Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f630205b-9c91-3f36-9c56-8a7d876e6812.roa
File:                     f630205b-9c91-3f36-9c56-8a7d876e6812.roa (raw, json)
Hash identifier:          TsQ52e0fAtLS3hOiMW9sODHaMvjmGcRwYxeFdlnC1oo=
Subject key identifier:   60:B8:BA:2A:B3:8A:B2:47:B6:5C:BF:35:08:33:B5:4A:1C:66:A8:9C
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584A7085F1ED35470ADF4E4B8180
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f630205b-9c91-3f36-9c56-8a7d876e6812.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     14618
IP address blocks:        173.199.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:f1:ed:35:47:0a:df:4e:4b:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=244603e3-f5da-462b-b419-791f5f702fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3a:0d:13:fa:47:15:69:4e:76:4a:a8:79:03:
                    37:3e:3b:cc:81:24:dd:0d:2f:c1:36:eb:bc:33:d0:
                    a8:3a:96:ec:c3:26:f2:07:8e:fe:44:c8:fb:6c:69:
                    9c:41:24:0a:4a:16:03:af:c2:5a:a8:85:92:49:60:
                    79:e8:1a:1f:8e:66:22:d3:b1:17:9c:5f:94:b4:12:
                    d2:ed:83:af:27:93:b1:ac:89:7e:b4:e5:ad:56:82:
                    a5:b5:6f:99:26:0b:ec:2d:87:d3:a0:e9:8f:40:37:
                    30:80:8a:30:7e:39:28:d4:55:6e:ee:54:ff:eb:6a:
                    d9:45:03:33:98:5c:ad:c3:8d:59:80:c2:f1:27:a5:
                    6e:20:64:92:42:b7:4c:3d:0d:a5:33:b6:36:9a:03:
                    84:bc:bb:f3:c8:fd:f4:a3:a9:ec:b9:c0:a5:f6:c0:
                    c1:62:a9:b8:b0:d1:c7:39:19:fe:4c:30:71:e2:ef:
                    7c:dd:b3:69:ab:de:44:da:c7:e2:df:69:bf:ee:52:
                    83:17:a8:2a:78:70:be:a4:4a:f4:17:c5:bd:8e:47:
                    00:f5:1c:ff:f7:8d:90:a9:4b:85:74:7c:1a:db:ed:
                    bd:20:d2:9a:4f:72:eb:14:24:f0:c2:9f:9a:54:bd:
                    f4:22:d7:5f:5a:74:82:13:15:6b:9f:90:f0:60:b0:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B8:BA:2A:B3:8A:B2:47:B6:5C:BF:35:08:33:B5:4A:1C:66:A8:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f630205b-9c91-3f36-9c56-8a7d876e6812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e9:3f:5c:38:24:8c:5c:bc:16:50:5b:22:fd:87:24:bb:f4:
         52:a5:e7:9b:40:d9:b8:19:2b:95:1f:5c:d0:9c:db:1d:bf:0c:
         0b:1d:ef:67:60:02:e6:e7:f5:35:69:da:ad:58:de:db:dc:fb:
         22:e3:94:a6:a5:ca:81:fd:4d:93:6d:89:fc:c7:59:ce:a7:9b:
         17:61:89:6c:83:ce:4c:73:6b:9e:8c:26:a4:9a:ab:6b:29:13:
         6e:7f:06:85:30:a5:77:c2:7e:95:df:36:33:59:ee:16:46:eb:
         91:3c:54:54:a1:b0:55:86:a0:67:64:a4:07:00:54:43:c8:1b:
         8b:95:b7:47:59:13:3b:78:2d:13:a8:f8:b1:71:0a:f8:cd:09:
         a0:40:b4:7b:62:ff:d4:cf:8d:27:34:be:68:d7:f0:ab:1b:e0:
         a5:6d:2d:a8:cd:16:30:40:03:5c:4f:8d:da:38:89:79:44:dc:
         79:b7:2d:90:23:70:b1:97:5c:c1:44:f5:69:1e:94:1a:1d:fb:
         61:69:e7:32:fb:0b:ea:8f:aa:b5:3b:36:45:0a:38:f4:4a:03:
         40:9a:d2:71:53:81:8d:0f:2b:4b:38:c2:5f:ac:55:7f:9e:e6:
         26:a1:d1:ea:d0:1e:92:a2:4a:04:97:e0:ff:31:ce:eb:47:93:
         a9:2e:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 15:03:57 2025 by rpki-client