Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7fa8f0f0-39e3-36fe-a1f7-ee0bf71e9e28.roa
File:                     7fa8f0f0-39e3-36fe-a1f7-ee0bf71e9e28.roa (raw, json)
Hash identifier:          hxiYkLm3lhSyxj+yzMHOzYz2Ssxrk+1i69Qqp99xvTw=
Subject key identifier:   52:A0:2A:00:0B:89:B0:80:34:7E:E3:59:60:34:F0:BD:EB:44:13:02
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFD9C15BB26A0D111A9B40
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7fa8f0f0-39e3-36fe-a1f7-ee0bf71e9e28.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        71.19.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d9:c1:5b:b2:6a:0d:11:1a:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=a04f2bbc-0a55-4ac6-98e7-5911045d21eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:42:97:b5:c5:a4:7b:40:c7:65:5d:da:d3:8b:
                    c6:17:e9:15:c1:54:33:6c:63:66:22:9b:a6:50:26:
                    0c:18:4c:d0:8c:aa:fb:2b:39:64:14:43:f4:4e:29:
                    13:f0:8d:18:5d:40:d9:f3:92:e5:ac:0b:6a:dd:e9:
                    6d:20:7f:c4:87:74:cb:71:58:02:3d:ec:8c:ae:da:
                    9a:b5:c0:47:dd:bc:e7:74:1f:a1:d2:e6:cc:64:9a:
                    95:1e:74:b8:14:6d:f6:63:1c:30:39:ac:c3:2c:58:
                    09:d2:67:f2:2d:92:4d:40:d0:04:88:3d:52:e9:13:
                    81:8d:84:18:4a:2b:6a:8d:07:0d:dd:5e:45:ac:1d:
                    02:dd:9b:55:22:78:fd:f2:77:e4:82:f3:3a:41:a6:
                    9f:f1:a3:76:06:93:c3:e3:8a:5a:bf:e8:76:e4:d8:
                    39:a6:64:3b:2f:6d:ef:55:33:bc:69:79:c0:94:07:
                    aa:94:05:24:e0:f1:50:7a:21:10:84:c5:46:bc:ad:
                    b2:ff:6c:e0:76:e7:c3:68:f4:a0:fe:04:72:6e:55:
                    56:0c:9f:6e:aa:62:a8:04:a8:6f:eb:e6:d0:37:98:
                    2d:cc:a9:53:1d:c3:e2:63:b2:bb:82:8e:8b:6d:d3:
                    70:03:30:a5:5d:df:36:5e:69:1b:27:cd:c5:76:8a:
                    93:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A0:2A:00:0B:89:B0:80:34:7E:E3:59:60:34:F0:BD:EB:44:13:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7fa8f0f0-39e3-36fe-a1f7-ee0bf71e9e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.19.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:7b:c2:f7:fc:af:31:23:64:ce:88:a3:64:4e:e4:c8:ff:fd:
         ab:8e:df:73:c5:06:5d:cf:1c:99:3d:4b:af:9c:b8:2c:e0:66:
         bf:82:ee:9c:81:dd:2a:43:8b:a5:95:35:9e:8f:e7:fc:da:52:
         5b:fb:2e:08:ae:21:11:6e:fc:d4:14:17:d3:2d:ca:85:b4:f4:
         59:5e:f1:3e:0c:40:7d:cf:af:6b:fc:8d:f1:58:aa:39:fa:3f:
         74:b9:92:2b:3b:49:a4:ac:1a:2d:cb:cb:b8:ab:60:12:63:4b:
         9b:f4:f7:ea:80:c7:2f:28:c3:d3:cd:48:4b:71:2a:26:e4:02:
         5c:f1:f9:a1:73:26:23:13:7a:17:53:ef:a4:52:df:c9:7d:d4:
         6d:3e:f1:fb:fb:a1:64:ea:f3:9b:08:10:71:a9:68:92:fa:29:
         8e:a6:69:99:ee:71:2c:4c:1d:47:a7:8d:ae:7d:77:7b:66:0a:
         97:94:3b:5f:fc:9c:79:7c:6d:d5:c6:ba:c4:d2:7b:d8:5a:4b:
         33:18:d9:03:02:cd:80:d1:02:a5:40:e7:52:3b:3a:a6:55:27:
         a3:43:b1:2d:1b:6c:94:8e:f0:b3:55:44:e9:c6:9e:97:24:84:
         70:b2:2b:89:3a:88:68:e2:56:48:06:45:5e:6a:45:94:7c:d5:
         39:b1:79:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:11:59 2025 by rpki-client