Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/4655d1f6-616f-30ce-b1ec-e197123f82ec.roa
File:                     4655d1f6-616f-30ce-b1ec-e197123f82ec.roa (raw, json)
Hash identifier:          sGvCOrGN69eK+iIlxZfAoRyBFsok8b0PjyXEJLfFlMw=
Subject key identifier:   2F:C2:0E:E9:99:FB:F5:12:51:80:E3:44:0F:17:B2:EF:74:12:C9:02
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584A050A7ACDA1168272F9EC6000
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/4655d1f6-616f-30ce-b1ec-e197123f82ec.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     7385
IP address blocks:        172.110.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:7a:cd:a1:16:82:72:f9:ec:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=a9428616-faeb-4ad8-a24a-71d6b42dc76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:5d:8d:9e:f2:78:d3:c3:c5:0e:54:8d:88:
                    78:e5:d0:9a:ab:73:9e:16:74:b0:7a:50:fc:3a:c9:
                    0b:9f:d0:51:68:44:26:d4:fe:1f:79:a1:09:a6:fb:
                    a3:a0:30:04:cb:67:92:ef:71:63:42:20:ca:2a:51:
                    0e:1b:19:57:da:33:b5:30:1a:10:04:7d:01:6d:04:
                    24:fa:c1:c6:1b:df:2b:10:2a:8a:9f:33:34:60:18:
                    50:35:df:61:45:5d:42:45:59:94:e2:5e:2d:46:fd:
                    6f:63:4c:bd:08:47:bf:ac:22:b0:07:5b:0c:a0:2a:
                    93:7b:ce:fd:5f:30:68:92:89:c3:ff:1a:07:7b:b1:
                    2f:8e:08:7d:e5:d2:b8:6e:54:30:ce:e2:90:41:04:
                    e4:c4:dd:69:20:22:f3:56:24:80:eb:8e:2e:4d:0a:
                    bd:f5:70:d9:a5:ae:7d:47:08:48:b6:f9:85:e7:16:
                    4d:50:79:13:97:a9:27:73:36:09:69:29:63:d1:2c:
                    e2:47:f0:a1:f4:59:cc:ee:35:b7:fb:d5:e9:58:a7:
                    86:2d:39:59:03:f1:71:a3:d9:d3:a7:13:28:fa:46:
                    fb:6c:7b:62:99:f8:a9:72:19:12:fb:33:5e:c9:5f:
                    46:2d:67:18:f2:16:f7:22:d4:74:89:88:f1:66:a2:
                    5a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C2:0E:E9:99:FB:F5:12:51:80:E3:44:0F:17:B2:EF:74:12:C9:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/4655d1f6-616f-30ce-b1ec-e197123f82ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c0:a0:25:84:96:e5:b6:81:8f:51:c1:15:6a:44:ff:9d:6c:
         8a:a1:97:ca:2c:fb:87:96:18:e2:bb:ff:a7:22:48:83:88:b4:
         fb:1d:24:90:51:b1:f9:15:64:10:af:64:5e:46:5e:57:ee:7f:
         44:65:38:15:22:d6:84:25:dd:0b:b1:e1:4d:a6:48:b0:a9:c1:
         1a:fa:2d:70:7a:09:18:6f:77:a7:cf:9d:f5:43:73:f6:e9:25:
         df:b6:82:ab:06:4d:bc:0c:a4:dd:70:1c:f5:32:6a:27:ac:13:
         78:51:da:51:27:5b:9d:ef:e0:11:ef:5e:74:cd:5d:c8:fd:01:
         3c:64:31:b0:aa:32:08:eb:3c:33:d8:27:5a:e6:7f:f5:33:a1:
         c3:7e:0f:e2:61:fe:d9:d3:dc:82:4c:b0:f9:27:0d:1b:4c:95:
         8d:f5:79:02:21:8f:5f:12:c6:3e:eb:0c:30:b2:f9:fa:da:e6:
         42:d1:1f:33:c1:d9:37:b7:81:d0:ac:94:84:3b:e8:14:3c:fb:
         d2:96:e3:c7:1b:45:11:2f:19:4d:28:92:84:52:42:0e:27:2c:
         46:c2:59:a4:39:85:ee:26:df:09:e5:7a:7f:80:1d:b7:de:6e:
         d2:26:58:a0:7d:3d:a6:12:71:cc:67:c6:5e:00:6f:d4:af:78:
         09:c3:06:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:03:52 2025 by rpki-client