Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/5968942d-8a76-3e29-834c-38b59362b33d.roa
File:                     5968942d-8a76-3e29-834c-38b59362b33d.roa (raw, json)
Hash identifier:          y2nQvfX79H17kn7OQ3xmkRWJDSFpGxRazJiG8spHz0s=
Subject key identifier:   A3:6C:82:C4:BC:3D:A7:BD:F6:E4:16:0F:56:21:17:99:48:FA:55:5C
Certificate issuer:       /CN=5c76d4a1-73e2-4f34-9886-0c16d4b02008
Certificate serial:       010D0C9F4328584A63F5BE7E6B4C7AED47CFE380
Authority key identifier: B0:E8:1C:19:4B:3E:9B:BB:D1:C8:D9:B8:A8:70:CD:8E:4A:C3:77:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/5968942d-8a76-3e29-834c-38b59362b33d.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     35280
IP address blocks:        199.182.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/5c76d4a1-73e2-4f34-9886-0c16d4b02008.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/5c76d4a1-73e2-4f34-9886-0c16d4b02008.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:be:7e:6b:4c:7a:ed:47:cf:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c76d4a1-73e2-4f34-9886-0c16d4b02008
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=c327ef50-1010-4017-b748-96fa437f6ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:a5:f6:57:17:24:4a:f2:9e:03:14:f9:ea:
                    f5:90:4a:1d:93:7c:f5:39:a7:96:64:b3:a6:0e:6c:
                    57:3e:84:25:b5:e3:92:f3:b1:b2:02:e3:a0:d0:2d:
                    9c:2d:f6:ce:78:97:41:64:78:62:16:e9:a6:49:5b:
                    b7:96:d2:83:17:bf:a4:dc:22:7c:c4:16:a1:ff:47:
                    ea:c5:de:ba:60:68:3e:c5:f2:14:d1:82:f6:bc:1c:
                    65:83:b1:ed:29:7c:1a:90:82:d8:f4:14:8c:bd:75:
                    0e:37:54:7a:df:2a:7f:7f:ad:cf:f4:dc:37:b7:96:
                    f9:ca:ce:d9:0f:a3:b2:a0:9f:34:9d:d9:d2:44:87:
                    9c:8b:dd:26:3b:05:22:7e:d5:a3:01:fa:23:a3:ab:
                    64:37:13:84:00:d3:f7:75:63:87:bc:77:59:2f:92:
                    99:91:1b:c4:42:93:fc:75:46:74:ca:40:dc:2f:cc:
                    f7:31:ca:db:6f:29:f0:b4:57:42:b8:4e:f0:9b:f4:
                    d0:f8:b8:f6:ff:7d:14:cc:0b:e3:a2:8c:a8:70:1c:
                    34:a2:6c:7f:2a:ef:f3:97:f8:85:dc:d1:5e:6b:7c:
                    ce:c5:b7:48:bb:a5:00:92:70:c3:56:97:22:e8:11:
                    d7:e1:d7:4b:21:85:52:5e:81:36:9e:7b:93:29:1f:
                    ad:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6C:82:C4:BC:3D:A7:BD:F6:E4:16:0F:56:21:17:99:48:FA:55:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/5968942d-8a76-3e29-834c-38b59362b33d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008/5c76d4a1-73e2-4f34-9886-0c16d4b02008.crl

            X509v3 Authority Key Identifier:
                keyid:B0:E8:1C:19:4B:3E:9B:BB:D1:C8:D9:B8:A8:70:CD:8E:4A:C3:77:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c76d4a1-73e2-4f34-9886-0c16d4b02008.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:10:c7:f3:9e:26:2e:9d:1b:9c:97:9d:e3:c7:16:9e:ef:12:
         e0:46:ac:c2:20:e7:a1:fd:ae:fc:39:a9:c4:da:89:9f:53:aa:
         d2:cc:79:56:d4:de:da:4e:bd:88:aa:1a:89:e6:a2:02:f7:0d:
         75:79:e9:e3:b6:61:11:1c:03:9a:52:2b:66:50:26:b2:53:41:
         fe:cd:61:fc:87:69:2b:42:6e:0d:23:3c:2e:78:64:8a:48:22:
         cf:e2:de:49:66:a8:1c:53:4f:99:13:a4:2d:ca:01:0b:a3:3b:
         a0:70:8b:6d:14:47:98:e0:24:df:56:c8:03:e9:ef:7e:95:67:
         8c:1a:31:f4:6f:49:a2:2d:45:5b:7d:06:c1:38:24:53:f9:0e:
         40:ef:6b:c3:49:08:8a:95:9d:d3:95:38:fb:00:62:74:06:61:
         c2:f4:ec:a8:f6:54:d2:88:2c:ae:5a:9c:18:a0:c3:16:38:df:
         f8:cc:a2:d7:81:32:9f:93:69:29:99:9f:91:6a:6d:93:18:1f:
         41:37:aa:57:31:d9:57:f4:bd:2d:e5:7e:44:71:84:97:33:04:
         95:b3:ef:cc:05:dc:31:0d:78:9a:b5:f5:a8:91:35:39:dd:d8:
         81:0c:cf:3d:5f:52:1d:14:c4:0d:3e:18:01:10:28:a5:31:02:
         f5:c9:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 18:58:49 2025 by rpki-client