Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/5322ee79-9c85-3eee-9d78-27a6894643bc.roa
File:                     5322ee79-9c85-3eee-9d78-27a6894643bc.roa (raw, json)
Hash identifier:          V8HhCGsabmy3gy0922xkpjFs/SztYeMvJdIuM8EkY4I=
Subject key identifier:   F8:7A:7C:F8:D7:3D:A9:6A:13:5A:96:B6:55:B4:30:BF:7E:69:8A:90
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F43285849EEB4FC09DD6D6EA964343928
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/5322ee79-9c85-3eee-9d78-27a6894643bc.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     396982
IP address blocks:        192.111.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b4:fc:09:dd:6d:6e:a9:64:34:39:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=5bb02f45-a754-430b-a419-7a6494e36222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a5:58:f0:6d:67:2f:50:9c:1c:63:8e:98:fa:
                    6b:2d:bb:86:a1:ee:8e:fd:8d:67:bb:5a:ac:ba:ba:
                    44:08:da:ae:f4:30:04:f0:cf:82:0b:3d:72:3f:61:
                    c1:68:4b:6f:9a:40:6c:37:08:5a:45:29:df:04:31:
                    cb:df:3f:68:7f:50:81:71:a4:ac:18:3c:f0:23:67:
                    3a:69:0d:41:2e:13:b2:ad:cf:0f:75:1c:3f:63:df:
                    31:3e:b6:d7:a1:b8:0a:4e:35:b3:d6:b1:09:9e:73:
                    87:a2:9c:01:91:ff:ed:7e:a0:fe:05:8a:1b:86:cd:
                    cb:e3:8d:3e:28:01:ee:ad:a6:7c:ba:36:ed:96:eb:
                    25:90:59:84:10:b1:26:f3:ac:52:18:55:08:fd:6f:
                    a3:e1:f8:65:72:85:e9:97:42:26:72:57:9a:7f:38:
                    16:4e:ed:1d:66:40:25:3e:fb:fb:b8:19:b0:9f:14:
                    46:c8:7d:37:59:cd:c5:5a:4f:c2:9f:5c:21:7e:82:
                    46:43:00:e0:f8:e8:1f:96:f6:ab:34:ad:c6:42:a8:
                    1e:34:cf:a1:a5:75:1d:01:cc:c2:62:82:d2:76:08:
                    cc:73:24:1f:12:33:d5:cd:e1:a6:47:a1:6f:85:eb:
                    51:d1:09:24:59:05:4a:f5:3a:98:f2:2d:f9:24:b8:
                    05:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7A:7C:F8:D7:3D:A9:6A:13:5A:96:B6:55:B4:30:BF:7E:69:8A:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/5322ee79-9c85-3eee-9d78-27a6894643bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e4:09:a5:2e:94:4e:51:6c:bc:8c:05:e4:ed:d6:15:97:b4:05:
         cc:05:bb:03:2c:4e:c3:27:e3:ad:8e:9a:e0:22:b8:8a:08:d6:
         28:a0:03:25:c2:ad:80:25:cf:ae:9b:f8:14:e1:4a:49:77:95:
         bb:51:ce:4f:d2:d2:d7:00:5e:d3:68:cb:b9:55:f4:82:3d:e4:
         35:71:f2:f6:b0:e5:30:6d:7a:f8:1f:11:23:c9:b4:66:1c:46:
         3d:54:e4:10:c0:f8:13:04:ae:45:86:6d:a3:60:39:5e:aa:71:
         bd:1c:df:65:e1:0a:b7:14:fc:31:88:10:10:8e:05:3d:11:4c:
         77:ed:4d:7e:21:48:a0:cf:8c:78:85:57:a0:6c:ce:cc:15:dc:
         67:60:6a:6d:e0:a6:e6:1c:c4:7e:86:d1:a1:53:f3:b3:a4:81:
         51:1a:a0:5f:d5:b6:22:d6:69:a0:b6:c6:80:6d:e3:dc:b5:66:
         95:1a:93:26:2c:c6:de:cb:5a:2b:76:55:c0:fe:02:87:47:00:
         68:b8:21:d8:f2:14:0d:d1:a1:78:30:ec:96:2b:d3:eb:42:12:
         d2:8a:60:3b:33:79:92:f3:35:b9:56:a3:01:49:92:e5:d8:0e:
         95:56:f5:58:2b:95:c9:9c:a0:dd:22:a9:2f:64:38:50:00:f1:
         5e:42:5a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:05:46 2025 by rpki-client