Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa
File:                     90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa (raw, json)
Hash identifier:          +DB5dwtUU1xFs4RyWMRIqOtk70VlDNNMMkXHAa2cEgM=
Subject key identifier:   00:E5:6A:33:3B:42:59:4C:80:8C:9A:74:BE:38:FC:54:21:9E:B1:C5
Certificate issuer:       /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial:       010D0C9F43285849C4D4B48F1296451DEB212000
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16509
IP address blocks:        192.111.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b4:8f:12:96:45:1d:eb:21:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=e8db6169-4c6b-47f3-b75f-9d824e771800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:8b:99:fe:88:ad:43:3b:ca:80:04:90:19:
                    ba:ba:9c:7d:42:60:84:ac:ad:c6:d3:c6:08:7e:0d:
                    ef:a5:97:fd:04:89:d8:a8:3a:18:ca:e8:88:c5:d0:
                    41:07:e5:44:af:26:37:54:65:36:17:6a:ff:a7:ee:
                    39:57:60:bf:1a:f3:ff:d9:5c:e3:4f:93:e9:09:4b:
                    6b:f9:09:df:7a:e0:6d:d9:4c:93:f1:b0:97:e3:a8:
                    ca:6e:9b:dc:33:af:84:fa:9e:24:bd:ec:49:38:0a:
                    79:7a:ba:0f:00:87:a4:96:98:54:49:8a:01:17:fe:
                    a0:63:60:58:e5:b7:b7:f6:f9:fb:1f:3b:88:2e:47:
                    c8:a5:6c:5b:df:4d:d0:69:54:c4:e4:b3:ae:bd:45:
                    57:d9:8f:26:81:c1:22:fe:12:da:2e:0a:8b:71:5b:
                    7d:0b:26:d5:d7:7e:23:dc:8c:d4:ca:54:80:19:3e:
                    05:ff:16:f5:32:ef:2a:4e:34:e8:4c:30:78:b9:cf:
                    2c:60:ad:dd:3e:eb:27:b3:80:de:d0:70:05:ac:48:
                    24:d5:67:d1:f3:b8:c9:e5:43:26:53:6e:56:5d:87:
                    78:34:dd:ae:c7:ad:5a:9d:27:1d:33:9a:d2:18:e5:
                    26:5c:5e:bb:26:0d:72:2c:10:9a:46:3e:ff:d5:1e:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E5:6A:33:3B:42:59:4C:80:8C:9A:74:BE:38:FC:54:21:9E:B1:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl

            X509v3 Authority Key Identifier:
                keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ec:81:70:86:af:1c:74:10:2f:24:86:03:f3:6f:75:c5:e2:
         1c:81:9d:bc:d1:93:b4:c2:37:46:2a:13:3b:02:5f:9d:da:e3:
         1d:5c:ba:c7:b5:e0:f8:18:ab:6b:c6:fa:d0:5c:d4:a1:97:f5:
         92:b1:ab:f9:ab:e1:a0:e1:90:94:22:0c:c8:a4:26:09:f8:41:
         e6:48:8f:f3:b7:50:14:bb:21:2b:39:15:5d:aa:75:15:d4:bd:
         61:02:d4:11:6d:f3:70:63:1d:ea:8f:b1:e7:d3:07:e8:73:b9:
         59:5e:3b:01:49:2d:8e:63:c0:6d:82:41:9c:1c:10:1a:89:b2:
         f6:22:18:2e:d3:d1:b8:ce:cb:8b:ed:58:2d:e0:c9:79:63:a2:
         9c:c0:3b:28:cd:8c:75:cd:1e:ed:87:50:85:dd:4d:4a:eb:00:
         4c:df:9b:9f:51:27:cd:bd:a0:10:0c:57:e4:a2:55:7c:5b:1a:
         00:11:22:c9:87:4c:c1:22:25:30:08:56:fa:54:ca:35:9d:ef:
         0d:29:08:7d:5b:4f:35:a9:b0:a7:b9:ae:cb:41:5e:5e:6d:59:
         fe:94:4f:12:4b:14:06:55:a8:44:b2:c4:e2:00:31:60:cd:85:
         79:7e:02:b9:8a:c9:b2:8b:3e:8b:07:93:9d:ca:1a:aa:73:73:
         1d:98:62:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:07:22 2025 by rpki-client