Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/f1a10b4a-a445-396b-bc3f-6aa34bff54aa.roa
File:                     f1a10b4a-a445-396b-bc3f-6aa34bff54aa.roa (raw, json)
Hash identifier:          JRPov81YMWlf04/dBQWWc1vHY/t0+/6YfNxRMEWsqog=
Subject key identifier:   C6:CC:C1:98:70:C2:CC:CA:F9:49:47:35:91:1B:91:D4:75:68:F8:DD
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584A0C0561317A4C6848C489E4A0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/f1a10b4a-a445-396b-bc3f-6aa34bff54aa.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     19905
IP address blocks:        162.212.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:61:31:7a:4c:68:48:c4:89:e4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=dbb73def-dd6d-4b4f-ace0-63155a11713e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3d:0f:54:a2:27:02:a9:ff:9d:bc:a7:d1:29:
                    b6:70:ed:41:38:6c:42:67:6a:e6:55:6b:68:78:c6:
                    e3:93:9f:10:0e:49:35:eb:3c:2e:74:e2:77:80:5b:
                    42:4b:70:29:99:40:bd:07:7c:04:f2:24:7f:c3:90:
                    09:bd:ce:e3:16:69:83:ca:9a:42:c5:04:fb:1f:52:
                    4c:92:b0:fb:53:6b:14:cc:50:aa:ea:99:7e:71:44:
                    49:55:2b:56:f9:07:5b:37:e0:3e:95:bf:85:c7:28:
                    6f:85:e7:f9:75:15:a4:24:f7:14:d5:b1:ad:8a:88:
                    24:bf:42:f3:08:dc:92:1e:91:d7:77:5c:fd:b0:eb:
                    17:f9:80:6e:b4:32:1c:5c:38:88:e8:6f:59:14:9a:
                    94:ef:f1:5f:b2:e3:49:9b:44:ba:99:f6:ab:4d:5e:
                    01:a5:e4:9f:73:08:83:1b:dd:58:47:03:dd:82:94:
                    aa:46:2e:71:1b:6e:d7:bd:f0:44:07:19:52:a7:87:
                    66:15:d2:dd:d6:36:27:33:5e:73:6b:c5:ff:ea:16:
                    f5:b2:e3:c5:96:95:2c:70:28:0d:3f:0d:2e:ff:3f:
                    84:14:96:b9:a4:15:86:32:c1:ec:ce:d7:00:bd:b1:
                    bb:8d:88:9c:2f:5b:b2:ca:f9:bf:12:0b:7e:a5:19:
                    c2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CC:C1:98:70:C2:CC:CA:F9:49:47:35:91:1B:91:D4:75:68:F8:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/f1a10b4a-a445-396b-bc3f-6aa34bff54aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d1:ab:15:01:a4:68:db:2d:24:f5:fb:94:4d:85:54:30:f5:
         c5:bc:da:db:0f:86:71:1a:b6:aa:be:d3:fd:17:e6:18:b1:fd:
         81:d8:06:a0:cd:e7:be:3d:44:0c:54:11:41:4e:93:21:47:8d:
         8d:2b:a4:57:ad:99:a5:48:24:ad:15:2f:b0:66:82:25:57:b8:
         11:00:a4:c4:c9:9c:0e:c2:91:df:af:3f:15:c5:59:4f:35:03:
         3a:6f:a9:16:46:24:d0:7d:27:79:17:97:6e:b8:1c:6b:1e:f6:
         0b:4b:dc:bf:32:6d:60:10:f7:3d:29:ca:cf:e3:c1:ac:12:ab:
         70:11:8a:27:cf:6f:e8:50:13:34:3c:e0:a2:d1:78:44:78:84:
         d4:0e:aa:ff:c8:7f:ec:84:95:87:18:9b:62:bc:b3:ca:b9:b0:
         ef:0e:22:ad:9f:df:bf:5d:e5:7b:8c:a5:6f:2f:cd:da:d5:8c:
         fc:fe:19:02:7f:cb:4c:68:32:10:b8:c7:e0:b0:35:21:11:5e:
         d3:67:13:98:c4:f0:da:77:73:30:1f:d6:44:d0:62:66:2c:d8:
         5b:ab:bd:fe:9b:85:1e:a2:fa:8f:52:84:61:a7:11:7d:8c:b8:
         c8:07:2b:42:3d:23:87:2e:88:9e:e3:d4:d1:8a:85:d8:7a:6c:
         dc:b1:be:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:23:19 2025 by rpki-client