Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/30a09d44-dfec-338b-ac49-726a62b531d0.roa
File:                     30a09d44-dfec-338b-ac49-726a62b531d0.roa (raw, json)
Hash identifier:          6RjVUbt55gYR1BSPb1EoVf9h7pu+2xZrmLhNbrAmvJw=
Subject key identifier:   6F:39:25:4C:F1:1E:1C:D6:63:F1:38:0C:CC:AF:23:5C:D7:1E:86:7D
Certificate issuer:       /CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
Certificate serial:       010D0C9F4328584A0D6A824A24701FAABD3AC300
Authority key identifier: A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/30a09d44-dfec-338b-ac49-726a62b531d0.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     62651
IP address blocks:        199.33.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:82:4a:24:70:1f:aa:bd:3a:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=ef92572c-b96b-4812-9f48-4c339a99241c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:da:ba:c2:85:59:c5:26:fb:eb:af:55:e4:d6:
                    c1:86:d7:24:17:c4:f5:03:e4:cb:34:4e:a6:85:48:
                    23:bd:25:e5:5b:9a:50:d0:d3:9d:3e:5e:3c:58:2b:
                    5a:04:4f:ab:96:e2:99:89:02:fe:a5:fb:dc:e3:e9:
                    da:b2:e2:91:69:88:da:b0:33:54:de:b0:dd:e0:e0:
                    c6:c2:99:c0:25:a6:16:98:94:96:f9:97:88:76:7c:
                    6a:35:70:13:3a:8d:dd:bb:55:b5:4f:78:f7:d4:6a:
                    8c:0c:f9:ce:13:29:e9:8a:72:0d:83:dc:59:16:c3:
                    a2:78:b7:3d:59:17:cb:b7:e4:e6:a1:4f:b5:bb:ea:
                    61:18:57:4c:84:0d:a6:c5:d6:4f:47:1f:98:48:90:
                    aa:12:c7:45:2a:e4:5a:cf:78:62:26:22:78:26:cf:
                    f5:99:f4:01:3b:37:62:3e:03:3f:fb:9e:a4:60:41:
                    6d:c2:36:60:ad:72:c3:27:10:ee:30:13:ca:ed:f2:
                    89:90:ad:fa:94:51:af:73:7a:a6:09:02:76:76:d1:
                    ff:af:4b:c5:1d:ca:5d:60:d9:f4:4d:f1:a5:00:5f:
                    f9:04:e5:a3:c6:d2:75:0d:f4:29:25:c7:c1:ea:4d:
                    82:54:48:80:1e:07:70:e5:4d:88:3c:11:f5:38:76:
                    0d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:39:25:4C:F1:1E:1C:D6:63:F1:38:0C:CC:AF:23:5C:D7:1E:86:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/30a09d44-dfec-338b-ac49-726a62b531d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl

            X509v3 Authority Key Identifier:
                keyid:A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:9a:e1:dc:54:79:67:0e:57:70:0d:2d:82:36:2e:2f:7e:66:
         30:03:cb:07:25:a5:a2:76:6f:5f:b9:12:b8:9e:b5:cb:f4:a9:
         22:3c:a5:44:58:66:c9:d5:2a:31:42:d7:0e:9b:01:e9:ae:02:
         5c:fe:63:6d:5b:fb:f0:82:b3:d9:15:62:7a:17:b3:63:59:bc:
         94:0e:28:c3:9f:63:53:b7:e1:b5:e3:00:b2:62:c6:bf:b0:ec:
         36:4b:cf:05:42:ab:71:6e:02:9c:89:97:f3:c2:a9:19:46:d5:
         5d:d2:d3:c0:93:ef:e2:60:70:b4:e1:1a:dd:84:bf:19:29:2a:
         da:f2:70:a0:86:ab:cf:8d:7a:64:85:e1:3c:58:98:32:bb:81:
         a1:48:64:13:be:43:59:9f:cc:21:53:6d:4f:ad:2a:1f:50:b1:
         9e:04:04:33:04:4d:d0:25:10:76:62:d7:03:95:a4:27:3f:ab:
         78:e9:15:b2:8d:1d:15:40:5c:05:ce:92:4f:80:d3:c4:91:c6:
         7e:25:68:fe:18:32:d3:90:c4:a6:9e:d4:84:7e:bf:37:ab:ea:
         8e:ab:83:84:5b:16:84:8e:9d:c7:ca:a7:19:b7:0a:65:30:7b:
         5e:07:3e:16:08:2c:c9:e2:ed:84:df:02:90:53:a9:75:2a:a5:
         f4:4e:46:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:05:47 2025 by rpki-client