Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/255fd0e2-c0e8-3dbf-afc2-fbb57076182d.roa
File:                     255fd0e2-c0e8-3dbf-afc2-fbb57076182d.roa (raw, json)
Hash identifier:          o8SN4kFoNwpQp/wGCTdmQClSd1NLAFU7psJzVHQFrXE=
Subject key identifier:   D6:CB:2C:6B:19:B2:DC:EB:AB:DA:97:67:D3:0B:EE:B8:A0:38:45:85
Certificate issuer:       /CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
Certificate serial:       010D0C9F4328584A30503475168808B535877180
Authority key identifier: 87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/255fd0e2-c0e8-3dbf-afc2-fbb57076182d.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     25623
IP address blocks:        162.219.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:34:75:16:88:08:b5:35:87:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=8e50fcec-41b6-4ee8-b418-3d91eef9d53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:86:39:4e:b6:c1:f2:0e:0a:c1:d7:46:c2:42:
                    9d:bd:72:9b:da:c1:20:07:60:c1:b9:8c:24:b5:6a:
                    32:8f:14:b6:0e:ef:a0:b9:57:b1:04:57:ae:91:88:
                    2c:2b:57:73:9a:22:6e:e8:45:d2:5e:49:26:0e:71:
                    3c:30:42:c0:d6:4c:85:60:89:ab:9d:9e:9d:3b:e4:
                    e3:0f:ba:c0:30:2b:0f:da:1f:de:a8:de:13:51:ed:
                    13:7a:88:79:b7:d0:48:ec:75:8a:fa:f1:57:9a:de:
                    48:2d:38:f1:d3:e0:a2:aa:5a:62:1c:6e:c7:ad:ea:
                    6c:c0:98:57:ee:b7:07:60:ed:3f:0b:96:ea:46:f4:
                    6a:23:5d:d5:06:3f:cd:a7:9b:cb:94:ab:71:07:be:
                    a0:25:34:81:6f:7a:d5:e2:53:fc:a3:ee:6d:5c:8a:
                    ee:69:7d:6a:ff:f4:95:88:28:c1:68:31:6f:a2:56:
                    30:ed:f8:48:12:35:d8:ae:dd:33:81:fd:3d:65:10:
                    d0:f1:cb:e0:26:29:cc:2e:11:c8:b9:31:b1:fa:be:
                    0e:a6:60:7c:c8:93:04:92:6a:a9:08:b1:1a:27:9a:
                    26:5b:b3:9e:ac:a3:9f:9d:ea:fa:da:dd:23:f8:70:
                    f4:20:10:7d:6f:3a:a4:ad:33:be:f5:ea:46:06:06:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CB:2C:6B:19:B2:DC:EB:AB:DA:97:67:D3:0B:EE:B8:A0:38:45:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/255fd0e2-c0e8-3dbf-afc2-fbb57076182d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.crl

            X509v3 Authority Key Identifier:
                keyid:87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:79:57:6b:01:84:50:22:5c:1d:11:6b:8c:3b:91:62:9d:10:
         b5:21:b3:bb:e6:15:47:7d:e1:2a:55:3e:73:4c:11:6e:4a:8e:
         ff:40:d5:dd:ac:02:c6:76:11:e3:21:de:03:ee:13:25:b4:67:
         50:a2:ed:05:06:25:b1:fa:82:50:c2:c2:7d:35:0f:45:e4:20:
         d9:06:1a:54:ac:f5:db:ff:f6:a3:29:25:62:74:c9:cf:21:df:
         92:bf:93:6e:0f:f0:06:73:d8:cd:34:b1:64:ce:56:69:56:37:
         c5:86:b1:49:04:40:34:19:d6:61:50:88:e4:d1:e1:ef:79:37:
         48:1e:48:5e:c5:d7:6f:d7:2b:ec:8d:73:bd:a1:d4:f0:1b:68:
         a9:5d:d7:36:03:f0:e7:d3:df:7c:78:60:58:13:86:d1:af:eb:
         7c:70:ec:47:59:13:17:40:e8:0f:6e:d0:3f:95:ab:22:ed:c3:
         f2:51:91:3a:63:51:30:a5:82:13:77:6d:4e:45:34:73:f7:74:
         f9:be:1a:18:06:29:14:a8:0a:2e:05:bf:b4:bc:c7:39:10:91:
         62:d8:89:27:5c:3f:26:c0:7a:72:4a:b1:92:df:39:ab:aa:e1:
         52:ed:d6:b9:50:1b:7d:67:01:f0:a0:9c:ea:1d:11:8b:6c:39:
         66:6e:55:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:57:36 2025 by rpki-client