Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e4d9181-5c02-3df4-bd09-b3788858b3ee.roa
File:                     5e4d9181-5c02-3df4-bd09-b3788858b3ee.roa (raw, json)
Hash identifier:          3VKpdc4LcBPzyTp91t4WqRMnIDxbkQpKLR9O2AszaQo=
Subject key identifier:   B2:26:3A:2A:E6:C1:D7:7C:41:D8:BE:D3:FE:48:FD:9E:1B:5E:D3:71
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5CFB28C44BBDED95F3688700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e4d9181-5c02-3df4-bd09-b3788858b3ee.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     63949
IP address blocks:        170.187.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:28:c4:4b:bd:ed:95:f3:68:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=4e682fa7-88a2-45de-88e9-a23dd83e61f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:62:63:fd:3b:45:08:c8:4e:ce:fa:81:00:0c:
                    75:b7:30:ba:86:aa:92:3a:16:c7:1b:d0:03:cb:0a:
                    cf:65:45:1c:df:cd:35:01:18:66:63:e1:cd:c8:cc:
                    de:dc:34:90:c9:94:15:4a:56:38:e4:75:61:a7:4b:
                    a6:bb:87:f0:2f:1f:77:f9:25:52:17:23:de:43:e4:
                    13:87:55:1b:b4:e7:33:c2:e1:a6:4c:7a:de:c0:4b:
                    28:30:44:2c:4d:1c:04:f8:5a:26:39:08:02:91:15:
                    a5:4b:90:33:2c:b1:31:e4:e9:96:1a:50:92:d5:93:
                    1c:df:8e:e0:cd:0d:32:7a:58:69:9c:b3:53:8b:55:
                    d6:b0:4f:e1:f3:19:5b:2b:88:58:b9:c3:da:19:ef:
                    52:b9:91:fe:64:b2:1c:48:68:eb:94:6f:bd:5c:99:
                    41:c5:62:f4:06:7b:d5:66:ac:94:29:3b:e7:e7:d0:
                    a1:e6:15:88:de:4d:fa:48:9f:a8:d4:1c:e7:3e:5c:
                    e5:83:77:61:34:4b:86:6f:8d:7f:af:09:25:fb:a6:
                    f2:c7:0e:86:0a:29:c3:f0:73:ec:2e:4c:d8:70:81:
                    36:1a:ab:f0:db:45:b6:55:69:20:e0:34:ba:3f:d1:
                    05:d8:8f:41:9a:9a:4c:e3:1c:57:3c:f5:44:4d:00:
                    76:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:26:3A:2A:E6:C1:D7:7C:41:D8:BE:D3:FE:48:FD:9E:1B:5E:D3:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e4d9181-5c02-3df4-bd09-b3788858b3ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.187.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:05:f1:02:9f:8e:d1:9e:d7:7c:c4:b7:67:ac:91:38:ac:75:
         60:56:47:a3:be:68:b9:25:9d:0c:7f:cc:c6:b5:df:4d:ef:7c:
         fa:36:4d:7a:fd:2d:13:47:dd:9d:4c:0c:94:f2:af:6e:db:21:
         0e:36:75:41:17:72:0f:d6:88:50:86:e0:9e:78:10:c4:df:b2:
         f4:88:48:b6:90:d8:65:0f:ca:63:5c:90:04:9b:7b:47:f8:d0:
         bf:e4:17:04:59:96:24:a0:58:61:da:10:77:c9:de:8c:10:9e:
         cc:ce:d8:57:8f:32:6f:ce:d4:04:16:ed:34:b6:cf:2a:a5:82:
         8a:6d:92:eb:dd:52:53:95:8a:5a:cb:1c:b3:35:03:25:ad:79:
         0c:7c:64:ec:87:0f:98:f7:cf:fe:7e:01:1d:7c:c5:99:22:67:
         87:92:4a:99:8f:07:a2:e9:fa:72:c2:65:c8:fd:2e:d8:c1:39:
         79:bf:af:a8:b6:a9:a4:d1:08:b0:34:1c:7a:53:fb:3c:f0:63:
         5d:41:7f:71:37:b5:36:6d:5f:3e:33:59:76:5f:49:54:4e:6e:
         3d:c5:a6:a7:d8:f1:ab:04:84:9a:b9:6c:30:14:81:9b:b0:19:
         62:cb:19:a5:67:bd:a6:7f:2c:96:44:0a:30:5e:8d:6b:a8:df:
         5c:7a:f6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:57:57 2025 by rpki-client