Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f0449108-b108-3ff4-8756-826568e9802b.roa
File:                     f0449108-b108-3ff4-8756-826568e9802b.roa (raw, json)
Hash identifier:          xWBf7uMzIA42YKtjYPAaSYFKFYe2w7vmpa9Siysvk2I=
Subject key identifier:   EF:A7:DF:E0:57:A3:6D:24:71:BE:A5:D7:1D:4B:C5:E1:75:80:4E:02
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A549B10825E04A1F81C36F580
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f0449108-b108-3ff4-8756-826568e9802b.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     137409
IP address blocks:        172.94.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:10:82:5e:04:a1:f8:1c:36:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=9b1b2a59-010b-4b46-ad39-12e9ad6c96f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:f6:1c:65:5d:56:7f:a7:f6:24:70:b7:11:
                    94:fd:14:92:b1:f8:d4:88:16:d5:3f:e5:36:00:ee:
                    98:b4:16:e2:e2:ec:79:a9:7f:88:16:3d:b3:42:16:
                    44:16:a1:de:82:c9:0a:a5:dc:73:89:86:09:4b:2f:
                    42:19:29:6d:aa:a3:f0:88:ed:a9:c5:17:1a:04:3f:
                    91:2f:67:c2:a0:14:43:19:30:6d:fb:71:eb:af:24:
                    08:c7:77:8e:86:fa:93:fd:98:6e:9a:52:77:81:5a:
                    a6:2a:b6:10:a9:92:5f:24:03:c6:08:a2:58:18:7c:
                    89:50:0a:01:3f:6d:13:b8:f6:6b:13:a5:75:cb:47:
                    d9:c6:60:c9:e0:f9:dd:74:1d:47:54:fa:68:17:b0:
                    a6:a8:e0:18:c7:28:e4:4c:59:d0:be:58:24:36:7f:
                    dc:b3:19:c3:92:e8:0e:12:7d:66:e4:e6:24:77:0f:
                    2c:e4:9a:4d:d2:c0:75:07:73:ea:15:80:09:26:a0:
                    38:5c:e3:49:76:d6:0d:d2:75:18:12:82:6e:14:6b:
                    8d:f2:45:22:bf:f6:75:d5:c5:b2:cd:ed:a9:28:9e:
                    58:5f:e5:35:e0:e1:ad:fd:9d:4f:a5:2d:9e:59:33:
                    ed:93:eb:b4:cf:2e:b0:86:e6:9d:a7:f1:4d:3f:74:
                    c0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A7:DF:E0:57:A3:6D:24:71:BE:A5:D7:1D:4B:C5:E1:75:80:4E:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f0449108-b108-3ff4-8756-826568e9802b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:83:80:b2:24:f4:b2:44:f9:86:c8:b8:31:91:ee:d6:9d:d7:
         3f:da:67:fc:f0:b6:41:fa:1d:db:16:63:c3:c5:7e:50:05:df:
         5b:99:e0:70:dd:fd:02:b8:dc:91:d2:ea:b7:01:aa:b4:0c:32:
         03:b4:f4:0c:ad:85:3a:f3:43:53:98:c8:41:09:93:26:01:88:
         bc:c1:be:5c:4d:04:92:00:2d:29:61:5c:76:31:2e:67:8e:8a:
         04:88:10:f8:2b:8b:79:2e:c7:ff:06:c0:1a:3a:ed:db:7f:9a:
         30:3e:6e:e3:87:ef:c3:9d:de:58:be:a2:f2:2e:c8:c5:a2:df:
         1c:e2:fd:07:de:0e:2e:85:78:e0:93:75:4f:b8:3e:b5:0d:fd:
         c4:81:66:86:2a:62:2c:bf:31:e8:e1:60:76:bf:d5:f4:1f:1a:
         d5:2c:bd:83:ac:9e:47:af:ad:ee:30:5a:09:ae:56:15:cc:fe:
         b6:23:58:6d:13:97:21:d2:59:47:9d:9a:92:72:40:db:09:bc:
         b2:c8:ab:9a:7b:92:62:0a:3f:a8:33:64:3a:de:c9:97:22:13:
         f3:5b:ed:92:da:69:8c:cb:2d:a2:82:17:5a:77:2d:e7:c0:e1:
         45:ee:88:9d:8e:99:11:41:da:43:5c:ef:4e:b5:36:33:94:08:
         02:2b:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:19:27 2025 by rpki-client