Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/273bdc60-a280-3ed6-9ffe-1b5aa16fef68.roa
File:                     273bdc60-a280-3ed6-9ffe-1b5aa16fef68.roa (raw, json)
Hash identifier:          nEFgrIXfjQ3Kvw6VGBtpXlPFiGc81SPOAI0PYH6OSr8=
Subject key identifier:   85:15:99:59:B3:0A:39:DD:13:19:73:30:AF:47:98:2C:CA:B8:F5:35
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584A3FAADA61E4DF966868405480
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/273bdc60-a280-3ed6-9ffe-1b5aa16fef68.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     212238
IP address blocks:        173.244.58.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:da:61:e4:df:96:68:68:40:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=79442313-53f5-4343-b464-de44aa8bb8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3f:ac:2c:18:20:49:7e:b3:55:36:f1:10:f7:
                    7f:c4:79:af:5a:14:cf:9b:9f:47:18:e1:c2:27:7f:
                    da:94:b2:91:e3:00:e1:da:94:6f:3f:15:e0:39:ff:
                    0e:ea:87:0d:d7:10:61:85:57:1a:f3:14:3c:1f:17:
                    9c:85:23:a8:49:d6:1d:68:e3:8d:df:dd:47:2b:25:
                    91:2e:e9:96:18:68:a4:c9:79:78:f9:7a:03:2b:63:
                    fe:45:aa:5f:b7:8c:bd:87:da:22:2d:43:8c:67:1f:
                    f2:f9:9a:92:4a:f2:f5:82:3d:b0:ea:3a:08:b5:c9:
                    2e:1c:c7:0b:cb:d7:90:b0:7e:21:79:03:00:8f:7e:
                    73:c8:f1:53:4a:e5:d8:e6:db:33:d2:33:0d:fa:c7:
                    d5:88:d1:df:9b:76:ed:89:4b:f8:54:9a:e6:0c:7c:
                    3c:e9:62:a9:ab:29:7f:e8:7e:dd:89:4f:fe:db:62:
                    e3:ab:02:23:38:e5:55:21:b0:af:1f:be:bd:77:33:
                    bf:25:b9:3f:55:70:e9:eb:6d:48:81:48:23:a7:96:
                    3e:5e:1a:4d:7c:2e:62:b4:ed:54:31:de:f6:06:2f:
                    7b:50:a8:27:31:1e:bb:fa:7e:ee:eb:59:da:12:a9:
                    c3:3e:17:8f:30:d4:2e:6a:f3:8f:f2:a9:e2:6e:1b:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:15:99:59:B3:0A:39:DD:13:19:73:30:AF:47:98:2C:CA:B8:F5:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/273bdc60-a280-3ed6-9ffe-1b5aa16fef68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.58.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:bd:75:11:b9:5b:25:33:76:30:35:85:ba:8e:35:df:e4:71:
         c3:c1:0a:ca:b0:6f:94:3e:0e:fa:02:5a:06:fe:78:1b:e1:06:
         85:90:8f:d6:7f:f0:00:36:b2:28:b4:42:db:32:51:45:b6:cb:
         c6:18:d7:36:4d:db:f0:9f:b1:9f:3d:1f:c0:b7:85:a3:ca:66:
         e2:68:da:f4:e4:ca:ae:e5:94:ec:87:9a:78:86:72:c1:e4:fd:
         1e:b9:4e:7f:c0:d5:ff:37:02:f2:62:fb:2e:35:0c:ca:58:f7:
         9b:72:41:23:5f:15:03:28:9d:e9:3c:c0:d9:56:c8:79:8c:dc:
         55:ec:f4:df:30:84:ed:61:90:9c:fa:71:1b:6f:5a:d7:9c:94:
         95:c8:f6:3f:c4:32:c3:b7:f0:87:56:ff:9f:4c:d8:fb:ef:2e:
         09:18:60:78:21:d5:ad:5d:5d:4b:20:e1:d1:cc:02:86:e6:b9:
         1e:71:a3:f3:77:1e:37:cc:c6:19:d9:7f:24:31:df:c0:84:37:
         d9:54:79:59:35:df:7b:73:23:65:1e:70:24:d5:55:46:0f:5e:
         cb:3a:2d:e6:80:4c:0a:e8:a4:71:8d:fc:28:9e:2e:0d:09:a7:
         5b:7e:96:3f:3a:b9:b1:9d:17:2d:3f:43:bf:69:ff:26:30:ab:
         cf:c4:40:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:08:50 2025 by rpki-client