Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/79af2351-bc12-3c89-8202-a27c2b80b2b1.roa
File:                     79af2351-bc12-3c89-8202-a27c2b80b2b1.roa (raw, json)
Hash identifier:          i2FOfmhtRSGLXQay302EdOunNCX5uWkv3n20I1xuylA=
Subject key identifier:   97:E6:3A:1C:68:17:7E:FF:7D:6E:E3:C4:7C:B8:47:9A:8C:CE:E0:CA
Certificate issuer:       /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial:       010D0C9F43285849DF5A6DBA91DD09522DD752A0
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/79af2351-bc12-3c89-8202-a27c2b80b2b1.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     209453
IP address blocks:        173.246.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:6d:ba:91:dd:09:52:2d:d7:52:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=e594b9cd-e6cc-424d-b6ad-2a67f431f81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:6a:a5:26:e7:a0:1f:1b:60:24:f1:c5:d9:
                    3e:8e:5d:d7:d5:97:f7:e9:c6:99:d2:a9:eb:fa:92:
                    7c:38:72:6d:5e:f2:f4:2f:c2:38:90:95:b3:92:23:
                    41:cb:6c:7a:70:0f:4a:48:26:96:e5:56:02:b2:90:
                    f1:b9:88:e5:35:5d:11:f6:b1:c5:63:5f:ce:23:8c:
                    52:1e:6f:d0:56:cf:61:b2:af:19:b9:02:6c:ea:d6:
                    c6:5c:7a:18:0e:29:7f:32:4a:cd:8c:e8:29:bc:d7:
                    bb:48:6d:4b:4b:3a:2c:61:9c:5b:15:34:e6:3b:fb:
                    77:3b:c5:a3:45:94:9d:8e:23:5a:67:7d:a1:b4:06:
                    d0:41:c8:f1:f3:02:3b:eb:80:2c:50:a2:9f:3e:c7:
                    7e:b3:e9:46:63:d1:66:bf:d7:be:8e:2e:3d:b9:ab:
                    2d:fc:7b:dc:e6:a2:b3:ce:e3:ab:f8:de:25:ae:5a:
                    b2:3b:c3:14:6c:34:83:ce:94:62:62:c6:63:ac:e4:
                    90:60:b5:05:45:0b:71:ef:67:81:5c:7c:d2:3b:37:
                    f2:aa:eb:c7:a8:5e:07:9a:f2:60:d0:35:c8:db:8f:
                    21:96:97:ce:36:2f:29:dc:26:79:a5:e2:b8:fa:9b:
                    ff:44:96:fd:8c:dd:96:25:9e:7b:5a:a1:9d:4e:3a:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E6:3A:1C:68:17:7E:FF:7D:6E:E3:C4:7C:B8:47:9A:8C:CE:E0:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/79af2351-bc12-3c89-8202-a27c2b80b2b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.246.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a9:6d:03:78:0d:35:c9:d5:7d:68:42:7e:b4:0c:2a:5f:cb:
         91:4b:52:3b:9e:1b:13:6c:8d:c9:2f:77:59:9c:c0:97:c1:91:
         6c:96:c4:9d:45:1d:96:52:9f:96:4f:d4:b5:ea:66:bd:cb:7f:
         06:7c:29:23:60:9d:f4:7f:f7:77:98:41:a5:c7:41:a1:f8:ef:
         02:68:19:99:2d:c9:cd:c9:16:ac:11:ff:ea:29:ea:b8:0c:14:
         49:f7:18:c5:a4:1b:20:4c:e3:db:e0:df:ea:63:ab:55:75:fd:
         c6:0a:8d:68:85:d4:62:95:44:cf:77:58:90:1c:82:55:ab:24:
         d1:68:61:9c:2f:2d:29:f2:31:62:25:94:0b:fd:33:ce:79:9c:
         8e:47:f2:27:b9:72:81:f4:14:fc:c9:d4:98:a6:81:5c:78:ee:
         eb:87:59:76:56:e8:53:18:ec:87:99:76:b9:14:f0:14:62:bb:
         3d:73:9f:3b:ea:2c:42:f4:0b:e2:a9:ef:9f:00:16:9a:cc:eb:
         45:92:ff:9b:5b:4d:2c:c2:26:a6:ff:d4:15:fe:73:36:a7:f5:
         1e:cc:21:06:e8:be:6d:d2:90:24:3b:33:27:8f:e0:0e:04:30:
         b0:fa:05:0c:53:9a:67:b6:f3:75:fb:c3:24:5d:aa:0a:45:b1:
         25:d0:0e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:41:04 2025 by rpki-client