Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/527fa986-35bb-33c1-a1c2-8579672b73ec.roa
File:                     527fa986-35bb-33c1-a1c2-8579672b73ec.roa (raw, json)
Hash identifier:          k/3+jNl0DEvVgk5VK+77iVpYkBDXz814IvHDuVZsZOk=
Subject key identifier:   2E:97:CB:BC:EB:EB:A2:D4:AB:80:DA:DE:8F:AF:74:01:D3:8C:D5:C6
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849D85F86C711ED13E67DAF8240
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/527fa986-35bb-33c1-a1c2-8579672b73ec.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        134.224.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:86:c7:11:ed:13:e6:7d:af:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=c4cd2b96-3bde-4fa8-8c4b-9358aaf7013a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:98:46:0c:4b:52:cf:5e:51:6c:34:2a:56:
                    78:1b:52:b1:7b:25:2e:8f:d5:0d:eb:7f:2a:22:9b:
                    dc:bd:f8:d1:bb:12:2a:ab:5b:f8:11:ce:4b:d2:40:
                    57:e8:c1:54:61:c9:6b:2d:75:b2:49:b1:03:59:be:
                    1d:a9:6a:6d:b7:da:45:03:5c:8f:ea:2b:4b:9c:9d:
                    cd:ec:68:54:26:36:3f:52:6a:d7:38:6d:6f:41:3c:
                    f7:20:9f:ba:a6:8a:0e:9e:e0:38:18:f0:4b:88:22:
                    87:3d:59:90:3b:7e:38:1a:91:f1:35:4e:78:00:83:
                    09:15:e1:90:b1:e3:9f:57:e2:52:d8:28:45:25:16:
                    4b:f3:f2:69:d5:d1:22:29:d0:a8:0b:5d:dd:bf:49:
                    4d:d2:ce:80:8b:5f:de:bf:e5:a5:2d:eb:95:cc:37:
                    05:cb:84:91:7b:dc:13:8c:27:ba:ed:ba:67:9e:22:
                    5d:59:b3:13:22:1f:ec:12:e5:78:ed:da:dc:85:aa:
                    be:fa:89:09:1a:ba:6c:63:8d:97:32:69:e6:b6:c4:
                    41:0f:dc:d1:a1:c0:5c:2e:74:39:e6:cc:82:bf:da:
                    34:ed:2a:6e:4b:44:28:68:f7:9a:c4:4d:1d:cc:c5:
                    1f:04:ba:ef:a3:a5:35:56:81:8f:58:70:75:4f:df:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:97:CB:BC:EB:EB:A2:D4:AB:80:DA:DE:8F:AF:74:01:D3:8C:D5:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/527fa986-35bb-33c1-a1c2-8579672b73ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ef:9f:54:a9:10:e4:97:ed:a5:d3:fc:cc:15:5e:6d:64:b9:
         2f:4b:c5:9c:00:ab:07:d9:27:52:97:b3:71:77:85:78:5f:fd:
         59:24:67:42:35:67:0a:92:1b:b7:b0:a6:ac:c2:2b:eb:2e:5b:
         00:ac:fb:37:eb:17:43:c1:d8:02:77:0f:02:64:ce:b0:24:7b:
         5e:ad:00:c3:3a:56:16:d2:a6:b5:98:5b:68:c0:46:0e:c5:08:
         e4:3c:50:e9:de:0f:97:e9:3b:6d:f6:73:a4:07:32:b1:b5:70:
         48:2e:99:c5:16:79:10:0c:a6:e1:9f:d9:34:8f:2c:52:a1:c7:
         55:2b:a1:b6:c4:30:28:cb:ed:85:2e:b6:d6:15:72:dd:51:5c:
         9e:de:94:7b:76:69:c4:8c:c6:67:c8:4b:e9:cd:9b:6c:0d:47:
         43:53:8f:f8:57:8c:21:c8:e3:c4:7d:fd:2f:89:6a:3c:bf:82:
         0d:b6:af:a8:39:a5:d4:dc:36:18:d9:ce:0e:a8:43:99:17:0f:
         0c:a2:21:d2:da:68:5e:b1:be:16:21:4d:59:21:7f:46:a0:7d:
         3a:cd:a3:05:34:12:fa:f6:ed:18:76:a9:d2:75:c2:ad:7a:d1:
         6b:6e:49:e6:b5:e1:83:87:cc:28:b7:70:7d:75:61:a3:62:78:
         3c:ac:98:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:50:56 2025 by rpki-client