Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0aa9be59-93ef-3255-90a7-f3ffff264f51.roa
File:                     0aa9be59-93ef-3255-90a7-f3ffff264f51.roa (raw, json)
Hash identifier:          PhgHC96QKaAr+P3wPxnjUdSzhykAiKL+gXlRyocKlUs=
Subject key identifier:   B9:6F:E5:0A:D2:A4:EB:1D:0B:3F:B0:8F:C0:85:FE:79:D2:A7:DB:58
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584A71EB532DDE950A280886AC00
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0aa9be59-93ef-3255-90a7-f3ffff264f51.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     19886
IP address blocks:        171.162.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:53:2d:de:95:0a:28:08:86:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=904c3639-77fa-4791-98b0-45185e610be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:80:20:fa:00:cf:66:94:99:bb:b4:13:1e:
                    67:89:69:77:8a:86:6c:58:f0:48:d1:2d:0c:51:5d:
                    87:90:5a:7f:55:16:26:1f:e3:3c:fc:74:30:10:40:
                    b2:0a:a9:4f:f3:65:57:fc:82:c1:81:d5:1c:e4:d8:
                    6a:05:48:21:5d:22:a0:14:cb:6e:b8:7e:6f:1a:5e:
                    9f:db:2b:a5:ff:da:d9:b3:5c:5b:6e:92:ba:ac:0a:
                    08:fb:30:93:8a:58:27:3c:6e:6c:87:97:8b:76:1a:
                    6c:5c:e6:3d:7d:bd:a4:f0:d8:02:d2:2c:e7:a1:d8:
                    c4:b3:3a:63:2b:d1:0c:85:fc:3c:74:cc:95:f2:ba:
                    18:49:37:e1:9e:8f:e3:2f:05:5a:92:a1:3c:42:8a:
                    c1:1c:9d:ce:5c:f1:1a:d7:de:48:a1:8b:61:dd:b5:
                    92:06:9d:25:93:89:a4:4a:7b:88:da:c5:66:83:83:
                    5c:79:33:ea:f0:12:7f:a2:0a:b9:8a:76:33:de:87:
                    ac:56:82:96:89:fb:a6:9e:5c:73:ca:4c:4d:b6:ea:
                    d0:09:50:94:02:61:1c:a0:7b:e6:9d:56:e3:8e:6a:
                    26:db:ea:ea:94:7b:bb:22:cf:01:1c:90:e4:83:7b:
                    1f:13:9a:50:24:4f:51:90:0d:7e:ca:33:00:92:73:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6F:E5:0A:D2:A4:EB:1D:0B:3F:B0:8F:C0:85:FE:79:D2:A7:DB:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0aa9be59-93ef-3255-90a7-f3ffff264f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d8:9d:8d:70:8a:97:10:89:66:51:c0:98:af:ee:c4:b9:b0:
         aa:cf:b2:64:23:6f:49:bd:51:53:7e:a5:ef:00:10:7b:bd:4f:
         b8:9c:a0:d1:ed:14:48:fd:ac:e0:11:8b:58:0c:d1:6b:e4:d1:
         63:09:78:d1:0e:04:52:87:76:d6:12:d8:db:45:d1:be:30:39:
         4a:d8:7a:1d:01:6d:20:4f:10:3b:ac:cd:d9:d7:7e:08:1c:4d:
         49:ab:7d:ac:1e:55:1a:1d:8f:77:d9:ad:8d:dd:95:96:8b:b0:
         93:78:c4:50:03:85:ef:9d:09:34:f5:dc:39:be:dd:59:0d:2b:
         1a:21:1f:19:c7:09:43:3c:5c:8d:0c:73:15:c7:6e:59:9b:82:
         fc:42:e3:a5:45:e9:2c:b4:7e:7b:23:68:2a:a4:e7:04:7a:9b:
         c6:a7:78:40:65:69:50:89:0c:6e:fd:ab:0e:d0:1e:07:05:41:
         1e:2d:10:eb:2f:55:1f:d4:fc:fa:0e:13:96:94:ca:41:13:27:
         9b:c1:e7:81:76:ea:74:a9:0a:fe:c6:4f:4d:42:4d:02:0c:dc:
         b4:c2:46:48:5c:5d:96:8e:b4:59:18:16:ed:f4:f9:63:7b:24:
         67:b9:30:2d:91:fa:a8:f9:76:6f:22:c3:fc:74:67:3a:63:b5:
         50:28:eb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:31:23 2025 by rpki-client