Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/973766df-850f-388b-aa20-592987be5996.roa
File:                     973766df-850f-388b-aa20-592987be5996.roa (raw, json)
Hash identifier:          ZzjOewW545bREMezAoyClJP4/ss6mgmTfSPWYJkEy+I=
Subject key identifier:   63:F4:16:E9:E2:8C:55:62:B2:59:A8:38:5B:0F:D9:FA:1E:CD:96:FE
Certificate issuer:       /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Certificate serial:       010D0C9F43285849F87A92FEF4BAA82B94720D00
Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/973766df-850f-388b-aa20-592987be5996.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     22135
IP address blocks:        173.242.6.0/24 maxlen: 24
                          173.242.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:92:fe:f4:ba:a8:2b:94:72:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=d1c45199-826b-4dfa-8ef3-174224f68064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fa:dc:68:6c:c9:6c:b5:33:16:7b:95:75:03:
                    cd:50:79:e8:82:24:68:ec:ef:e4:c7:83:4c:0a:75:
                    cf:d2:7f:85:03:be:37:01:86:92:7e:94:8e:8e:15:
                    dd:85:5f:99:bd:6c:6c:40:58:57:e1:5b:de:3c:6f:
                    9d:ff:91:99:7f:03:0a:1b:29:cd:e3:4a:60:52:24:
                    20:a6:9d:4e:fa:7d:09:bf:9f:83:54:78:96:ba:14:
                    0d:b4:65:df:43:c1:35:79:08:98:e3:24:29:f2:08:
                    e8:6c:e2:1b:ef:bd:33:40:9f:57:3a:a2:92:66:bf:
                    80:6c:51:b6:b2:d0:f0:68:ac:ff:62:7b:a7:b3:a0:
                    13:b1:f9:f2:12:41:7f:fa:04:1e:d3:47:be:a9:b7:
                    b7:9a:fb:9f:23:d0:1c:05:b0:a9:94:c3:ca:15:c3:
                    bb:9e:fc:23:9f:1f:a8:76:84:5a:e7:47:30:9b:36:
                    50:be:87:c2:29:21:cc:59:ce:1e:8a:2f:e4:f6:d8:
                    48:98:1d:3a:c5:a5:43:b7:3e:82:62:61:bd:09:22:
                    65:32:7d:de:33:f8:df:59:3a:ae:35:5e:70:48:53:
                    5a:a1:97:71:ea:84:76:00:80:71:fb:ae:1c:e4:21:
                    2a:f1:ed:3d:6d:34:e9:7a:ce:ac:06:ca:7d:46:6d:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F4:16:E9:E2:8C:55:62:B2:59:A8:38:5B:0F:D9:FA:1E:CD:96:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/973766df-850f-388b-aa20-592987be5996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl

            X509v3 Authority Key Identifier:
                keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b3:3d:07:25:43:4d:92:a1:cc:a1:9c:49:2e:ea:26:70:46:
         3b:6c:08:27:bc:42:55:b1:6a:4f:25:3f:c2:87:61:55:c1:23:
         d9:ed:22:98:fc:be:a8:10:b6:13:92:c9:2a:b7:30:b4:73:e5:
         18:b6:c2:61:6c:c8:64:b8:6c:cd:b7:0b:42:04:8d:34:4e:d4:
         a3:2e:12:8e:1d:48:5e:8c:05:36:46:96:19:7f:e2:29:01:8b:
         c9:0e:88:3a:ec:42:33:f9:89:fe:fa:db:d0:f3:35:24:49:c2:
         12:31:df:a7:41:e0:03:c8:99:f5:bb:ca:ce:55:d4:1a:8d:6d:
         1d:65:4e:45:c1:76:82:73:3b:b7:b1:31:36:56:75:cf:c0:40:
         2c:7a:22:ff:0b:0d:a7:7c:67:fe:30:02:00:0e:8e:aa:5c:33:
         ba:e6:25:99:40:55:87:ec:27:36:e4:67:95:48:0f:19:e6:66:
         9f:3d:5e:52:6f:e9:33:60:93:2c:da:37:f6:11:26:44:aa:d8:
         14:44:d3:66:da:72:f8:7e:a4:13:d7:e6:98:8a:c1:c2:ed:42:
         d2:30:5e:41:48:8e:c9:52:dc:46:76:70:1c:d8:db:10:82:7e:
         90:f4:31:49:61:2d:d9:03:ab:b5:a8:a3:ab:a9:56:c1:3d:0e:
         0c:da:53:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:57:35 2025 by rpki-client