Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/57d011b5-4a71-3008-a3d6-d0bad3958667.roa
File:                     57d011b5-4a71-3008-a3d6-d0bad3958667.roa (raw, json)
Hash identifier:          zJj4fSA+m6g4+ro8DuXN1jtZ/Xk2y1fW+wJ9HV/siQg=
Subject key identifier:   E8:00:CC:49:E6:2E:FE:CE:EE:53:38:38:4E:2A:AD:FE:DC:7B:FB:FA
Certificate issuer:       /CN=32ed61a1-e1cd-40f4-ae04-a6a7a24248eb
Certificate serial:       010D0C9F43285849F2E54734F40605690D3BB700
Authority key identifier: EA:CE:FA:4E:91:37:CB:B0:FF:EE:79:E5:EA:80:CA:5C:8A:EC:EF:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/57d011b5-4a71-3008-a3d6-d0bad3958667.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     398229
IP address blocks:        170.39.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:47:34:f4:06:05:69:0d:3b:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ed61a1-e1cd-40f4-ae04-a6a7a24248eb
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=9115a329-2916-420e-9fd8-8650c13c57d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:ca:5a:0d:5f:a6:d1:2b:b7:6a:c1:42:c2:
                    0a:8b:e4:fa:86:f1:25:58:44:60:bd:78:6b:ab:ac:
                    ca:21:0b:1e:91:d9:98:15:88:72:36:d8:21:b7:9c:
                    ce:d3:55:d3:90:73:f3:e3:32:30:5f:cd:51:e7:5a:
                    e8:49:8a:bd:6e:ef:f7:4f:74:04:6c:54:5f:3e:39:
                    4d:b7:e5:f5:ad:73:11:f5:74:46:d0:8f:66:79:7a:
                    52:69:9b:99:23:d0:83:d6:02:9b:a2:4c:a2:64:f0:
                    84:ff:88:91:d1:20:82:1f:cd:41:e3:46:c0:31:49:
                    47:59:b4:fd:25:36:4d:84:39:71:f6:e1:14:69:ff:
                    76:2e:8e:b2:78:38:29:bc:ad:77:a0:eb:4c:56:de:
                    c7:05:f6:d7:d5:58:cb:9c:c3:33:24:42:74:d8:fa:
                    55:84:da:5c:3d:c5:75:89:b9:c5:14:0b:24:5c:59:
                    57:0e:36:83:18:f2:57:ca:c7:cb:cb:6f:a0:db:d2:
                    8e:09:01:ba:16:50:fb:9d:eb:fa:74:86:ed:8c:80:
                    16:be:42:3a:98:a1:cd:93:fb:ae:ce:b7:72:ec:83:
                    4b:b0:29:a3:8f:51:13:19:64:4f:62:65:2c:33:59:
                    a7:b0:b0:c9:fe:34:c2:d4:80:1d:55:71:a5:f9:f7:
                    e3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:00:CC:49:E6:2E:FE:CE:EE:53:38:38:4E:2A:AD:FE:DC:7B:FB:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/57d011b5-4a71-3008-a3d6-d0bad3958667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.crl

            X509v3 Authority Key Identifier:
                keyid:EA:CE:FA:4E:91:37:CB:B0:FF:EE:79:E5:EA:80:CA:5C:8A:EC:EF:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:a7:e4:db:a3:7f:0e:65:93:90:c9:43:56:55:40:a7:a5:2c:
         50:24:b1:81:ea:2d:29:a9:56:81:6f:39:71:06:37:74:83:12:
         07:81:43:b7:7d:c6:76:db:43:31:88:b1:26:23:85:1c:a2:a3:
         7a:7f:66:d7:fb:37:ee:95:6a:ba:99:68:25:53:73:42:89:e5:
         e9:d6:da:e2:de:fb:b8:1a:5e:8d:04:bd:d5:21:87:9f:0d:37:
         a5:68:a2:a0:b7:f7:87:14:7d:18:f7:81:e7:a4:78:c1:63:34:
         a6:8c:d8:6e:4a:d3:0b:c6:98:2c:60:71:01:4a:43:cf:f6:fc:
         14:e7:1b:35:fd:3c:32:e7:fe:eb:e9:f1:04:ca:8b:a0:a8:e8:
         2d:a1:ce:49:62:ac:47:f3:98:5a:ef:e0:65:71:86:4e:4e:e8:
         7b:15:5e:d9:73:19:d5:2d:ce:8c:9f:4c:cf:d4:85:61:07:e8:
         c3:3c:cc:dc:00:c4:08:95:b5:f1:d0:7d:6e:95:25:f3:84:ba:
         72:d6:67:9c:a4:84:40:70:4f:50:93:5d:04:27:a2:4b:65:51:
         39:3d:43:1e:a6:96:af:1a:64:8f:72:a7:74:24:6b:1d:a9:19:
         e8:cd:64:47:fc:23:7c:b5:8e:5b:3c:46:9c:9a:fa:8e:d3:f9:
         95:1a:da:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:02:06 2025 by rpki-client