Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/19061c41-5891-3f97-9d63-54bcf39601e6.roa
File:                     19061c41-5891-3f97-9d63-54bcf39601e6.roa (raw, json)
Hash identifier:          HtUc/P3PYGNIkWcgqjO6UGe0SJKEFhLTzHYIv8EQVCE=
Subject key identifier:   F0:6A:9C:53:53:1F:62:C7:8E:B6:B6:20:5B:37:05:65:3B:37:38:CB
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F43285849ABB498735571B3614E667180
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/19061c41-5891-3f97-9d63-54bcf39601e6.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     8070
IP address blocks:        170.85.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:98:73:55:71:b3:61:4e:66:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=e9cdeb94-d7da-4215-8b89-407f8c17eead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:26:b7:76:9e:9e:8c:26:1a:1a:80:ac:2a:
                    26:38:09:e7:f2:23:3a:8c:8d:b6:79:4f:f0:a7:f3:
                    33:83:0f:eb:1a:e5:e1:84:cb:46:d1:d2:f3:01:af:
                    2a:f8:97:dd:51:6b:9a:bd:02:a5:d8:76:26:54:42:
                    ab:c2:0f:06:07:e6:04:29:24:91:f5:a8:07:12:45:
                    95:0d:14:29:62:33:ff:73:c6:27:51:bc:ea:71:c2:
                    c0:a8:47:00:ca:d6:f2:42:75:0c:d3:29:e4:ef:38:
                    fb:36:b6:36:10:15:f6:c7:7f:cf:81:8c:f6:27:63:
                    04:0f:1c:58:a1:e7:c5:33:0e:0f:5b:43:51:79:e2:
                    02:d8:f6:82:ea:b4:fa:7f:be:3d:2e:1c:50:62:1e:
                    34:cf:29:e3:e0:46:85:dc:de:81:7c:10:98:84:c9:
                    68:a9:79:a8:de:ef:36:8a:90:ce:64:d6:06:dd:25:
                    d9:98:0c:17:08:c8:16:9f:2f:ef:fe:f6:ab:a5:7e:
                    e9:bc:53:85:28:10:4e:85:36:05:f1:0b:19:c2:8c:
                    5c:4e:f1:27:7a:9b:26:e9:ae:8f:69:58:97:82:19:
                    6e:48:89:4f:93:98:fc:cd:91:f4:34:c7:7c:a2:45:
                    20:5f:69:04:17:14:e9:45:b3:dd:a9:01:53:7a:ca:
                    3b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6A:9C:53:53:1F:62:C7:8E:B6:B6:20:5B:37:05:65:3B:37:38:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/19061c41-5891-3f97-9d63-54bcf39601e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:68:4c:f4:c6:1f:e1:d1:af:e5:a8:ef:31:e0:30:0e:0e:17:
         d1:b9:b9:9a:30:cf:f7:0e:6c:cd:d4:20:74:88:c3:2c:51:d5:
         72:52:60:be:94:93:89:c5:96:b4:22:e2:23:3d:b6:96:bd:60:
         fc:d1:c8:ef:87:95:aa:71:87:2e:56:c5:0a:60:c2:c4:a0:15:
         eb:37:54:9a:df:01:fb:34:5f:99:2a:16:bb:5e:84:15:3d:42:
         6c:aa:13:70:df:1f:ae:d4:b4:1c:60:4a:8b:08:5e:41:2c:4f:
         16:f0:91:24:c3:ee:22:c6:9b:63:f2:5c:e0:6d:2b:1f:08:e6:
         fb:01:76:5f:08:72:c4:04:c1:a7:5b:1c:35:8c:1f:bf:d4:cd:
         00:d3:66:56:79:78:7c:9a:bf:f3:b0:a4:ba:e5:75:01:74:07:
         bd:49:52:e6:42:1a:2a:ea:f3:eb:fe:47:f3:32:13:03:35:19:
         73:cc:e3:de:19:94:64:2b:89:ba:31:5a:02:b1:b5:08:49:a0:
         f4:d9:e1:85:c0:7a:5c:d1:e5:3a:3e:0d:25:64:ef:ad:bc:02:
         5c:13:64:8a:ad:05:e0:41:63:19:b1:3d:b5:99:ae:d2:7d:16:
         9c:ce:07:9f:01:3a:12:fc:01:5a:ef:60:08:f8:69:05:50:a9:
         88:f8:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:12:48 2025 by rpki-client