Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3d794377-a5a2-32e1-b1fb-0d12aac703ac.roa
File:                     3d794377-a5a2-32e1-b1fb-0d12aac703ac.roa (raw, json)
Hash identifier:          EAQLVTvfDFUJ1fc6lkt4bVER+GiyJKsWts4Ex8F1kVk=
Subject key identifier:   6C:FF:8E:12:5B:B5:5B:8D:BC:F5:22:84:C6:B3:60:99:4D:FD:F5:3E
Certificate issuer:       /CN=17c62883-899d-4b86-8800-e9715d10a482
Certificate serial:       010D0C9F43285849EA851D1B473F8FF9980AD380
Authority key identifier: DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3d794377-a5a2-32e1-b1fb-0d12aac703ac.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     31874
IP address blocks:        199.175.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:1d:1b:47:3f:8f:f9:98:0a:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17c62883-899d-4b86-8800-e9715d10a482
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=717d05f8-1e98-4b3f-93b7-141e3a4fbaed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1b:f6:4e:81:b8:6b:bf:83:86:f2:5d:1e:df:
                    1e:3e:0b:29:35:eb:48:b5:d6:f5:11:92:21:7a:49:
                    3a:a7:23:d2:f6:26:cd:b8:7a:c2:b2:29:d6:b9:2e:
                    0c:f2:73:e9:11:e0:62:02:91:a4:88:67:cd:c7:2c:
                    cd:09:b9:df:07:59:d0:3c:57:03:21:60:b8:60:50:
                    cf:fa:ef:e8:b3:21:eb:93:86:01:fb:93:08:f1:2a:
                    9c:95:b5:5d:4a:95:7e:89:5a:32:af:ee:78:00:7b:
                    fc:45:a5:75:b7:c0:a0:1d:49:5c:f0:14:34:00:5a:
                    32:98:e1:de:52:15:63:c4:64:17:b9:fc:79:02:82:
                    bb:fa:a9:fb:ab:0e:37:8e:86:0b:48:3e:83:4e:53:
                    cc:52:b1:8c:5c:dd:6a:6d:9c:f2:34:30:85:78:04:
                    c0:ec:ee:0c:bc:8b:04:17:99:69:ad:1c:c2:ba:a9:
                    e1:5a:11:40:bb:68:e8:0e:b3:5f:2c:15:a1:15:8e:
                    14:8f:b4:cc:77:11:29:fc:56:ab:0b:9e:07:28:e8:
                    f4:d1:40:74:13:18:90:aa:00:fa:68:98:4d:aa:c3:
                    21:41:57:cc:ed:e8:37:63:87:65:a4:e0:08:cc:d7:
                    47:8d:e0:30:ab:5e:26:b8:ec:1c:01:34:7f:36:40:
                    41:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FF:8E:12:5B:B5:5B:8D:BC:F5:22:84:C6:B3:60:99:4D:FD:F5:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3d794377-a5a2-32e1-b1fb-0d12aac703ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl

            X509v3 Authority Key Identifier:
                keyid:DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:61:66:4e:97:4d:bf:ef:0d:78:bb:e2:c7:84:ff:f5:89:6f:
         87:6c:87:f7:51:04:bc:fa:81:93:b2:fc:3a:2c:5c:bd:33:be:
         bf:eb:12:9d:59:e4:ae:77:02:50:c9:21:92:b8:d8:92:62:15:
         2f:bf:a1:a6:90:e4:48:68:fe:42:51:08:f9:d2:11:86:7d:49:
         86:89:52:83:68:f8:a9:2f:bf:34:a2:3d:a9:27:23:15:c1:a8:
         6c:98:ed:b7:25:ad:b5:07:e6:16:44:be:39:c4:4a:af:60:07:
         3c:03:dd:e5:d6:c7:58:c8:0c:09:94:aa:13:64:f2:91:84:fe:
         63:f7:1d:10:78:17:a0:5e:f8:76:c3:8f:22:27:14:7d:99:c6:
         1a:86:bb:9f:4e:d2:8a:4b:6e:dc:2e:44:59:06:a9:cf:84:93:
         ce:ee:2f:5b:95:f2:bc:4e:db:d7:03:33:d6:97:15:a3:be:4c:
         cb:ef:ec:a0:76:f4:63:74:ec:e4:ef:38:b8:25:59:eb:31:b6:
         c7:3b:d1:f8:92:ee:e5:76:30:79:22:8e:75:af:f5:19:76:66:
         9b:87:54:7e:93:28:e4:21:45:b7:7e:ec:7f:1e:ad:e3:86:da:
         09:89:70:7d:13:0a:a9:5c:27:7a:bb:36:08:1c:65:d8:83:3e:
         b2:8d:72:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:02 2025 by rpki-client