Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/76988ed8-0896-3fce-b0d6-0f4b3b091909.roa
File:                     76988ed8-0896-3fce-b0d6-0f4b3b091909.roa (raw, json)
Hash identifier:          E27Dbl0ul8kbK9MZWR1RfKdKa6QXeqsmp3YiV7aP0+w=
Subject key identifier:   62:64:94:06:1A:11:FF:D4:2D:FB:1E:86:0A:CD:A1:80:FA:4A:70:8A
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584A3FAADA4DCD252934C0090840
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/76988ed8-0896-3fce-b0d6-0f4b3b091909.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     212238
IP address blocks:        173.244.58.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:da:4d:cd:25:29:34:c0:09:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=ddcff2b6-3aba-46a4-af45-cc397302639a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:1f:04:be:87:eb:de:27:11:e8:2b:82:9c:
                    85:3e:3b:d1:f5:21:56:f5:45:fb:ce:6c:f5:59:ae:
                    8e:7a:4e:1f:39:d9:16:53:26:f9:df:b4:f9:b4:42:
                    33:c6:4b:19:f4:de:a4:a0:8c:a3:44:84:4f:2f:7c:
                    cc:29:75:62:87:59:68:01:ed:97:27:c8:f2:c7:dc:
                    1c:ef:32:c3:30:6a:56:ad:44:b8:b5:67:e7:f3:1f:
                    c0:f6:14:89:53:14:73:e3:dc:67:4c:0c:73:4a:73:
                    b8:05:8f:61:5a:c8:f6:d5:52:aa:e6:9a:ca:e0:43:
                    6c:e5:45:c9:db:02:bf:5f:c1:20:9c:85:2e:2b:10:
                    3e:60:de:a4:23:7c:8f:5d:ac:90:f8:71:95:a0:31:
                    e4:1f:00:89:44:9d:86:fc:12:76:8a:1a:23:b6:25:
                    5f:07:2f:0e:94:35:af:63:bb:eb:29:39:66:ab:aa:
                    6c:99:50:b3:b5:a3:66:86:f3:07:4b:c8:f0:7f:75:
                    40:dd:af:ef:99:b0:c1:bb:e4:08:f8:58:8d:b2:ab:
                    23:50:ea:62:76:09:18:fb:90:5a:e0:96:6a:c0:ec:
                    55:c5:74:b1:6e:2c:8e:50:b6:2e:1d:79:f6:e0:9f:
                    30:96:0c:2e:66:79:a0:f1:4d:be:a0:8c:48:ff:1d:
                    5a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:64:94:06:1A:11:FF:D4:2D:FB:1E:86:0A:CD:A1:80:FA:4A:70:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/76988ed8-0896-3fce-b0d6-0f4b3b091909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.58.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:b0:30:02:09:50:9a:2c:bf:d3:68:ec:d5:eb:15:b2:f6:77:
         d9:f1:39:e1:09:d4:d5:78:aa:f7:57:d3:95:de:e9:c2:aa:56:
         5e:38:4e:96:02:66:56:9b:bf:13:66:c8:d1:9e:ad:3d:1a:29:
         02:3d:ca:04:b4:6c:0b:65:11:7f:eb:f7:f6:c6:4d:8e:93:25:
         34:02:af:8c:df:f0:4e:04:99:26:9c:8e:f0:fb:eb:2e:4f:9a:
         08:51:3e:ee:4e:39:0d:1a:e4:48:14:1c:12:f6:22:bb:b5:bc:
         6c:6b:6b:f8:ce:5f:f1:2f:26:92:74:e9:5f:32:bd:85:06:4c:
         10:53:6c:2a:ee:91:62:1f:77:ba:36:71:6e:00:3d:b9:67:c0:
         ae:48:8d:c7:3a:e5:97:e8:f8:ab:a8:74:4e:6f:0d:c6:b1:74:
         99:2a:0c:8c:25:ae:d2:bb:ac:63:c9:53:d3:aa:c6:3d:6d:8d:
         88:6b:c1:86:52:d0:5c:ef:d7:ea:29:aa:27:fd:0a:0d:d0:1a:
         96:42:0c:4e:c8:4a:d3:dd:c4:32:3a:96:28:c4:b5:fc:19:40:
         da:f7:2d:33:1f:5f:e3:a8:34:b8:db:8e:c1:60:e2:b4:a5:75:
         cf:1b:a8:eb:b2:27:e0:4f:cf:61:39:9c:71:24:b1:ce:a0:9e:
         2a:82:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:17:38 2025 by rpki-client