Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1727f647-99fb-3b37-a9d4-671cb5ae75cb.roa
File:                     1727f647-99fb-3b37-a9d4-671cb5ae75cb.roa (raw, json)
Hash identifier:          rGjPcrGkDxaZIbOxfPYe6IaOu0s37Xftr5Hm0Jegfnc=
Subject key identifier:   9B:B4:9B:2B:B3:F2:86:EC:BD:27:72:56:91:C5:51:10:25:3E:5B:4C
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285849C904EDCFF2FD1BA4162EE980
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1727f647-99fb-3b37-a9d4-671cb5ae75cb.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     5511
IP address blocks:        172.102.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:ed:cf:f2:fd:1b:a4:16:2e:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=3070c680-90a5-4cb3-964e-25bb4c563725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:1a:f4:aa:61:f5:55:8f:8d:66:8b:fd:c4:
                    ae:4b:a6:7d:c8:df:2c:13:15:57:47:06:3b:21:ed:
                    6a:4a:4b:8b:61:87:e7:c0:71:e8:1a:d2:d5:14:fd:
                    c0:a8:b5:93:68:0c:cf:ba:0a:03:42:fc:b3:2e:f5:
                    c5:6a:ec:40:3e:d0:8d:32:5b:37:2d:a7:2f:5c:7c:
                    52:23:5c:55:5e:8f:35:60:fc:ae:41:ad:b5:ee:b5:
                    12:9f:29:42:b4:73:16:56:23:ce:3e:95:8b:85:a2:
                    46:15:09:79:fe:e4:32:c7:d6:57:e8:e4:34:5c:fe:
                    30:d6:44:3e:7e:16:b9:67:5f:41:8c:0b:c6:56:e8:
                    0f:94:f2:03:7f:ab:00:50:7d:46:e7:a6:11:78:14:
                    6a:df:ba:d0:63:7c:f0:f7:d9:10:24:1d:d6:67:6e:
                    01:7a:b0:b5:7f:c4:3a:3a:8f:5f:c0:e2:28:54:58:
                    61:4d:91:bd:fa:a6:6c:91:ef:f1:3d:30:48:0d:c3:
                    c4:2d:2b:b1:c3:35:65:86:10:13:a8:95:1b:a0:66:
                    55:b6:c9:66:e9:1c:82:60:2d:10:0d:d0:dc:ec:71:
                    5d:07:1c:d1:ab:3a:c4:14:24:42:01:00:a0:03:17:
                    69:a5:bb:46:82:65:35:20:1a:10:66:f5:3a:91:09:
                    da:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B4:9B:2B:B3:F2:86:EC:BD:27:72:56:91:C5:51:10:25:3E:5B:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1727f647-99fb-3b37-a9d4-671cb5ae75cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:45:64:b3:00:4e:a4:a6:ee:4b:f8:a8:33:3b:83:95:9f:47:
         b2:f1:a7:f4:c1:b8:7a:34:6c:63:cb:51:01:41:70:e1:3d:90:
         c7:6d:de:54:df:c1:d4:91:63:12:60:26:cc:a9:cc:bf:b5:b0:
         c9:00:c3:d9:cc:2f:8d:5c:04:eb:e6:f1:8b:3d:47:52:2d:9f:
         67:48:a0:26:54:27:37:d5:3a:65:19:04:00:4b:c6:1e:e6:f7:
         5c:8f:12:c8:22:99:5f:4b:fc:d5:d6:ce:61:56:22:55:a9:5e:
         f1:fb:45:53:be:c2:c9:39:54:39:49:2d:5a:25:e0:79:91:13:
         f3:32:3f:9f:4f:7b:cb:1b:a4:33:8d:ac:75:f2:42:0c:95:fb:
         f0:ed:14:ba:79:fd:a7:f6:8b:32:f9:ad:12:bf:0e:7f:32:86:
         d4:93:03:19:f4:9d:52:dc:1a:2e:52:51:cb:d9:8d:53:3c:5e:
         d3:cb:7a:f9:f2:9d:1f:77:4f:20:d9:12:09:19:85:4c:28:71:
         c6:3d:b0:05:b5:21:bf:4a:74:76:36:38:24:ce:94:be:b4:80:
         0f:68:43:aa:26:60:9c:bc:c7:5a:1c:a8:e5:98:cb:2c:91:96:
         e8:54:d1:ab:cc:96:40:cd:95:18:f9:0c:16:16:1f:95:ba:07:
         74:86:12:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:17:40 2025 by rpki-client