Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/f25bff96-ecfb-3faa-943a-2e09d0bb0c7c.roa
File:                     f25bff96-ecfb-3faa-943a-2e09d0bb0c7c.roa (raw, json)
Hash identifier:          ywHYrVHV9NMzfK44KmqtiEGrya6K8lQiulBGWoNq3yM=
Subject key identifier:   F1:67:72:84:48:A6:38:85:B9:4C:50:45:30:9E:51:1F:A2:CC:CE:E3
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584A1F9021BDB2F3C19046319F80
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/f25bff96-ecfb-3faa-943a-2e09d0bb0c7c.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     399275
IP address blocks:        172.81.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:21:bd:b2:f3:c1:90:46:31:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=47ae2179-7919-458e-957b-24f4959ec180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4f:75:e1:b3:92:05:a6:53:2d:ff:3b:41:f8:
                    83:b9:c9:29:b1:83:76:d7:f8:af:2f:4c:cd:28:6a:
                    01:25:2f:42:a4:e9:5d:4e:67:0c:9f:4a:5d:10:b1:
                    6d:fd:3a:eb:90:5e:31:2d:fc:a2:21:39:ab:d5:f4:
                    e6:b8:b3:71:5c:2c:b9:5c:d8:4e:bb:c1:a8:26:1a:
                    87:22:02:49:89:98:f6:1f:c1:f6:ef:7a:0b:70:e4:
                    95:85:32:11:08:4c:26:c1:5d:a4:b2:f5:78:73:63:
                    61:71:6e:ea:6b:47:56:14:54:68:f9:c7:2a:1e:ea:
                    36:51:2a:bb:5f:b6:9d:65:07:85:c0:40:3d:e1:75:
                    96:3c:68:6d:62:95:08:a2:b1:2f:0e:79:63:96:d9:
                    a6:cf:e1:f9:69:d5:73:6f:97:95:a4:44:83:ee:fc:
                    66:99:8a:de:83:ea:84:ff:fc:a3:20:90:9c:35:c7:
                    e2:36:9f:9a:41:78:ac:9b:d0:e5:17:52:2e:16:7a:
                    bc:4a:3a:0c:59:9a:45:b6:ea:d4:b5:b7:e4:93:a9:
                    01:06:19:f0:6a:c5:90:cd:a6:0c:8e:85:85:41:24:
                    64:91:fe:95:b2:02:36:f8:c7:b0:dc:aa:72:82:5f:
                    74:ed:01:66:67:92:ea:c0:2b:07:00:ee:24:05:a0:
                    5f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:67:72:84:48:A6:38:85:B9:4C:50:45:30:9E:51:1F:A2:CC:CE:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/f25bff96-ecfb-3faa-943a-2e09d0bb0c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:1f:09:36:5a:e7:93:cc:49:f7:1c:69:4e:23:19:8b:d8:db:
         dd:df:a9:2c:0d:07:99:ea:b3:18:9b:d1:f7:b4:48:94:6c:ae:
         0c:26:a3:5a:af:1d:ad:45:93:48:c4:59:1b:6a:28:4b:a4:bc:
         6f:87:6c:cd:91:19:ce:90:7c:db:0b:4b:7b:21:92:fd:8d:7f:
         35:79:d1:98:2d:4c:84:2b:2d:15:84:81:91:79:52:b7:55:b3:
         39:eb:68:35:a8:c4:82:4f:13:ba:ab:41:5e:d1:12:fb:b6:44:
         7a:99:9f:fb:20:d3:72:c0:d5:de:ba:31:59:56:ed:37:23:73:
         ff:a6:ed:63:91:8b:32:2f:45:9f:4f:16:e3:87:b9:60:eb:70:
         11:16:f5:92:cc:fa:8d:e7:4d:72:a3:dc:03:94:ba:28:90:29:
         56:9d:bc:a1:21:c4:84:4d:bf:07:44:6b:7f:ab:92:89:5c:cc:
         a9:73:88:83:f9:71:00:fb:68:d1:0e:ee:00:b6:45:7d:02:87:
         b6:db:2c:ad:fa:68:71:03:50:eb:79:92:fa:e5:5d:43:6e:eb:
         ab:37:7d:b2:16:7d:58:2e:26:48:9c:60:05:a8:32:10:7f:d2:
         e4:f2:e9:4a:8d:65:a2:9a:a7:73:7c:f4:76:c2:3a:0d:10:43:
         10:06:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:07:01 2025 by rpki-client