Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f5e72b65-8c3f-3a03-8288-f2e959e37279.roa
File:                     f5e72b65-8c3f-3a03-8288-f2e959e37279.roa (raw, json)
Hash identifier:          c4zJpoYKrVodnTL4wmA5CimsZmn+qC3E8269hlgsgRM=
Subject key identifier:   B7:D0:F9:3C:3E:A5:74:8F:DB:D4:70:5E:1D:44:5D:1C:8A:76:24:C6
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F43285849F44A5912C0CA4406FA0331C0
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f5e72b65-8c3f-3a03-8288-f2e959e37279.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        192.111.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:59:12:c0:ca:44:06:fa:03:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=b307449f-b029-4d67-8509-e372bd220b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ac:3e:c7:7f:b2:3a:26:5d:4c:52:e2:6f:db:
                    1d:cc:47:2b:0b:8c:79:7e:a9:b4:64:bf:7c:a4:4e:
                    00:f6:39:d0:8a:90:64:01:24:2d:3b:a5:ec:5e:83:
                    4b:8b:a8:6d:5a:7c:42:cd:27:1b:fb:f7:e7:0e:59:
                    aa:ce:ae:19:1a:eb:1b:03:04:15:7e:31:b3:18:1a:
                    aa:78:f8:39:65:4d:60:ec:e5:9d:3c:a4:57:3f:9a:
                    ed:f0:0e:27:ff:e4:39:28:07:33:15:ea:ba:69:d4:
                    12:82:7d:3f:de:c9:2b:b7:0e:f3:cc:dc:b4:2b:62:
                    31:ee:88:e0:f7:ab:ff:8a:08:7d:1c:d7:c9:75:22:
                    07:d4:26:b8:4c:44:f4:f2:89:2b:37:ac:f3:62:72:
                    3b:e8:97:bf:9a:63:9f:9c:82:cb:85:c0:07:d6:af:
                    45:a2:5b:9e:24:7c:cc:22:4f:f4:f6:6a:d8:34:06:
                    be:83:e0:e4:5a:a7:15:d7:50:d5:85:d9:8f:51:1d:
                    e8:0e:4d:1f:03:da:95:c9:cd:c6:d4:24:80:91:f7:
                    ec:46:81:a2:73:51:ac:c0:68:86:5e:31:14:75:b9:
                    93:2f:f2:55:d9:7a:88:ec:e9:85:55:eb:0c:e2:a4:
                    d6:1a:2b:96:bf:d0:2a:d5:c1:4f:b7:1a:7c:06:36:
                    83:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D0:F9:3C:3E:A5:74:8F:DB:D4:70:5E:1D:44:5D:1C:8A:76:24:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f5e72b65-8c3f-3a03-8288-f2e959e37279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:62:07:15:b8:89:6b:e9:5a:1e:aa:6c:44:1d:94:aa:16:97:
         3e:68:61:af:08:22:bc:92:65:77:e5:cd:ce:28:6f:ba:ea:68:
         c7:86:12:c3:34:f5:1a:d8:7d:2c:95:6d:6c:c8:ff:2c:bd:7d:
         4c:bc:da:b1:55:a3:85:6a:98:bd:e4:d4:11:63:a3:9c:8c:ed:
         9c:8c:1d:26:98:dd:2a:c7:ef:ca:29:7f:60:5c:3c:92:22:ff:
         1f:b4:d4:5a:31:ad:83:ae:12:bf:29:a1:4d:8d:40:1d:1e:3c:
         05:77:b1:bb:13:7a:cc:7e:d7:e4:ab:88:52:55:a9:df:5d:43:
         77:6c:7c:3e:de:aa:f3:77:13:d2:b0:05:0f:72:5e:91:f7:2b:
         37:b2:6c:7f:94:95:dd:4d:9f:c3:7d:1b:82:f3:8e:91:dd:65:
         24:da:65:91:88:52:a4:e4:0e:15:8b:06:0b:e9:91:fa:1f:e2:
         5b:43:f9:3a:21:1f:39:b5:fc:38:67:0d:78:b1:d4:c1:b9:46:
         d2:d3:73:03:b6:2a:e3:68:eb:89:ba:38:fd:96:08:dc:a1:41:
         ee:15:2f:d4:f2:72:55:cb:dd:18:99:85:31:1f:40:70:bb:87:
         35:20:b2:0f:84:4d:04:59:12:78:6d:49:b8:57:ca:7a:b8:fa:
         6d:a5:78:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:18:39 2025 by rpki-client