Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d6f0b776-66b6-3059-992d-12b5f069f30f.roa
File:                     d6f0b776-66b6-3059-992d-12b5f069f30f.roa (raw, json)
Hash identifier:          AgHOCgfZn1j5JK6Z2bNi9zCCNF9zkJyWpN9rmSPiNwE=
Subject key identifier:   33:8D:2C:FF:1F:74:A1:61:85:95:AA:E2:B1:4C:BD:6F:61:B4:2D:01
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584A295564182B449D022170A380
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d6f0b776-66b6-3059-992d-12b5f069f30f.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     4181
IP address blocks:        159.112.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:64:18:2b:44:9d:02:21:70:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=bc3f3e22-d1a0-4dae-b035-6847fea468fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:c4:83:71:26:fa:9a:6a:28:e3:97:73:4e:
                    61:66:13:b8:da:02:7e:3c:45:23:a3:aa:6a:a7:81:
                    ef:d0:c2:12:d7:cf:3f:66:6b:01:06:15:de:1a:d2:
                    f9:c1:17:f0:47:6d:60:14:c9:c5:9f:a7:d2:9a:5d:
                    77:0c:5f:3c:0d:5d:50:37:49:0c:ff:45:ed:98:56:
                    d4:7f:6a:54:d5:27:b4:d8:07:16:67:2e:0a:ad:7f:
                    94:d9:49:ac:1e:8b:41:ed:bf:e5:8a:f6:70:c1:1c:
                    36:64:65:ce:e4:85:6d:7a:2c:12:90:b1:c4:5b:6e:
                    80:11:88:4d:d9:8e:67:ad:bb:82:65:b9:ef:60:62:
                    ae:57:e3:f3:fc:ef:f4:5b:1c:0d:b5:93:f7:68:50:
                    7e:03:b9:08:b8:f9:f9:27:83:d2:fe:74:19:92:63:
                    a9:76:d3:57:44:f5:3e:1e:65:34:c0:ed:38:89:e8:
                    a1:99:f3:c8:c3:d9:83:05:d4:fc:14:61:e8:30:c6:
                    d3:20:bb:ea:01:40:95:9d:b8:6d:b7:4b:82:f3:b1:
                    e2:2f:c3:b1:28:99:40:d0:86:50:25:19:7d:f5:69:
                    5e:e1:d1:52:2c:c2:4d:bd:f3:3c:71:9f:08:a7:26:
                    17:25:4b:fe:af:f7:58:89:8b:bf:20:97:46:f7:e7:
                    3e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8D:2C:FF:1F:74:A1:61:85:95:AA:E2:B1:4C:BD:6F:61:B4:2D:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d6f0b776-66b6-3059-992d-12b5f069f30f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.112.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:1e:94:e8:38:98:d0:7f:36:4b:cb:ea:23:99:08:12:06:
         dc:40:fb:6a:10:49:4e:fc:76:99:17:28:fd:d5:7e:ed:e3:92:
         8f:9c:f2:5e:f2:be:88:d6:cf:19:1c:40:2b:cd:6d:b8:03:da:
         c6:04:43:fb:47:13:15:06:9e:6f:89:46:76:f2:c7:da:4f:08:
         6b:9d:b9:99:59:00:34:f4:47:8c:67:1c:8f:1e:0d:fb:cb:25:
         52:76:16:12:65:d1:4c:a5:04:2d:9b:0b:33:52:93:83:5a:32:
         89:e1:d4:e3:fb:26:a8:b0:44:a2:93:01:42:de:ad:25:c2:1e:
         f8:85:a1:6f:85:e4:ea:97:b0:4b:6d:2c:d7:ed:ab:e9:9f:a6:
         6b:ac:39:38:20:79:78:f7:23:89:8b:d8:0a:c8:fb:10:32:b4:
         d8:52:28:08:81:74:ee:86:c9:8c:c5:f2:a1:25:a5:2a:6b:a4:
         f1:34:36:d7:fb:29:30:6b:72:61:ca:8a:70:4a:62:77:ae:89:
         7e:48:3b:6b:5a:cd:ae:9e:07:86:8d:2b:c3:0d:b2:55:89:83:
         ab:2c:cd:0b:b6:e2:0d:c2:be:a2:1a:b1:99:31:86:19:6c:e6:
         88:b9:64:0c:95:a9:ed:fc:e2:a1:d3:dd:2a:42:25:5d:a6:2c:
         a5:b7:16:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:17:18 2025 by rpki-client