Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/c0b2d916-b232-3a0b-9970-3b58b6b50557.roa
File:                     c0b2d916-b232-3a0b-9970-3b58b6b50557.roa (raw, json)
Hash identifier:          pHGJlmlY6BVqR2BcdIYMw9u3U2qQOavY6RBcVmvmDog=
Subject key identifier:   2D:78:4B:40:A4:05:ED:EA:5F:57:39:1B:CA:29:49:3D:A7:D0:A8:D2
Certificate issuer:       /CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
Certificate serial:       010D0C9F4328584A7085ED240495E3DB7905EDC0
Authority key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/c0b2d916-b232-3a0b-9970-3b58b6b50557.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     32402
IP address blocks:        173.242.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:ed:24:04:95:e3:db:79:05:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=d0d37639-40ee-4ac1-ab08-9bbabae48f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:53:e2:41:eb:d8:bb:fb:54:c3:77:71:29:
                    09:c0:af:aa:46:c8:a5:51:68:b5:15:71:18:46:1e:
                    2f:90:40:01:5f:9e:cf:9b:2a:d8:45:21:10:4e:26:
                    fb:cf:19:a8:03:98:83:8b:4e:95:7a:7e:f4:3b:d9:
                    9d:98:7b:7b:95:0b:87:f7:1f:65:b4:63:52:32:54:
                    f5:e8:fa:75:9c:04:37:df:36:d2:81:a6:51:ca:4a:
                    ea:64:2b:6d:83:5f:8c:52:c6:f7:8a:b7:7a:8b:53:
                    bf:a4:4e:e1:28:02:df:4b:35:af:05:13:36:ac:0e:
                    f0:05:a9:24:54:97:60:9f:5d:62:b2:a5:07:8a:ea:
                    57:11:a4:3c:5e:ad:ad:04:f6:0c:3b:9f:66:0d:2e:
                    fb:e5:0a:56:05:4d:ee:f6:cb:81:5d:ac:19:53:a6:
                    63:db:b5:31:74:95:0d:4e:35:5c:00:e5:81:52:bd:
                    98:51:7a:26:29:86:f2:06:cc:aa:8c:1e:1b:02:6b:
                    31:90:b0:e3:b9:bb:54:4f:78:73:73:e3:39:eb:4a:
                    9d:92:a1:27:4f:9b:eb:22:2e:57:17:95:ad:e7:f2:
                    c0:ac:34:60:34:66:76:61:2a:ab:aa:74:62:eb:cd:
                    5e:cd:ef:32:bc:fa:3c:60:4c:78:11:65:64:d9:9d:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:78:4B:40:A4:05:ED:EA:5F:57:39:1B:CA:29:49:3D:A7:D0:A8:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/c0b2d916-b232-3a0b-9970-3b58b6b50557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:75:f1:ca:a7:2c:c3:4c:d7:8c:ec:f6:a2:02:fb:9b:43:32:
         5e:de:93:06:b7:fc:85:c6:09:cd:d0:3e:97:59:8a:eb:67:01:
         82:9f:b5:2d:38:4c:ec:d9:5f:9a:22:f7:4c:f2:55:f8:5d:8d:
         d9:c2:dc:1f:9c:c0:56:16:d1:8d:23:1f:ff:1b:24:90:0f:98:
         21:e2:c7:f0:81:9b:d9:8d:5f:c1:15:3e:34:97:1a:30:ba:3d:
         d7:63:9a:e9:eb:e8:f5:77:3f:c0:32:59:bc:e3:2e:c4:a9:2b:
         07:3f:7c:4d:04:b0:25:a4:48:b9:5b:e9:33:26:4c:7a:cb:74:
         28:82:f3:61:61:e8:9d:fc:99:d3:98:5c:45:d1:11:4d:de:7c:
         bc:36:5f:c1:40:8e:e3:35:30:e2:11:1d:d5:be:08:52:67:b7:
         51:3e:c8:85:cc:32:d4:51:87:0f:74:c2:00:b3:0d:a6:fe:b2:
         50:96:d8:a6:60:45:1a:3b:17:cc:32:bf:49:ca:e3:be:a8:bd:
         b2:86:2d:61:9d:d5:1e:7f:22:6e:69:1e:b4:4d:80:30:90:ad:
         75:28:9d:0d:2d:79:71:8a:69:e4:83:e4:5e:7e:13:dd:6a:8b:
         98:9f:54:95:2d:b7:8c:3d:de:98:b2:4c:8d:17:e5:ef:df:58:
         ca:f5:ae:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:36:28 2025 by rpki-client