Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e44be2a7-1699-3e18-b7f0-80a3b99661b4.roa
File:                     e44be2a7-1699-3e18-b7f0-80a3b99661b4.roa (raw, json)
Hash identifier:          Pxz/zzEujGu6uMxoPckG9Oq3IOTi0jJJWEOvOmQz4nE=
Subject key identifier:   0C:34:7E:33:1E:06:89:4C:BE:98:7F:34:2A:48:2D:13:08:85:23:57
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F96D3BDF00CCD0331B220
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e44be2a7-1699-3e18-b7f0-80a3b99661b4.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        97.69.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:96:d3:bd:f0:0c:cd:03:31:b2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=a915088e-95da-4421-8674-c05ad9471a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:ef:89:32:df:2b:9b:fb:14:7c:25:58:72:
                    90:9a:d1:75:21:21:f9:43:20:bd:ad:09:4b:38:5d:
                    6b:4e:a8:82:b5:dd:fd:20:0b:19:51:30:18:a5:f4:
                    b9:e5:81:a2:3b:6a:60:69:d1:e5:89:bb:7e:05:20:
                    68:da:ca:0e:e7:8b:76:37:d6:c3:8b:78:a1:c4:4a:
                    5b:4a:60:15:25:eb:7e:1d:dc:b4:90:52:ac:8c:89:
                    62:b6:06:fb:e8:cd:23:b7:62:9c:22:17:26:bf:0d:
                    35:f2:62:bd:02:02:6f:38:6c:aa:45:6e:15:8d:38:
                    a3:6e:41:0d:1b:5e:45:65:9d:5a:ca:d7:6a:8e:08:
                    a7:1d:eb:cd:c9:78:05:ca:3b:36:04:53:3b:31:13:
                    03:bc:75:2e:6a:f1:14:28:71:51:da:a7:08:e4:60:
                    dc:9e:ee:a3:9a:60:08:7a:b9:85:09:a0:d5:a7:7f:
                    4b:9c:47:9e:05:39:60:7e:8e:5c:5d:2f:9d:dd:0e:
                    24:22:73:f9:5f:9a:5a:f9:4b:76:f5:48:ac:9c:37:
                    91:f6:e5:2f:c7:b4:2f:af:f9:91:96:28:eb:bf:cb:
                    cb:e8:ce:60:8b:46:24:8b:31:ce:8e:30:40:5d:4e:
                    88:e7:6f:66:f2:13:27:02:90:0a:71:15:5d:47:8d:
                    69:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:34:7E:33:1E:06:89:4C:BE:98:7F:34:2A:48:2D:13:08:85:23:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e44be2a7-1699-3e18-b7f0-80a3b99661b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.69.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d3:21:73:ec:bc:ca:ba:c6:fc:8d:e9:d5:ee:f1:94:78:fb:
         66:46:d7:bc:a7:2b:15:e8:81:53:ad:9c:a1:4f:4e:30:09:bb:
         d8:88:e8:bb:b7:ba:ba:bb:61:b0:9b:21:92:f8:1f:ea:39:a2:
         b1:93:82:46:40:b0:b6:cb:6a:a3:0d:96:f9:fa:3d:53:83:22:
         c3:5a:70:d8:66:73:db:87:1d:44:97:5c:de:4e:0a:5f:13:51:
         19:37:2d:43:1b:b2:3a:d6:58:16:d7:5c:db:99:6a:fa:40:4e:
         88:aa:b5:7b:6f:28:fe:c0:28:72:0a:92:f5:e4:26:73:d4:21:
         d7:7f:b7:c2:df:21:15:06:d9:13:fa:16:6b:b1:11:78:79:65:
         cf:a1:9a:95:67:b8:be:fb:8f:8f:36:da:5a:1e:89:f4:30:e3:
         4b:5a:f9:6c:9f:13:b1:d3:62:07:9a:ca:cb:b1:9d:cc:9d:78:
         7c:b1:f5:4a:95:ac:68:db:32:79:3a:4e:be:9c:c8:5a:d3:39:
         59:b2:6d:ee:1e:b2:d6:b4:f8:26:c5:69:82:63:82:5d:47:11:
         e8:48:32:e6:a0:f6:4e:43:60:3c:81:8e:65:50:7e:fc:62:00:
         75:7b:1d:d0:12:0e:e6:43:c6:65:d5:25:c9:f0:5b:08:e8:7a:
         e7:f3:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:58:55 2025 by rpki-client