Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa
File:                     224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa (raw, json)
Hash identifier:          9u6SyD8TYm4rimPYTTKwoacICUjeMJc7lLltLsJa9LI=
Subject key identifier:   6F:EB:AA:3A:30:0B:DA:6F:60:7A:AF:48:C1:17:00:50:8E:0F:7A:06
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285849D85FA93D3FD9373962A90A00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     212238
IP address blocks:        172.94.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a9:3d:3f:d9:37:39:62:a9:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=ae832e74-ff02-438f-8620-c940ce14721e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:28:0a:da:d9:aa:ef:ca:08:f4:ff:7d:66:
                    aa:22:95:26:c0:9f:32:51:5d:6e:b6:1f:13:19:1e:
                    c1:7b:93:d0:91:78:b3:0e:a7:78:31:13:76:12:ca:
                    8d:98:5a:dc:2a:f4:0e:b5:e0:cd:3a:9c:c9:90:98:
                    5c:52:f7:d3:0c:39:d0:d0:c2:43:e2:47:53:67:e7:
                    31:c6:f5:a6:45:42:3a:35:33:3f:8f:1c:d6:ce:f3:
                    bf:0e:5d:e5:f9:da:3c:05:5e:3b:6f:e5:e4:81:5a:
                    55:0a:15:42:93:84:10:4d:81:6a:3f:c6:a5:b9:4f:
                    45:24:9b:a5:2f:17:02:20:89:e7:65:9c:77:2c:d3:
                    fe:e7:70:31:cb:79:ee:8c:e5:f4:a4:5f:90:a4:f2:
                    90:91:f9:e3:82:b2:80:53:7c:7b:8f:f9:f5:a3:c2:
                    ca:2b:5d:8a:01:f2:64:cb:e0:ae:80:49:6f:c4:9e:
                    96:a6:52:64:f7:12:0c:5b:76:ce:85:58:88:85:ba:
                    70:11:d3:a8:b9:9a:6c:05:17:4e:59:a3:01:e3:4a:
                    2e:9f:31:3d:5e:7f:6e:55:d3:55:91:b9:b8:2c:5d:
                    cc:8a:82:8d:2c:75:e6:3a:f5:fa:ca:e8:8f:a5:ee:
                    52:cc:7c:69:33:85:27:d9:9b:78:a4:c3:0d:6f:e5:
                    bb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EB:AA:3A:30:0B:DA:6F:60:7A:AF:48:C1:17:00:50:8E:0F:7A:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3f:4b:de:6b:1c:19:52:78:1a:41:27:d8:07:b5:0b:53:81:
         bf:a3:b2:da:b2:f1:ba:f6:e7:2a:91:d9:6d:7b:2c:ef:7b:b4:
         0a:ee:e3:5e:1a:33:af:20:f4:01:41:29:02:00:c9:65:95:7e:
         a4:1c:f6:8b:ad:cb:fc:5d:c8:ad:3a:59:62:39:be:02:bc:a8:
         6a:ed:40:cb:00:8e:7d:12:c0:ff:19:47:24:6c:e6:f4:67:92:
         8f:e7:cd:eb:af:cd:1a:80:5a:88:f5:e0:4a:39:e8:4b:2e:ba:
         be:6a:c5:95:ce:18:c6:29:b3:8c:10:28:fe:c8:43:07:0a:b7:
         89:a6:14:84:b5:e7:f4:37:20:60:04:c5:e9:9d:8f:dc:f0:a1:
         f9:0c:c2:e0:2a:b0:59:72:6d:e4:10:9c:3c:33:20:80:ba:20:
         01:b7:70:f5:dd:fe:83:ec:30:d2:ee:59:f1:ab:63:37:4b:6a:
         e4:5f:92:af:d9:77:ec:35:1b:82:01:03:46:a1:60:3a:46:a2:
         ba:91:0c:de:4c:aa:e2:09:61:28:49:88:97:2f:ed:b4:34:30:
         f7:5f:a0:59:31:70:aa:2f:4d:37:0e:8a:80:4d:c5:86:56:1f:
         53:1e:a3:8f:6d:ed:5e:5c:ff:bf:9c:e5:2e:2c:25:02:17:43:
         23:73:14:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:49:30 2025 by rpki-client