Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/c5751653-7ab6-34a6-a496-6616ab08eb43.roa
File:                     c5751653-7ab6-34a6-a496-6616ab08eb43.roa (raw, json)
Hash identifier:          y6NJBTZnzoKH/BXo3WHIlfp0AfuOLeesDPnJAr7qJwQ=
Subject key identifier:   07:53:6F:F0:5F:DC:77:35:D5:C2:C9:35:42:36:99:85:F4:2B:B2:E4
Certificate issuer:       /CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1
Certificate serial:       010D0C9F43285849F9DFDC23CC21FBBD25FF4200
Authority key identifier: 7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/c5751653-7ab6-34a6-a496-6616ab08eb43.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     46634
IP address blocks:        192.33.172.0/22 maxlen: 24
                          216.25.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:dc:23:cc:21:fb:bd:25:ff:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=6659e7d0-6745-4a7b-9a2f-25fb2992f638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:98:fa:85:8e:9a:96:02:d4:0d:45:78:cc:6d:
                    1d:3d:c9:af:c3:45:e4:75:aa:33:f5:69:36:ea:29:
                    ae:7d:a4:f7:84:df:c0:93:27:a9:10:37:8c:fc:31:
                    7f:59:85:aa:a6:d3:60:89:70:22:b2:21:97:49:b4:
                    27:bc:b3:8a:d9:eb:2f:08:05:8f:75:d6:e1:85:5e:
                    04:1a:35:a2:90:ad:74:de:7f:24:73:96:67:7f:09:
                    17:55:f4:5e:8f:c6:4b:88:07:2a:b5:ba:a1:8f:f2:
                    38:e4:b1:56:2f:1d:8f:08:e4:b1:ce:24:f5:16:39:
                    16:dd:1a:e0:5e:04:73:e0:e3:b2:9f:fb:71:f2:e0:
                    5a:43:f4:2c:af:f1:a1:60:16:ff:84:cc:15:f6:9b:
                    c9:b8:24:f7:c7:a1:69:c1:41:9b:02:31:8d:40:ca:
                    c2:2f:b3:f1:59:45:86:6f:db:35:e0:78:87:88:fb:
                    5f:93:ca:00:11:97:11:cc:5a:25:05:99:0b:0b:90:
                    dd:85:01:4e:b9:bb:bb:e8:8f:f6:dc:f3:0f:55:21:
                    b2:6d:ab:29:bf:70:d9:d2:c9:ff:8d:25:b7:e2:11:
                    1b:c2:92:0f:03:f9:d5:bf:17:39:d3:58:49:8c:47:
                    77:f6:8d:37:be:7d:4e:33:0f:f1:76:5f:c5:54:65:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:53:6F:F0:5F:DC:77:35:D5:C2:C9:35:42:36:99:85:F4:2B:B2:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/c5751653-7ab6-34a6-a496-6616ab08eb43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl

            X509v3 Authority Key Identifier:
                keyid:7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.172.0/22
                  216.25.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c8:b9:c0:ad:3f:2c:20:89:db:16:38:e4:00:93:12:e3:2a:
         e1:82:55:9d:30:b4:3e:ef:6f:80:67:94:05:ae:f6:a4:39:de:
         27:af:ab:69:d6:56:1a:6c:23:81:8d:a1:7f:e1:c9:92:f3:46:
         09:b4:82:21:f6:e1:0d:47:a4:74:29:60:f6:12:14:cb:a5:0b:
         f1:ef:f3:4e:02:84:f1:12:a3:08:79:e7:a6:03:c7:89:75:8b:
         c4:d8:4b:0b:e8:8e:6e:99:44:40:a4:9d:e4:8b:8e:9c:2c:f4:
         b8:b3:1e:c8:4a:f0:92:10:a8:dd:3a:c2:c8:b8:72:a3:d3:b9:
         12:89:89:22:79:7e:22:f7:8a:34:e2:c2:bf:35:b8:a3:96:42:
         89:85:e4:07:f7:c2:2f:c5:7e:57:ff:b4:83:f5:5a:a3:28:cd:
         49:26:8b:64:50:99:92:38:eb:ae:98:45:b6:3e:cf:b2:1a:c6:
         c6:c3:19:f8:37:50:cb:a8:f4:b2:a7:7a:21:cc:88:02:e5:24:
         73:76:a9:50:17:93:b7:49:73:75:e4:c7:be:f2:f7:3f:d0:a7:
         f6:3a:b1:33:9d:45:fa:43:80:8c:55:74:8e:43:97:f9:9a:a7:
         46:d0:d4:c6:4a:a0:88:80:cc:05:b8:72:72:bc:d5:38:d1:75:
         c0:9f:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:37:19 2025 by rpki-client