Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4776008b-22e2-3978-ab1c-e936740befcc.roa
File:                     4776008b-22e2-3978-ab1c-e936740befcc.roa (raw, json)
Hash identifier:          h0naUuVORoeZyZK7m65iTI/eXOXgCEvuECYmRia8+5Q=
Subject key identifier:   D7:D4:F1:23:13:E5:E9:94:B1:B7:7A:64:76:99:C3:C6:3B:35:71:53
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A1B6009E35EBA5DF6EFFA6F00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4776008b-22e2-3978-ab1c-e936740befcc.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     212238
IP address blocks:        172.94.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:09:e3:5e:ba:5d:f6:ef:fa:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=557aa485-1fc6-4467-b043-ec911dfc1922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:df:c0:cf:9f:dd:eb:e2:07:65:a9:bb:1e:
                    48:eb:11:01:f8:a2:b7:45:7c:04:ad:95:84:09:ba:
                    eb:3c:e0:b6:00:a0:35:b3:e3:12:c8:c0:09:28:cd:
                    1c:1b:2e:38:9b:bf:05:72:42:72:7f:ce:bf:54:b5:
                    8f:aa:22:da:d3:db:60:8d:b5:bd:20:1d:1d:46:e3:
                    1c:11:66:1b:7b:dd:66:ea:0a:e4:46:32:03:ea:1a:
                    36:73:98:e8:88:3d:70:8a:0c:bc:50:2f:46:da:67:
                    eb:57:ba:17:b1:e5:6b:13:ab:d5:8a:38:e2:67:5e:
                    9a:fe:aa:38:94:75:1d:80:ef:16:26:0d:7c:77:03:
                    63:ee:62:99:29:87:2d:d1:4b:ea:1f:fe:95:0e:35:
                    72:6b:8b:2b:6a:ac:1d:8b:ea:2b:8f:8e:39:cb:a5:
                    e8:5c:3b:b5:9d:70:ad:50:16:62:92:43:16:35:44:
                    63:ba:a6:e4:eb:bc:5f:92:d8:5d:a2:a6:94:d1:dc:
                    c1:dc:5a:ce:2c:b7:45:7d:79:5f:a5:6d:89:1d:19:
                    fa:f8:c5:76:75:f4:dc:75:1b:68:33:be:75:bc:73:
                    b0:33:f1:3b:73:d1:0f:ef:99:62:5d:85:3f:36:4f:
                    b4:a0:b3:34:ac:99:87:a1:4b:4b:4d:c8:90:83:5f:
                    4f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D4:F1:23:13:E5:E9:94:B1:B7:7A:64:76:99:C3:C6:3B:35:71:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4776008b-22e2-3978-ab1c-e936740befcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:2d:bf:c4:dc:5c:80:94:e6:4a:7b:29:fa:0c:b8:9c:e5:26:
         07:48:84:59:63:4d:e7:ad:36:00:d3:1a:f2:a0:db:bc:e5:b3:
         0e:a6:14:c2:a0:7c:9d:2c:fb:d4:81:a8:c5:e5:78:a4:1d:d0:
         35:78:04:94:65:5a:ec:22:87:8b:bf:15:c9:16:f7:c5:39:ea:
         69:2a:eb:e4:09:b8:70:40:f8:ce:c8:45:32:28:cf:53:d0:78:
         92:28:19:d4:2d:c3:df:4d:b7:34:12:a2:24:36:57:a8:87:e5:
         d4:a4:73:43:f4:20:f2:ec:41:dc:1c:c4:35:4b:3e:28:06:f8:
         6d:9f:90:4a:97:94:0d:1d:64:d5:04:64:77:34:e7:0c:6e:f0:
         e6:00:28:93:9e:3a:fc:62:f2:98:19:f6:7f:e0:4e:1b:df:f5:
         c7:09:d5:66:f0:ee:ba:10:6d:c1:01:6a:4f:c0:7d:84:37:ef:
         45:19:cd:20:80:b7:c9:ef:33:5e:9d:e1:87:7c:d5:a2:ee:7f:
         73:9b:85:d2:e3:84:c4:cb:8a:6a:f3:12:91:d6:b3:d1:63:9b:
         f9:44:de:7c:7c:d0:00:09:8d:d3:f9:f5:f1:65:1f:16:7f:bb:
         05:db:8f:fa:6f:ce:f9:6e:9f:cd:e1:6e:d0:f6:d0:d1:f4:fc:
         8a:ef:4d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:40:56 2025 by rpki-client