B00
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/45ce1f1e-d56c-35c7-a66a-8e01492d2312.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     399629
IP address blocks:        172.86.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b4:a6:82:a0:c6:ba:5b:75:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=a9283d81-559e-46e5-b02a-c2f67ebe3366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:98:b7:2c:fb:1f:0b:4c:40:8f:57:7c:52:67:
                    c5:67:1f:50:b9:bd:a2:2b:fa:70:b3:83:5c:11:9a:
                    67:2e:eb:53:ec:e7:aa:da:90:19:2d:82:71:18:b2:
                    47:a4:9a:78:10:ee:e4:a0:2e:05:53:d1:cd:92:6f:
                    8b:6b:de:03:e4:7a:87:fa:74:45:30:27:ed:06:03:
                    11:52:b7:d2:15:69:9c:75:1b:65:9c:a1:06:13:be:
                    36:43:b2:4d:fc:4f:41:f9:e9:fb:81:a6:59:86:58:
                    96:1c:16:cd:f7:74:87:f2:08:93:4a:6b:7c:39:e3:
                    9a:7b:1c:78:b4:6d:46:63:05:7c:08:3f:22:94:6a:
                    44:71:85:52:32:87:6c:98:c9:db:74:ee:74:82:ca:
                    bf:0d:ce:cd:c4:a5:ff:81:0e:79:6b:8e:aa:70:dc:
                    b2:fa:7d:f3:19:40:e7:e0:b1:39:eb:03:c9:7f:66:
                    ae:40:b8:53:8e:bf:1b:d8:52:46:7d:be:0a:74:9f:
                    23:fc:54:b3:df:5f:02:e8:e3:74:62:9a:45:78:dc:
                    25:d1:9d:7e:5a:64:0b:cd:b4:e5:ef:5d:8b:60:e6:
                    b7:4e:66:a5:3e:1a:ba:27:31:35:bd:4f:d3:9e:c7:
                    86:a3:22:a5:a5:ec:d9:84:9f:63:c3:27:30:75:33:
                    55:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:11:24:0E:35:24:AF:AE:CA:BB:2F:6D:3B:63:24:DA:A4:40:4A:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/45ce1f1e-d56c-35c7-a66a-8e01492d2312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:21:4e:a1:af:97:94:7d:6a:be:d3:05:f5:aa:6c:65:5e:f9:
         f7:dd:b7:8d:94:87:de:c6:6a:5c:11:cc:01:96:d0:b5:16:85:
         fb:8c:31:05:e2:92:25:87:2c:e7:f9:22:39:99:1d:72:1d:e8:
         d2:a2:3a:86:3a:bd:34:af:de:17:36:03:58:40:04:cc:5e:4f:
         2e:a9:14:c2:a5:c9:0d:0a:3c:6f:6e:57:91:69:a5:e4:37:60:
         6e:b9:27:d0:cf:73:29:87:c9:f0:49:55:94:f0:8a:ff:ae:66:
         c4:b6:08:b3:0f:ab:5d:c8:ec:28:a4:a1:31:97:8e:d3:48:a7:
         7a:9a:13:41:01:e2:a7:92:ba:21:76:a9:d5:f2:6c:34:b6:32:
         2e:bc:92:82:cc:f1:10:e4:4f:41:08:65:16:ca:29:9e:ff:64:
         5b:56:e5:cc:09:39:0d:0e:ae:b0:37:96:56:66:7b:b5:37:f7:
         9d:c6:1c:07:8d:a6:a4:7a:18:bb:06:ea:07:7c:2d:8b:38:80:
         a4:8c:f3:37:2d:27:45:90:d9:64:f3:6e:f9:2b:07:76:a6:a9:
         27:15:b1:d1:3b:29:ce:3b:aa:f7:7b:c3:11:27:07:02:f8:20:
         89:ab:c0:24:ee:a7:be:74:d0:3b:18:aa:38:e3:fd:f7:83:df:
         db:25:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:27:15 2025 by rpki-client