Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/62eecb6c-5b3e-34e0-9511-9a4125e7c5c2.roa
File:                     62eecb6c-5b3e-34e0-9511-9a4125e7c5c2.roa (raw, json)
Hash identifier:          Oi8YL+bwgw5cw793JYsTD+4w10zD+BTg38K5CP9/tyM=
Subject key identifier:   A9:61:E4:92:6D:BC:DB:FC:B9:03:46:B4:80:ED:21:B1:6F:81:B1:7F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA95F3D616EB2924BF4F60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/62eecb6c-5b3e-34e0-9511-9a4125e7c5c2.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        142.177.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:95:f3:d6:16:eb:29:24:bf:4f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=71c9cde8-3f58-4508-9670-2e4a4e566ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:69:61:b2:b2:34:ba:55:dd:77:66:1f:8f:84:
                    4d:35:74:fd:78:d4:0b:59:37:61:3f:75:ee:6c:10:
                    73:a6:d0:45:48:b0:64:03:8b:10:c6:6e:4d:13:e9:
                    75:21:82:50:df:9e:5d:ae:9a:b7:17:a9:ac:4c:a5:
                    41:4a:86:22:3c:bc:57:93:ef:39:26:0a:d0:37:46:
                    4e:5c:e9:f3:11:81:be:94:c9:58:e8:76:16:54:af:
                    17:01:63:ec:f3:10:34:2f:eb:fd:18:9c:d1:18:2e:
                    eb:2c:c5:c8:e6:21:2e:7b:1e:44:7e:5b:ae:30:ef:
                    00:33:76:e4:96:34:de:a1:0f:1d:a2:8b:dc:ce:ae:
                    52:c9:8d:6d:69:ce:65:22:18:f2:e0:28:9b:87:8a:
                    3f:54:df:80:e6:4d:9d:e7:0f:83:f4:e1:17:b9:c5:
                    c5:a6:7f:5d:f6:f4:f3:90:b3:4d:0b:7e:66:db:ea:
                    4b:de:58:54:b9:96:a1:17:e1:f5:40:fb:0d:7b:ed:
                    6c:45:f2:09:12:be:0b:7e:44:a6:91:6f:91:55:83:
                    40:35:09:5b:7d:99:23:03:b0:f7:eb:af:c3:47:11:
                    96:ec:1b:e4:ff:93:77:80:db:dc:3e:ac:8b:f1:3d:
                    55:17:55:1f:cf:d6:dc:34:6d:6e:7a:8d:93:9c:69:
                    74:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:61:E4:92:6D:BC:DB:FC:B9:03:46:B4:80:ED:21:B1:6F:81:B1:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/62eecb6c-5b3e-34e0-9511-9a4125e7c5c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.177.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:2b:ac:79:cf:5c:e8:18:34:21:18:6f:02:0e:bb:77:d4:9a:
         bf:0a:6d:9a:10:9d:e4:3f:6b:20:68:d1:52:84:18:d2:30:ba:
         6e:d4:e3:82:c6:6d:54:b1:26:07:69:71:b7:81:53:68:26:33:
         3c:c4:a6:59:65:08:ca:36:cf:91:54:b1:b3:42:93:93:3e:be:
         59:12:02:ba:f9:dc:df:f8:ea:3a:b1:2d:30:2d:51:a4:c0:6f:
         18:51:b6:b3:08:db:56:e9:ef:71:75:76:25:19:6e:92:a9:23:
         0e:7d:3e:a8:63:e6:16:b8:d0:ff:8d:cc:a7:1e:21:d6:2d:e0:
         9f:04:ce:5f:e5:1d:97:30:d5:af:a7:db:3a:78:56:34:fd:6b:
         95:c1:6b:4f:e7:1c:07:ae:e0:77:6c:d1:45:02:ca:6a:9b:70:
         b2:59:c1:ef:aa:0a:c7:87:83:d2:a2:ee:ec:59:83:9d:7b:20:
         42:59:89:04:ff:4f:eb:4e:ff:5a:c1:2a:94:d5:e1:97:8b:04:
         1e:3e:44:59:2a:7d:ca:f0:34:f4:e1:5e:ce:55:de:f6:4b:dc:
         50:b7:1d:b8:a4:fc:64:65:b6:ec:a3:a7:fd:46:ae:75:4b:98:
         cc:1e:7f:f3:41:ce:ae:43:ac:2a:1c:ab:43:86:24:55:4f:15:
         69:c3:97:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:27:50 2025 by rpki-client