Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/054686b0-2bd8-3e47-9d3f-5e6b041e896c.roa
File:                     054686b0-2bd8-3e47-9d3f-5e6b041e896c.roa (raw, json)
Hash identifier:          nbQOvDow6HA0rig4tbbQN/ZWvHRUmhmkiKJzxe24WcU=
Subject key identifier:   C8:27:70:E2:7F:93:69:D2:C6:58:C9:67:14:97:3B:7A:91:52:AE:CC
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584A71EB4E65CA6D9CC0E91D5B80
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/054686b0-2bd8-3e47-9d3f-5e6b041e896c.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     19886
IP address blocks:        171.162.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:4e:65:ca:6d:9c:c0:e9:1d:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=ace20e5f-e184-4bfe-8b78-63a576e087e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:58:18:26:9d:f9:05:ae:84:f5:fa:72:58:
                    6e:fd:2a:29:94:e9:4c:6e:56:fa:82:c5:d5:9d:36:
                    0c:50:62:f4:85:15:ce:c8:6c:5e:4f:ca:2f:b6:24:
                    93:ad:a2:10:45:b6:4b:7a:45:75:cc:64:90:97:af:
                    f9:37:95:73:92:10:8e:e8:f6:76:93:24:38:f3:74:
                    63:77:9b:c0:8e:9e:7a:d8:26:a9:6a:86:2a:a3:eb:
                    ea:a7:44:a2:f1:cd:90:4a:d7:e4:0f:6b:72:3d:fa:
                    d7:ef:11:5a:2e:bd:e5:69:d2:1b:21:0d:c8:4b:8a:
                    94:d5:fe:07:e4:c7:a3:6b:cb:ba:1a:7d:81:95:f9:
                    aa:d7:e2:94:49:8e:3e:63:57:6d:fa:ee:8b:02:4e:
                    85:3b:5f:0b:fc:5d:ed:4e:fe:ae:f4:65:62:9d:60:
                    6a:0e:a1:fb:06:a7:0c:51:9c:46:ef:d9:cc:1d:a2:
                    23:a2:72:c5:4e:c7:e4:7f:16:21:88:b8:55:4c:90:
                    a0:c8:67:6a:fb:12:44:94:ce:06:6d:ad:66:29:21:
                    35:aa:65:6b:9b:39:39:a9:1e:3a:ed:a0:8e:c0:9a:
                    ce:99:a6:5c:09:68:d8:5b:e3:00:7d:61:92:cc:2d:
                    33:22:0b:ea:0e:4a:d5:e7:0b:da:43:83:64:b4:b9:
                    14:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:27:70:E2:7F:93:69:D2:C6:58:C9:67:14:97:3B:7A:91:52:AE:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/054686b0-2bd8-3e47-9d3f-5e6b041e896c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:81:50:c9:7a:95:3f:a5:cf:cf:e3:42:72:35:8c:20:56:d7:
         55:e6:ab:6a:1b:f5:5b:98:d0:88:1d:1c:72:a3:c5:e0:68:8b:
         98:56:7a:eb:b4:9d:ca:d5:8f:4b:16:48:e1:c6:d0:3e:f5:68:
         fc:d1:5e:9d:30:3a:01:7f:02:51:9a:2b:91:e9:78:1d:30:59:
         01:ad:69:ff:21:b0:57:05:23:11:a0:b0:49:b6:d7:e5:28:b7:
         62:5e:1b:f4:74:1e:c8:1d:5b:f4:81:c9:8c:6f:55:4b:93:ae:
         2c:c5:59:ec:7e:b7:1a:f4:6e:c3:72:77:8f:e8:b6:93:2a:b2:
         b6:bf:b5:b6:b8:23:1f:51:78:91:32:66:9c:04:d1:92:d8:31:
         c1:f6:cc:25:d3:55:c8:eb:1b:22:20:77:c8:ef:9d:bd:12:1d:
         42:4e:3a:54:e5:24:a4:65:32:51:95:a6:3a:90:e1:20:09:19:
         de:5a:c8:1f:03:b0:56:8a:7a:69:67:33:4a:9e:e1:96:2a:79:
         c7:58:1c:09:6a:09:3b:ea:5c:02:54:75:89:44:40:a2:d2:bd:
         3f:db:9d:7d:b8:fc:b1:50:80:c3:0a:e8:9e:05:92:08:f9:06:
         e2:0a:06:3b:dc:02:5c:f8:d4:40:d4:bd:87:9e:1c:02:d1:a1:
         87:c4:5d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:14:09 2025 by rpki-client