Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bdd19b5f-cf1a-3d6a-836d-1e6b0f73fca4.roa
File:                     bdd19b5f-cf1a-3d6a-836d-1e6b0f73fca4.roa (raw, json)
Hash identifier:          3QBomO7OjQzytG2awAEQ45Hf+PFBIOqfUk/1WC538P4=
Subject key identifier:   E6:57:8C:46:2A:92:55:0B:3E:50:47:91:32:EF:1C:AE:6F:3F:49:29
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584A71EB536DCE00098CF8ED3940
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bdd19b5f-cf1a-3d6a-836d-1e6b0f73fca4.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     19886
IP address blocks:        171.162.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:53:6d:ce:00:09:8c:f8:ed:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=2259abe4-b25f-4d94-a878-cbbcef6c29d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:dd:e9:83:e7:df:a6:81:75:f7:f0:72:ca:bb:
                    fa:d3:2e:c0:e9:d4:45:11:8a:3b:35:92:f9:2c:a0:
                    a3:67:44:8d:b2:06:74:ee:f5:a6:86:c6:df:c6:38:
                    61:94:67:dd:96:99:6a:e4:2d:7c:fd:59:1d:a9:d6:
                    d5:53:c7:f6:ff:3a:a6:ad:88:91:5c:e9:5c:04:f6:
                    c1:4f:19:b7:8c:fe:85:8f:59:16:0b:4e:66:b2:70:
                    7f:d2:73:05:50:18:8c:2a:f6:d7:f3:8a:48:6f:a8:
                    c6:4c:45:7d:d7:a0:a8:43:df:bc:ac:ef:3d:62:d8:
                    7a:75:65:88:04:dd:3a:22:a1:1d:3f:84:67:4d:8d:
                    22:bc:23:b4:44:1e:c5:27:a4:df:b5:d7:3c:6d:af:
                    be:cc:a5:7a:26:dd:8c:dd:29:60:0c:4e:16:91:8d:
                    dc:86:2d:66:f3:3c:80:cb:1e:e4:59:c8:42:6a:92:
                    98:39:50:65:57:1d:9e:e6:2b:fb:4b:22:5c:66:d0:
                    5a:cc:ad:58:ed:f1:4f:52:c0:75:22:cf:21:8e:21:
                    26:c5:97:8e:d6:c1:af:ee:ce:b1:d9:47:14:96:ff:
                    56:7d:b7:f6:a1:6b:15:37:48:53:0d:91:6f:38:d9:
                    7a:45:36:e0:29:81:ff:bc:1a:d6:d1:78:1f:ad:a0:
                    f1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:57:8C:46:2A:92:55:0B:3E:50:47:91:32:EF:1C:AE:6F:3F:49:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bdd19b5f-cf1a-3d6a-836d-1e6b0f73fca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:6a:8d:66:cc:40:b2:b9:0b:2a:eb:79:35:3b:7b:01:5b:a7:
         34:cd:0f:e6:87:74:11:54:c8:74:d9:b6:84:0e:74:dd:20:ff:
         c5:fe:fe:40:a6:a9:81:e2:e6:43:b9:cd:54:e0:7f:3f:65:8b:
         66:8a:d7:e6:91:b0:0d:53:17:7d:58:d6:2c:45:c8:95:90:c9:
         66:32:a5:e5:34:77:e5:b2:9f:4c:c5:86:da:bf:a5:f1:68:51:
         c2:2d:31:4e:14:e3:b2:bb:ab:a6:cd:aa:d7:fa:83:5f:c6:fd:
         b9:42:68:a8:a1:31:e0:09:3e:5b:a2:fc:83:68:92:7c:b5:b8:
         ee:2b:68:2a:5e:fc:03:64:eb:7c:71:3e:e2:ac:4c:47:4a:42:
         f4:5d:b4:2d:77:90:e0:06:fd:90:bd:76:ce:78:73:96:0d:7b:
         e9:3b:6c:b5:25:e7:4a:d5:00:2f:5d:27:c5:43:d6:13:f6:48:
         ad:0b:c0:63:1d:f6:45:36:38:93:b8:15:60:c7:b4:f0:33:7a:
         ba:5a:46:3f:51:c2:29:96:99:88:a9:14:ec:33:a8:44:c6:c3:
         ad:43:6f:81:de:08:79:14:10:97:3d:81:50:75:fb:94:f9:1d:
         46:d2:dc:92:3a:b5:8e:a5:c6:84:26:55:59:92:f3:61:7f:75:
         7c:6a:43:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:07:41 2025 by rpki-client