Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/26a63c31-2b9b-36a3-82cf-760f36ca89a4.roa
File:                     26a63c31-2b9b-36a3-82cf-760f36ca89a4.roa (raw, json)
Hash identifier:          YNPozapcf62dl5BoPtGnZCg+7nkwVHoUZuL+xyXerQ4=
Subject key identifier:   54:D5:4F:D0:C1:E7:A8:6B:AF:53:CC:04:6C:26:3E:58:6F:72:68:D7
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F4328584A682609E8D80D7E2272E7BD54
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/26a63c31-2b9b-36a3-82cf-760f36ca89a4.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     396971
IP address blocks:        173.242.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:09:e8:d8:0d:7e:22:72:e7:bd:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=d8148613-c0be-4216-97b4-ec566a3a0c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:73:14:9c:50:b4:20:08:9f:af:9a:f2:17:7b:
                    7f:c5:50:79:47:77:fe:2f:7b:1f:a3:32:83:c9:a5:
                    97:d1:99:df:c9:1f:5f:33:b6:1a:2c:2d:e5:30:cd:
                    83:e7:f3:01:a5:1a:62:20:f5:61:fe:e4:a3:d6:72:
                    46:e2:23:23:ad:38:fe:79:79:c6:1c:b5:1f:09:ab:
                    a0:0e:14:03:fc:ea:b2:59:46:1d:d9:bc:72:c4:83:
                    d9:c0:7f:3c:55:cb:09:69:ba:31:76:5c:e8:db:3d:
                    92:32:10:29:b7:e0:18:8c:71:d4:8c:0b:3f:58:14:
                    57:d9:0f:d5:c5:83:83:c0:c4:c7:60:77:05:7c:98:
                    84:3a:ed:60:7c:e8:1a:8c:76:ca:15:4d:07:ec:08:
                    85:b2:7c:15:9e:e5:b9:89:ca:8c:a1:58:a2:10:02:
                    d7:49:fb:81:e6:a2:24:1d:8b:8a:57:a3:f1:bc:f7:
                    33:ca:a8:01:43:0d:1c:66:54:17:cc:2c:3d:ca:af:
                    95:c0:e5:34:2f:92:76:ce:eb:9d:9c:da:5b:33:06:
                    b8:b9:02:5d:2f:04:38:0b:a5:c2:96:81:11:fc:13:
                    0c:0e:d5:95:46:99:6f:4c:c8:d0:2a:33:6b:c2:59:
                    a5:36:16:cf:2a:6e:32:f7:98:dc:0f:5e:00:7d:2a:
                    b3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D5:4F:D0:C1:E7:A8:6B:AF:53:CC:04:6C:26:3E:58:6F:72:68:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/26a63c31-2b9b-36a3-82cf-760f36ca89a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:1d:38:a7:b4:5c:66:f9:b0:3a:16:7d:30:48:e1:27:19:db:
         63:4b:0e:63:4d:aa:2f:98:ad:67:be:30:88:22:ff:62:f7:65:
         68:1a:bd:84:d7:23:c9:a5:33:4c:9a:2b:71:5c:c9:b1:07:fb:
         bc:77:3b:d6:42:3b:2d:76:a2:07:7f:2d:1c:86:c2:6f:0c:52:
         0a:2f:e8:0a:af:09:3f:b8:66:48:21:16:1b:38:42:c1:41:e6:
         de:8f:76:b2:9e:54:2b:3e:33:53:d6:f1:83:93:32:6f:5b:08:
         22:54:34:4a:fa:e5:16:3e:41:53:f9:97:54:3b:4a:1a:ef:53:
         0f:be:ea:21:15:11:63:c9:be:c8:2b:0e:26:a4:c6:3b:88:c2:
         b2:17:3c:2a:46:bd:a1:fb:74:9f:87:f9:28:fa:6d:4b:75:d6:
         dd:a5:ef:fd:77:ba:e2:55:88:df:3d:ba:ab:84:f8:e7:7f:a4:
         3e:41:b9:61:46:e0:39:ea:c4:6b:71:f2:ab:af:6b:2d:70:58:
         9e:f9:6d:af:aa:bf:92:bd:67:9d:6e:0d:05:1c:3b:00:81:06:
         96:b5:29:b9:fa:b7:af:d4:ec:59:ec:3a:d8:10:db:57:3d:0a:
         ad:72:78:42:82:03:4f:8e:e8:2d:46:12:b9:30:b9:86:71:2d:
         41:50:45:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 20:33:54 2025 by rpki-client