Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c8c96fe-b441-3fec-a08a-2a292085a2a6.roa
File:                     5c8c96fe-b441-3fec-a08a-2a292085a2a6.roa (raw, json)
Hash identifier:          tJRWkBmtUcBBsosco8dgOU13GXFPlFLg7zBEt1PnxRQ=
Subject key identifier:   DA:FF:03:EC:49:1B:E0:27:D7:7C:B3:03:A4:46:13:4A:A0:12:6F:9C
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A3B65BAC5F708DEDEA5754BA0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c8c96fe-b441-3fec-a08a-2a292085a2a6.roa
Signing time:             Wed 18 Jun 2025 12:18:26 +0000
ROA not before:           Wed 18 Jun 2025 12:18:26 +0000
ROA not after:            Tue 16 Sep 2025 12:18:26 +0000
asID:                     29802
IP address blocks:        172.94.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:65:ba:c5:f7:08:de:de:a5:75:4b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun 18 12:18:26 2025 GMT
            Not After : Sep 16 12:18:26 2025 GMT
        Subject: CN=34efed18-a139-4671-ae41-c5e168fffc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:94:fc:d3:00:fa:9d:e9:4a:d8:dc:5e:7c:7b:
                    78:cc:7b:9f:b4:d8:61:22:dc:f0:dc:17:63:56:04:
                    aa:c2:73:d7:e9:4d:ef:c6:a2:23:68:0b:b3:0f:63:
                    b0:05:03:ec:73:b6:15:b0:a1:75:62:3a:15:a3:f4:
                    84:c0:e6:70:9e:de:65:08:e7:e1:d8:ab:c1:fa:e3:
                    e7:35:19:21:e2:ed:c1:a4:1f:0d:1c:a8:3a:5d:59:
                    e8:1d:b9:1a:9f:72:b6:5c:f2:fb:52:57:86:63:8d:
                    91:36:b6:47:f7:e4:52:69:12:d0:cb:30:fe:0d:b6:
                    fb:f2:95:53:ae:c4:46:db:bb:1e:e3:2f:d0:8e:94:
                    80:a5:44:c0:6e:49:21:ee:c6:65:28:c6:f0:66:a0:
                    b5:46:49:e9:4d:af:f5:6a:a4:08:a3:b7:b0:f3:83:
                    38:4a:fa:7d:34:13:a7:ff:cb:32:8b:f2:60:fc:25:
                    be:c1:86:e5:5d:b0:e6:9c:d0:41:28:5a:7c:32:dc:
                    40:74:1c:1b:47:89:99:26:65:b3:d5:98:21:8d:99:
                    ed:a8:0f:ad:9c:70:09:f9:d6:ba:c4:25:81:42:7f:
                    b7:78:2a:9a:86:49:cf:35:ff:fc:de:8d:69:03:61:
                    73:57:02:65:fc:04:c2:ec:91:cd:7e:51:37:59:7f:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FF:03:EC:49:1B:E0:27:D7:7C:B3:03:A4:46:13:4A:A0:12:6F:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c8c96fe-b441-3fec-a08a-2a292085a2a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:68:55:61:c6:94:50:5a:d9:45:d4:74:07:bd:dd:4c:27:fb:
         ef:34:02:d0:b6:f1:5c:61:fb:0c:59:f6:1e:30:bc:53:af:f5:
         f5:1b:0a:1c:1f:2c:b8:bc:a1:47:0a:34:2c:15:c0:f8:5b:1d:
         16:31:ca:12:c2:23:85:21:1d:d8:f3:fb:bd:87:3d:d2:af:b5:
         c7:26:72:c1:a9:6c:f2:de:b1:49:09:be:81:9a:73:bf:21:71:
         b8:d5:48:00:a4:19:30:9d:8e:e9:a2:fc:c2:5f:ee:97:da:2e:
         41:25:92:45:b4:4f:92:33:cf:23:1d:3d:cd:2a:c8:d5:de:65:
         23:74:25:0e:f5:ed:e3:12:25:c1:b8:88:78:1a:c1:46:eb:3f:
         ed:76:ae:8f:01:42:dd:d4:40:e0:d2:4c:63:17:36:a5:c8:f5:
         df:19:de:91:36:a9:4b:22:d4:fd:ae:0d:4b:46:fe:c2:88:47:
         cd:4b:39:14:16:63:16:21:4c:70:73:17:35:18:48:ce:80:59:
         76:40:64:3f:d0:e3:ec:62:4e:30:08:8d:c5:cc:d2:2e:35:c5:
         9b:07:5c:12:5b:ba:90:3d:be:39:a3:d3:4b:e9:3f:f9:ad:c4:
         67:d6:02:65:d8:3b:77:a3:6b:5e:58:13:99:26:bc:33:d1:1d:
         67:0e:a9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:05:10 2025 by rpki-client