Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/e1d1fff1-9b27-33f2-b1dd-138e62de358e.roa
File:                     e1d1fff1-9b27-33f2-b1dd-138e62de358e.roa (raw, json)
Hash identifier:          v25hf7dk6EsFo+7ehoLbFxmKJ1ncleUodorCqMZaCLc=
Subject key identifier:   24:BB:32:B2:6A:8C:F2:54:B2:AD:50:73:0D:31:76:E6:D4:70:73:C6
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584A43DB0184883EC1808647E700
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/e1d1fff1-9b27-33f2-b1dd-138e62de358e.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     931
IP address blocks:        161.129.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:01:84:88:3e:c1:80:86:47:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=7e256d44-e71b-4683-8ec7-7c4f51f35c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:e9:e0:f5:c0:f3:76:35:b6:43:b1:7c:93:
                    cd:86:7d:d3:2e:b4:57:c1:32:ef:db:06:7c:02:c3:
                    fd:3c:b9:0a:6d:28:f3:ca:ac:70:6a:f5:6c:10:84:
                    7c:6f:f2:10:08:7e:91:23:8f:19:87:d6:00:60:b6:
                    21:1b:5d:81:7d:fc:b8:e5:53:f9:3b:04:51:8f:8a:
                    00:5f:df:a3:e8:85:16:ee:d9:4a:63:96:bd:1f:83:
                    d3:99:2c:ba:9e:8c:21:21:9d:21:73:44:51:1f:08:
                    2f:99:3c:1a:5d:93:81:f6:ab:2f:8e:43:38:6f:82:
                    d0:62:26:ac:a7:bc:66:9b:b5:27:10:44:1e:3a:af:
                    cb:55:f6:d2:00:99:ca:b0:fe:de:92:98:74:86:af:
                    46:22:9a:15:5d:85:90:e3:b0:a2:e6:a3:35:ba:4e:
                    15:2b:1c:a6:e4:89:1a:41:f5:66:2b:95:e2:f4:33:
                    ca:d3:77:09:f4:59:8c:20:71:76:85:22:04:72:dc:
                    40:ac:af:14:a2:59:03:7b:cf:cc:53:b5:ea:7a:27:
                    50:98:5a:85:73:03:e3:91:ad:35:14:18:51:c9:42:
                    fe:7c:dd:de:cf:7a:c5:36:0d:ee:f8:cf:c4:7d:c6:
                    27:0c:2e:f0:8f:a5:72:2c:d1:fb:59:e2:bc:b6:de:
                    f1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BB:32:B2:6A:8C:F2:54:B2:AD:50:73:0D:31:76:E6:D4:70:73:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/e1d1fff1-9b27-33f2-b1dd-138e62de358e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:bb:cc:bc:68:e7:a5:71:63:54:01:a1:d6:41:78:ce:2f:5e:
         14:4d:80:cf:55:54:d5:21:94:3b:6d:47:18:7c:5c:ed:dc:f9:
         54:2c:8d:b5:8d:ab:63:22:e8:8d:5f:a8:be:e0:5f:ef:75:14:
         96:21:f3:f4:c5:68:86:db:d4:1e:8d:31:72:53:53:67:d9:a8:
         95:fd:12:f0:67:a3:5b:c9:04:83:92:b0:05:65:b0:17:bd:81:
         43:10:ad:54:c4:b6:9a:93:82:01:3a:f7:30:f4:bb:1f:77:cd:
         8c:c4:db:96:86:1f:19:32:14:d4:98:95:01:dc:51:ce:41:8f:
         be:e8:f7:93:81:ff:86:e7:1e:84:40:59:57:50:7a:f9:87:cc:
         7a:91:42:88:d8:12:fa:41:08:a0:b7:15:29:c4:e4:bf:ea:a3:
         27:b1:0c:7e:7a:ac:8b:7b:e8:38:42:17:82:26:3e:00:03:dc:
         14:2c:c1:9b:ba:f5:e7:98:a6:6c:d9:40:5b:b6:c3:d3:17:20:
         89:74:7d:b0:be:fa:35:e0:4c:62:57:0a:9e:2f:b5:fa:36:5f:
         ce:f5:a4:35:9e:e7:62:50:5c:9b:2a:c7:24:fe:bb:13:4d:5c:
         bf:ea:ae:53:2f:d3:9a:43:9b:23:3b:8a:b3:3e:7f:30:ec:04:
         9f:ad:58:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:39:06 2025 by rpki-client