Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/081065cb-7abc-3887-9c88-4159a2a8d7c6.roa
File:                     081065cb-7abc-3887-9c88-4159a2a8d7c6.roa (raw, json)
Hash identifier:          KKfwsca31DJ7ZUwTz9N0nnsP+ponUy2DZ9pgJbGKo2M=
Subject key identifier:   27:89:BD:0C:FF:47:27:DB:44:86:BA:D2:6F:40:14:B9:AF:D9:59:34
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F43285849C0A4DE6A2D303B9BCE4FDB00
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/081065cb-7abc-3887-9c88-4159a2a8d7c6.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     1403
IP address blocks:        173.246.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:de:6a:2d:30:3b:9b:ce:4f:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=8143fe01-5221-49be-8242-00918c7240fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:58:62:2d:4f:01:98:70:05:aa:3a:3c:9f:6b:
                    bb:5f:65:57:18:c3:ba:c0:af:e1:1f:72:61:fa:aa:
                    f3:30:d5:e0:74:98:a1:ab:d1:04:e5:19:6c:16:34:
                    62:55:51:03:da:d5:23:60:7a:5d:5a:33:8c:fe:e1:
                    2a:d5:c4:c1:54:d9:60:47:97:36:a8:c5:c6:28:7d:
                    e2:37:b6:23:4b:f3:51:d3:35:50:d9:2b:fa:9a:4c:
                    b4:c8:97:4d:d3:a1:09:d9:31:26:11:6e:24:58:44:
                    86:24:2c:db:05:8d:ab:e0:5d:4f:2d:cf:a8:77:a7:
                    ce:f6:77:8f:76:20:c1:00:37:1b:63:4a:0d:91:73:
                    63:3a:85:34:7e:5d:42:37:15:61:42:23:ab:9c:01:
                    cc:80:c7:57:9a:29:64:dd:f8:ea:2c:ff:13:6e:7e:
                    81:8c:23:e3:d6:50:ca:88:66:85:79:8c:8e:6e:ce:
                    0f:bd:74:26:ee:d5:40:16:bf:ad:1b:fa:53:1f:cc:
                    d6:13:be:f6:ba:75:a7:2a:fd:65:ce:a1:d2:b4:f2:
                    38:e7:8b:b8:6a:55:fb:f2:f8:73:b5:df:a5:ac:e4:
                    d2:e5:d5:1d:8c:43:4e:16:15:96:f8:93:a7:ad:0d:
                    c5:9d:42:d1:9f:50:bb:56:0b:16:53:62:a4:d2:47:
                    28:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:89:BD:0C:FF:47:27:DB:44:86:BA:D2:6F:40:14:B9:AF:D9:59:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/081065cb-7abc-3887-9c88-4159a2a8d7c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.246.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:9d:8c:f7:6c:5e:d2:e5:f9:d2:a6:dd:85:48:6c:cc:34:8e:
         f2:19:69:1b:56:94:93:e6:02:34:77:bb:18:df:d9:f1:be:5a:
         b4:d5:5b:94:c9:09:56:ad:28:20:e6:ec:82:1b:4d:11:8d:35:
         e3:a7:df:4c:37:b8:7f:67:c5:45:5b:0e:61:50:ed:fe:8b:5a:
         c1:51:22:b8:ad:9c:4e:4c:f3:8b:23:d9:f0:be:c7:b6:2d:76:
         bc:87:41:0b:64:59:28:45:79:c2:18:96:08:9b:51:6b:26:31:
         8f:3d:17:1e:37:fa:b2:aa:cd:95:f9:e3:f7:65:2c:27:5c:b7:
         b0:b5:c3:8f:67:de:35:b5:de:bd:7f:8e:9d:12:52:59:f8:2e:
         b8:66:08:09:24:47:07:1e:5a:93:7b:98:05:ce:b5:fb:ba:05:
         90:a0:8d:46:fb:fd:e8:5e:46:e1:41:8b:02:72:05:aa:26:80:
         40:d0:d7:a7:23:94:d8:c5:9d:75:b0:7e:28:57:b5:11:f1:7e:
         a5:9f:37:24:28:51:59:e6:b6:a7:66:6e:40:f9:3d:ea:bc:8c:
         19:34:4c:ad:28:ec:d4:75:23:21:47:56:c8:ea:d3:5a:eb:50:
         e3:de:56:8b:48:94:00:cc:e5:d8:ed:3f:73:0d:dc:17:9b:5d:
         7e:04:47:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:42:49 2025 by rpki-client