Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/ea7b7063-4ad5-39aa-843d-fbef4c39ccec.roa
File:                     ea7b7063-4ad5-39aa-843d-fbef4c39ccec.roa (raw, json)
Hash identifier:          f69lNSgtizGX9V4n4ZNTdx+hjhzjepTZr88DWDE66EE=
Subject key identifier:   24:B4:2E:8F:E4:12:F9:27:95:D3:4B:2B:E1:A5:46:FB:BF:2D:5C:01
Certificate issuer:       /CN=700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a
Certificate serial:       010D0C9F43285849EA851CF9166969100BBBDCB1
Authority key identifier: B1:50:98:51:7F:5C:92:2A:E9:5E:CC:4C:9B:E4:A7:4C:59:A9:AC:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/ea7b7063-4ad5-39aa-843d-fbef4c39ccec.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     399361
IP address blocks:        142.79.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:1c:f9:16:69:69:10:0b:bb:dc:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=bd35caf5-efba-4c0e-bad6-b0dd9fb86ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:60:c4:bf:b6:c0:c3:d1:55:3b:7b:53:40:
                    67:80:ed:e9:3f:b0:84:62:ae:1c:6a:35:4c:27:3a:
                    91:56:30:28:47:33:c3:56:f0:c0:6f:8b:14:30:b7:
                    9a:b6:2a:48:fd:8f:13:53:63:9d:ac:49:01:0f:11:
                    9e:1c:39:97:5c:31:a2:eb:94:1c:b7:47:1c:d6:5e:
                    04:36:d7:e5:2a:7d:db:79:52:70:fd:cf:d6:e7:fc:
                    b0:69:d7:db:67:28:45:53:92:89:82:59:6c:20:8e:
                    d8:9f:2e:9f:ac:74:ca:e6:dc:7e:d4:12:a5:a3:07:
                    fc:2a:01:1c:82:04:69:68:af:41:40:d3:b0:8e:3f:
                    ed:67:53:1d:38:93:f8:c7:5c:46:5c:37:14:20:fc:
                    80:e8:7f:d3:1e:a3:98:11:a1:19:5f:0c:d2:06:ae:
                    6c:dd:6d:6b:8f:5a:fd:66:9d:18:22:1b:c9:1a:e7:
                    1d:1b:f3:f3:36:7e:c4:ad:dd:88:6f:0c:b1:87:1f:
                    d6:35:e9:ac:05:60:cc:01:ff:e2:3c:4b:9d:97:1c:
                    7d:ea:38:94:be:52:67:e9:cf:33:80:e4:8e:7a:a8:
                    17:42:5c:72:14:0b:a8:92:85:46:68:36:98:10:8a:
                    a4:53:1b:49:4b:21:80:29:65:ee:76:49:22:7a:bc:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B4:2E:8F:E4:12:F9:27:95:D3:4B:2B:E1:A5:46:FB:BF:2D:5C:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/ea7b7063-4ad5-39aa-843d-fbef4c39ccec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.crl

            X509v3 Authority Key Identifier:
                keyid:B1:50:98:51:7F:5C:92:2A:E9:5E:CC:4C:9B:E4:A7:4C:59:A9:AC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:89:41:2e:d3:98:ec:cc:82:1d:a3:39:7a:90:c7:0f:2a:d9:
         02:33:a0:47:ac:a6:30:5a:48:64:9b:cc:6f:b1:6f:1f:05:d6:
         c1:f6:a0:84:40:44:45:61:4d:29:ec:29:bf:48:07:45:ea:d3:
         6b:8a:fb:4d:16:97:59:a5:5c:d6:ad:79:fa:d6:e6:2a:2c:ad:
         f4:cb:1d:12:8f:64:b6:28:81:ff:92:6c:49:e6:44:34:77:d8:
         18:cc:d1:f1:60:c1:c0:7e:51:95:98:74:4f:7f:eb:33:f8:c4:
         b1:84:ca:3b:f2:af:bc:a0:fe:d2:8d:ce:34:63:06:23:eb:dd:
         f7:c1:b6:1e:67:14:76:2d:30:5c:f4:0b:b5:50:59:ea:df:72:
         7e:37:ae:86:08:be:f3:fc:3e:ac:b8:36:73:63:38:67:d6:fc:
         33:bc:34:ea:b2:b7:56:ec:89:94:5b:2d:4d:d6:92:b2:ec:ef:
         9f:11:88:8b:66:17:14:c0:58:90:56:a6:31:44:d5:3c:20:32:
         25:62:65:ab:91:3c:37:58:de:f0:0f:c3:7b:12:a2:8c:4d:ef:
         3e:1a:5c:52:53:25:b1:1c:b1:2a:a3:41:62:83:ef:10:1c:34:
         d4:a6:5a:69:35:e4:8e:8f:ab:6a:a3:a1:b6:cf:be:4f:ef:19:
         2c:ea:7a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 22:17:28 2025 by rpki-client