Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2df2467-c335-31ca-a9f3-d52ab19f796e.roa
File:                     e2df2467-c335-31ca-a9f3-d52ab19f796e.roa (raw, json)
Hash identifier:          06f/FaSPXLXntE+/K1y0PeK8bYdgp/PH6MEEMXF3fVI=
Subject key identifier:   97:EA:9C:5C:2D:80:CE:5C:05:B9:73:AA:B3:26:8F:2A:12:25:7F:ED
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849F17FD643D7AC161493CEDE00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2df2467-c335-31ca-a9f3-d52ab19f796e.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3360
IP address blocks:        192.53.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d6:43:d7:ac:16:14:93:ce:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=694608a0-dfa0-45d9-8283-acb261ba4cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b5:72:1b:49:be:84:65:20:0e:4e:73:a1:d0:
                    c4:70:e1:d4:39:fa:c6:ae:0a:f2:6b:1f:35:93:5a:
                    0f:1a:51:4f:e4:e2:f6:03:9a:8a:e4:f5:11:e0:ed:
                    b5:07:4d:ae:2a:12:33:f5:53:b0:03:20:bb:52:e4:
                    43:0e:e6:f0:25:27:1b:c8:76:bc:25:f8:fd:61:bb:
                    e0:8c:3d:d7:72:36:e4:67:03:cc:7b:01:24:0b:7b:
                    c1:a2:32:87:b8:47:53:58:1f:23:08:6c:1f:6f:a3:
                    c1:32:ba:b2:e6:68:5e:d7:fb:e2:b4:54:e1:ce:3a:
                    c4:6b:74:8a:12:e5:48:72:7b:b0:66:9f:19:5e:5c:
                    42:91:19:a5:3c:4a:e6:95:1d:f6:37:9a:96:d0:d6:
                    de:e9:0b:61:21:c5:d7:66:ed:96:78:0f:c9:2b:37:
                    f6:ea:83:b4:fa:64:49:8a:fd:fd:05:ba:89:6a:e5:
                    8c:5d:7d:d7:e9:2b:84:c8:80:41:1c:06:06:7b:ed:
                    cc:2f:54:02:c9:d8:b7:71:87:91:3c:d0:61:b7:5a:
                    df:7c:0a:0f:04:be:f1:43:3f:61:f5:9b:2b:27:86:
                    2d:bc:9e:d6:22:2e:8c:4a:29:d5:fa:00:f0:ea:83:
                    51:85:da:f1:42:0c:1c:8c:7d:65:39:a4:9f:b9:2c:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EA:9C:5C:2D:80:CE:5C:05:B9:73:AA:B3:26:8F:2A:12:25:7F:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2df2467-c335-31ca-a9f3-d52ab19f796e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.53.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:8b:81:12:fb:9d:cf:89:e5:8e:b6:be:29:e3:f9:f8:e8:77:
         e7:8a:75:40:d7:01:9b:c0:10:e6:16:07:1e:c9:c6:bf:af:39:
         08:f2:d5:cc:f1:7d:cb:f6:c0:d3:e7:45:50:8a:a9:01:e7:0b:
         32:1b:21:d3:c4:b5:ea:98:fe:c7:e9:d8:f8:5c:08:28:f1:e4:
         16:d8:c9:78:b7:45:c9:6a:35:cf:77:31:63:ac:42:59:9d:62:
         1f:b0:b2:57:5e:c3:5e:33:34:e0:61:b4:1b:c0:a4:d1:04:f3:
         48:ae:0d:1c:cb:58:c1:87:21:63:b7:27:83:61:15:24:2f:de:
         02:a8:d2:b8:e7:1c:59:e2:54:f7:1e:2d:d5:6b:44:72:5e:80:
         9d:8a:1f:d2:4b:90:ae:de:d3:95:8d:8a:85:a9:5c:1e:17:12:
         cc:71:e0:df:c2:68:e3:64:57:6b:b3:4d:37:32:92:8e:68:41:
         20:fd:bc:51:cf:1e:fd:b1:0b:43:ae:a7:1e:d0:5a:74:0e:c0:
         4b:80:61:05:95:fc:aa:93:da:22:49:c2:64:cc:dd:2c:9a:96:
         08:43:8b:17:5a:9c:93:32:c2:d9:df:74:bf:29:b4:6d:b7:0f:
         0c:1b:85:2c:75:73:4e:10:4c:8a:22:64:b5:5b:24:d1:e0:85:
         ac:6d:5e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:13:20 2025 by rpki-client