Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/21fe608a-ae5f-39be-8b66-294edcecdb73.roa
File:                     21fe608a-ae5f-39be-8b66-294edcecdb73.roa (raw, json)
Hash identifier:          8g0cKhVimBDUmGjMbXpnI3Kz2IK/xmFeRklXdRMcltA=
Subject key identifier:   2A:E6:37:8B:1E:01:0F:2A:1E:0F:6F:11:7F:76:55:7B:38:27:F2:2E
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285849B2AF6482203393B05106B240
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/21fe608a-ae5f-39be-8b66-294edcecdb73.roa
Signing time:             Wed 30 Apr 2025 13:01:02 +0000
ROA not before:           Wed 30 Apr 2025 13:01:02 +0000
ROA not after:            Tue 29 Jul 2025 13:01:02 +0000
asID:                     53356
IP address blocks:        172.94.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b2:af:64:82:20:33:93:b0:51:06:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 30 13:01:02 2025 GMT
            Not After : Jul 29 13:01:02 2025 GMT
        Subject: CN=c8f4a11e-cb93-4a92-8cc0-e51476853793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:cb:fb:8c:25:1b:cf:51:fe:4c:a0:6a:c0:
                    60:61:38:06:84:3b:5a:e1:76:5c:ec:5a:3e:69:e4:
                    43:4a:3e:b7:cd:2b:ae:47:79:f1:09:ee:b0:08:74:
                    ec:1f:83:fb:fb:db:f3:9e:eb:ad:81:0e:51:92:f1:
                    07:09:25:7f:85:5b:38:ff:e3:82:4a:2c:e0:6d:be:
                    6d:d2:8e:b5:53:8a:70:4f:be:06:42:29:a5:2b:a0:
                    21:c2:72:77:07:81:57:a3:71:76:fc:89:0f:b3:ff:
                    e1:d3:43:24:e0:19:a7:d6:1e:72:25:3d:5f:67:d8:
                    55:d3:a4:93:21:5f:48:a9:f6:72:ef:5c:0d:d6:31:
                    61:0d:76:36:03:dc:d9:88:e0:7d:79:6c:58:6e:e8:
                    9d:ce:d5:b8:63:29:5a:3e:da:2e:0d:0e:b0:5a:0a:
                    a0:41:bf:89:bd:8a:f4:3b:88:7b:13:9d:1b:dc:b6:
                    1f:c6:a0:d2:e7:da:16:7e:a6:33:73:47:de:19:ee:
                    69:a8:b0:15:d8:8f:78:aa:a9:7d:b6:5c:69:fe:fb:
                    f2:7b:ca:35:48:e1:9b:ec:76:b2:3a:18:59:71:d1:
                    2e:e0:97:9f:81:18:02:52:fd:17:1d:15:8d:67:54:
                    50:05:27:1c:76:0c:c3:7d:d5:df:6d:ed:18:80:df:
                    70:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E6:37:8B:1E:01:0F:2A:1E:0F:6F:11:7F:76:55:7B:38:27:F2:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/21fe608a-ae5f-39be-8b66-294edcecdb73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:52:b6:31:88:10:f3:1d:ba:eb:c0:79:a5:83:f6:18:17:00:
         fa:e0:b9:b8:1c:f9:6f:a2:2a:d7:6f:4c:e2:cc:1a:66:08:a8:
         d8:1a:c6:0b:02:0d:0d:c3:de:a5:30:ee:07:4a:88:80:36:b8:
         07:a0:d1:bb:54:37:9d:f1:9c:b2:7a:36:36:bf:0a:62:ec:56:
         d6:be:37:7b:e1:0b:54:fe:75:67:c2:a1:40:bf:04:61:14:07:
         ac:28:ee:b0:67:90:e0:d6:c5:5b:cc:0d:12:7d:85:9a:ad:84:
         0e:6e:24:c8:26:0e:21:b4:43:2b:aa:c3:19:c3:e6:ca:e1:a8:
         e9:16:90:da:19:9f:5e:f8:cc:ef:c7:f3:cb:6f:03:ac:00:13:
         e2:19:a2:49:a1:22:06:84:60:57:d5:9e:53:8d:29:64:26:7a:
         80:d2:88:03:46:c7:e5:e2:14:9f:dd:78:14:2c:2e:b9:58:c3:
         2e:fa:22:f6:a6:59:ec:bd:d6:d8:c9:41:c9:b4:21:25:07:bd:
         9d:aa:ca:56:f5:b3:80:13:1a:49:a1:91:3b:9d:8e:b9:36:3b:
         76:fc:4d:3e:bb:57:9d:44:92:eb:8b:9d:87:28:ec:db:50:93:
         04:4f:c4:c8:27:fc:60:c6:7b:05:ba:a5:0d:f8:a1:00:a6:6d:
         92:44:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:48:54 2025 by rpki-client