Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5b5be480-44ed-31ee-80f8-4d078a62e541.roa
File:                     5b5be480-44ed-31ee-80f8-4d078a62e541.roa (raw, json)
Hash identifier:          csDvBSeFRV0oq2J5+1bL5GiAx/6hvfQJnIowFuPY3dI=
Subject key identifier:   2D:FF:F6:A1:6E:D9:BF:0C:F3:3E:CF:1C:0F:97:89:A5:97:86:33:F6
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584A1E2AA998572E42207F87A6F0
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5b5be480-44ed-31ee-80f8-4d078a62e541.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     14061
IP address blocks:        199.4.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a9:98:57:2e:42:20:7f:87:a6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=1d49cc6b-3b26-4303-b45c-ce4fb283b232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:f9:92:b3:26:a7:73:4a:69:2d:92:17:13:
                    ed:2d:6b:b2:4d:ba:cf:4d:07:5f:5a:b4:b9:ff:54:
                    39:b9:0b:e2:29:78:b3:47:6c:10:7a:aa:53:6c:f6:
                    fd:93:1e:9a:2d:de:53:23:e8:c7:28:f3:cb:77:77:
                    44:1f:72:af:09:d9:78:a3:c1:05:d6:24:a9:0e:cb:
                    c8:4d:23:e6:ff:b3:41:84:74:ed:fb:19:b2:6d:80:
                    cb:a5:a9:46:82:02:ec:e9:0b:b2:26:56:09:fa:be:
                    e7:e0:9e:d7:7e:21:f9:7c:c1:c2:e6:4d:55:af:c2:
                    2d:23:77:ef:20:b3:ba:1c:e8:9e:06:eb:8d:ca:77:
                    11:29:72:37:fc:1c:57:08:17:d2:57:51:3f:0c:40:
                    1f:af:b1:67:30:56:dd:1d:5c:8c:07:6b:23:89:43:
                    26:c6:a3:db:5d:9f:22:f5:06:7b:b9:25:10:25:d7:
                    42:45:cb:ef:d5:d2:ab:cd:4f:0d:1c:70:f3:2b:24:
                    b2:2a:fe:00:01:4a:9b:af:7c:53:b5:fe:c2:09:37:
                    2c:b4:b4:32:f9:2f:94:a1:35:73:74:7c:56:fa:fe:
                    e1:46:33:f0:91:1f:c5:53:67:a8:a9:19:c4:91:89:
                    06:f5:a7:1a:76:38:e3:f4:da:87:2e:d8:0d:07:6f:
                    26:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FF:F6:A1:6E:D9:BF:0C:F3:3E:CF:1C:0F:97:89:A5:97:86:33:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5b5be480-44ed-31ee-80f8-4d078a62e541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.4.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:8d:ac:40:dd:a4:5b:5d:f9:b1:33:c9:e3:35:43:af:6d:d8:
         72:ae:a0:52:08:e4:ad:d3:64:7d:43:da:8e:fa:5b:66:ad:5a:
         fd:39:6b:4e:0d:7f:71:de:c7:a0:c9:ed:1a:9b:d6:41:ee:14:
         73:0f:21:76:67:8b:66:79:f2:d1:5a:24:47:f3:33:30:75:82:
         06:75:c8:82:f2:e9:2c:f6:c7:e4:d4:aa:44:8f:6e:f6:01:1d:
         e6:f0:1d:57:68:d6:13:3c:e7:ab:f1:96:60:fe:4b:be:91:da:
         64:58:4b:59:d5:be:02:c8:27:04:21:21:ae:a4:2f:c2:c6:93:
         9a:e9:c4:16:e9:f9:80:1e:8a:c9:ee:13:17:1c:51:c2:45:f3:
         f4:2d:a3:a9:d6:9c:d7:67:ab:ae:42:20:44:63:58:45:85:d7:
         aa:1c:a2:87:19:13:ff:e1:1a:c8:66:15:5f:b3:a7:b5:04:6a:
         a6:80:4c:dd:d2:0e:b4:24:0b:60:5e:4d:e8:ef:fd:23:01:d4:
         01:68:73:e1:7f:26:3b:2e:ea:44:de:8e:f5:12:b2:f4:42:26:
         6e:75:4d:59:84:ca:7b:b2:4f:16:20:0a:d2:5d:22:28:21:93:
         0e:ff:85:91:77:bc:79:5a:b1:c7:14:a5:2f:57:b9:dd:38:da:
         d5:7d:dc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:51:09 2025 by rpki-client