Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/c31150a7-e730-36e5-a340-fc8fd70b8d65.roa
File:                     c31150a7-e730-36e5-a340-fc8fd70b8d65.roa (raw, json)
Hash identifier:          C2QqWfj/Em1gaauX+CF7XEiy63AE81ZWM5cFrHkQ+Z8=
Subject key identifier:   30:2D:2D:01:7D:95:D0:8A:D5:F9:55:95:99:81:01:C4:7A:A7:A7:9C
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F43285849D594ED0E18C6FF82F399A280
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/c31150a7-e730-36e5-a340-fc8fd70b8d65.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     29802
IP address blocks:        199.255.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ed:0e:18:c6:ff:82:f3:99:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=40f3693d-fe5d-44cb-b04b-b882ce6a52b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:ac:16:47:23:1a:40:66:30:1b:7e:4d:84:
                    b5:ab:22:02:6f:ce:2c:8c:08:ce:95:cf:a3:50:c3:
                    8d:e4:d3:1b:9c:2f:5c:fe:b1:7d:b9:85:4a:71:a9:
                    d1:3b:49:be:b7:f2:7d:6a:8a:9f:eb:01:42:06:5b:
                    b0:7b:bd:58:62:4c:9f:c8:32:ab:1d:54:2f:5d:c3:
                    ce:22:d5:00:06:97:70:41:25:d2:a4:5f:bc:2a:e8:
                    18:74:e5:50:ff:db:fd:d4:2b:25:51:98:a5:09:81:
                    91:a4:70:30:5b:ab:96:43:be:9a:9c:ad:e5:10:b3:
                    8e:34:aa:eb:e5:50:e0:ae:36:21:9c:b8:2b:aa:cb:
                    ef:23:6a:a3:df:c2:ed:d0:2b:a1:74:bd:f3:d8:5e:
                    76:e9:46:11:c5:e5:a5:cf:d0:8f:20:66:da:ad:67:
                    e4:3e:d8:f8:78:ef:72:46:3f:87:3f:ea:3d:fe:1c:
                    79:e9:7a:de:6f:5e:48:08:90:62:2a:af:68:16:a8:
                    53:7a:6e:66:b4:26:07:18:50:71:2b:ee:85:c2:ca:
                    7d:5d:f5:d5:50:70:42:a8:c7:fc:47:19:11:ed:62:
                    3b:12:b1:79:23:6c:b9:04:0f:c9:3f:ae:e9:8c:1f:
                    76:50:5b:0f:8a:fa:4b:8f:2a:f9:49:f6:15:cd:7c:
                    16:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2D:2D:01:7D:95:D0:8A:D5:F9:55:95:99:81:01:C4:7A:A7:A7:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/c31150a7-e730-36e5-a340-fc8fd70b8d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:63:5e:ee:bf:9b:bc:60:39:d3:29:ea:25:57:8c:9f:e2:43:
         39:23:a0:53:89:68:00:d5:40:22:f1:b5:fc:e0:b6:08:34:e4:
         e0:c5:86:a0:a6:31:65:24:65:50:a5:fd:bf:24:17:60:f3:59:
         54:18:ad:d0:52:4f:cf:13:20:1d:45:43:ec:8b:98:9a:0c:d1:
         54:fa:9a:eb:dd:52:2c:ed:5b:f0:46:ee:fa:ca:8c:d8:80:1b:
         54:80:d4:37:df:00:70:23:0f:15:5b:63:1d:60:6d:76:06:fb:
         31:f8:d6:6b:a4:9b:e1:fb:7a:c3:4e:14:db:ff:0a:df:f6:dd:
         25:5e:75:a9:15:98:1c:66:35:0b:76:dd:30:66:d8:7f:5b:66:
         94:85:86:1a:6b:f0:ea:79:b1:67:f3:a0:29:27:a2:89:7e:9f:
         fd:02:66:9e:bf:0d:ac:23:42:66:e9:46:3c:16:3a:6d:8a:60:
         45:10:8e:21:6f:eb:8e:0e:16:81:1f:7f:fb:21:43:f4:22:83:
         50:3e:66:01:14:a1:d2:d6:44:92:2e:9f:50:dc:6a:13:9b:97:
         9f:ed:b1:99:14:12:43:31:9d:4b:86:55:e7:88:ba:9f:f1:15:
         8c:7a:5d:9d:e8:41:03:23:96:17:45:6c:59:7c:79:91:1e:d2:
         7c:59:af:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:25:29 2025 by rpki-client