Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3b05fb70-f122-34b1-a6d3-942f9d52793c.roa
File:                     3b05fb70-f122-34b1-a6d3-942f9d52793c.roa (raw, json)
Hash identifier:          EpaU3kyDjvlQ57aJpBNyFxCbSJewJZE3Z5lDuC5avXE=
Subject key identifier:   E1:E5:92:AD:05:FD:BC:99:92:93:3C:C6:CF:77:E0:1B:57:B7:16:DB
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584A43DAFF23B922EF224F8A5390
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3b05fb70-f122-34b1-a6d3-942f9d52793c.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     5769
IP address blocks:        147.253.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:ff:23:b9:22:ef:22:4f:8a:53:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=8dc73db3-18dc-463a-959e-375760c3876d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ac:69:5b:08:6e:b8:ce:b1:31:32:78:af:3c:
                    85:80:e5:a8:8d:e9:f4:bf:3e:58:45:af:de:0a:77:
                    a4:5b:0b:d6:1f:78:9f:7f:77:69:5f:e1:96:86:a8:
                    a2:bd:c6:6f:f5:97:81:13:f0:2f:01:3a:9d:77:ef:
                    b4:a2:a1:a3:b3:08:ee:06:59:71:01:63:74:a5:1e:
                    4d:9e:11:a4:f9:bc:2a:d4:e1:d7:26:f9:5a:e6:f2:
                    7a:f8:d3:94:73:33:cb:1f:c0:1c:52:2e:2d:25:14:
                    c5:01:6c:43:b7:6f:38:f0:4e:11:71:ea:fc:75:03:
                    9a:9d:9b:e7:2c:04:71:6f:ea:a9:45:59:fd:59:ef:
                    21:5b:55:58:61:40:0a:1f:6d:e9:6e:35:ca:d2:99:
                    52:08:b4:1f:13:f0:a4:ab:4e:31:a6:3e:8d:8e:51:
                    69:80:85:d3:0d:cd:60:5f:44:05:68:f9:e5:d3:da:
                    58:cc:d9:40:14:2b:c3:1e:d9:58:f5:cd:93:d8:33:
                    af:76:a1:d5:22:da:f8:eb:52:41:c5:56:94:7c:31:
                    c5:31:65:ff:54:39:e0:8e:b9:f8:5d:4e:18:cd:cd:
                    de:b8:00:88:94:9f:cf:a0:a3:a1:4f:d1:b0:24:1c:
                    0c:0c:62:6c:80:55:d0:66:a5:0d:c7:48:d0:f4:b4:
                    07:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E5:92:AD:05:FD:BC:99:92:93:3C:C6:CF:77:E0:1B:57:B7:16:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3b05fb70-f122-34b1-a6d3-942f9d52793c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.253.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1d:b1:49:1a:b6:68:e8:17:d1:54:58:0d:c3:ef:b9:59:08:
         bb:88:4e:61:ac:99:ac:52:17:47:46:5b:99:7d:29:f9:bb:f2:
         44:73:8d:8c:23:b6:2b:2f:d5:e6:ea:39:f4:44:6d:5d:61:96:
         0d:1e:73:3f:78:0b:68:34:4a:23:67:dd:6c:f8:1e:7d:97:0d:
         8a:b8:48:9a:91:38:65:e8:74:79:ac:b9:bf:1a:fd:6a:63:23:
         ee:a5:f0:c6:6d:19:d2:4a:98:93:cc:87:94:b4:56:84:f7:5a:
         c8:0c:eb:01:50:92:a6:77:94:7e:51:b8:f2:e6:8c:e8:97:41:
         e5:46:25:18:1e:fc:bd:2c:b3:32:00:ca:80:8c:95:1f:6d:48:
         e6:7d:0a:56:87:ab:ea:3f:a3:85:76:dc:13:31:15:52:d9:be:
         6a:93:a2:59:60:d5:94:64:7e:2b:ec:07:e9:6c:0d:70:9f:41:
         45:d9:0d:d8:38:0c:f9:09:8d:cc:c3:90:3d:6e:66:6d:fc:2f:
         2b:58:ed:0e:e0:8d:85:bc:f7:33:b3:51:75:df:7c:fc:85:d1:
         97:a4:61:06:68:e5:fd:ea:a9:3c:9e:31:f3:07:5e:32:0b:88:
         b5:39:82:b9:7f:73:c3:e1:86:69:4a:e6:9e:4a:dc:f2:9b:44:
         1d:c0:d5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:52:01 2025 by rpki-client