Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/bfb2273f-712e-3f5f-b862-366e898e589d.roa
File:                     bfb2273f-712e-3f5f-b862-366e898e589d.roa (raw, json)
Hash identifier:          ZO2KAIRDS/OlugIrF9sW6h4qP6huKL9pD22g41865NE=
Subject key identifier:   51:9F:C8:B1:DE:B4:FE:0E:39:B4:92:22:75:3F:30:D0:98:50:29:5E
Certificate issuer:       /CN=798448e2-55be-4c24-8014-28c2c70dfc84
Certificate serial:       010D0C9F4328584A268ABC99D7488A8D4A3D2CE4
Authority key identifier: C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/bfb2273f-712e-3f5f-b862-366e898e589d.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     36601
IP address blocks:        172.83.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:bc:99:d7:48:8a:8d:4a:3d:2c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798448e2-55be-4c24-8014-28c2c70dfc84
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=bbef7731-c5bb-4639-861c-09beaf29f6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:05:e5:39:14:a7:8f:5a:9e:c7:f2:c5:69:82:
                    22:d6:ff:59:22:62:d5:54:d2:24:42:d8:a7:29:24:
                    59:c1:8e:84:46:e2:1f:62:f3:58:0f:43:6b:7c:c0:
                    bb:6e:09:75:91:a6:a1:f3:a8:08:35:a4:a7:d1:3b:
                    a4:74:7e:96:f8:b0:aa:ee:cc:4f:42:27:b1:f6:02:
                    c3:54:21:ad:f8:9e:c8:05:57:6b:fe:0b:1c:08:8f:
                    05:dd:db:1f:07:1f:b3:f1:76:ca:70:1e:fe:f1:01:
                    d8:56:6c:76:f6:56:25:6f:af:a6:13:4d:3b:e7:39:
                    15:63:c1:97:90:a8:2a:2e:ad:42:ea:d8:95:df:32:
                    85:4a:e9:8a:c5:c3:47:77:8f:7f:a9:0a:17:05:2c:
                    14:c4:9e:03:51:3e:79:b9:a5:78:8c:61:a8:12:31:
                    0e:c5:ad:61:6f:51:ed:c0:32:23:f0:96:4c:fe:4a:
                    7b:07:9d:fd:99:9b:6d:3a:77:99:7b:6e:a9:c7:ec:
                    72:f9:8a:8c:7f:28:ec:5d:e0:a0:e7:5c:7d:98:3c:
                    4f:db:cc:63:a9:aa:bf:36:78:fb:b5:1d:5b:5f:8b:
                    20:a4:58:e9:69:0e:ac:0f:62:07:44:82:f8:d3:99:
                    bc:f8:c0:80:54:1c:3e:da:11:dd:ed:ce:4c:ef:da:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9F:C8:B1:DE:B4:FE:0E:39:B4:92:22:75:3F:30:D0:98:50:29:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/bfb2273f-712e-3f5f-b862-366e898e589d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl

            X509v3 Authority Key Identifier:
                keyid:C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:09:47:71:84:56:8b:9e:92:53:28:64:92:8c:8a:5f:81:93:
         b6:7c:0c:5c:7b:bf:36:ec:50:30:4f:c6:15:b2:fa:70:ef:56:
         ec:55:7c:d3:eb:8a:8b:f5:7f:cb:7c:e9:c7:e0:59:46:d2:0c:
         fd:d6:22:c3:2c:50:6b:92:02:1e:c3:b3:fd:27:02:1c:67:20:
         d1:9e:a9:7e:dc:f5:b5:55:bb:d1:c0:e3:3b:16:7e:8c:19:43:
         ab:1b:ca:75:4a:f5:0d:a2:c1:ec:c4:70:d7:34:f0:ce:a4:e6:
         ea:d4:ee:f8:87:bf:6d:54:7a:a0:03:05:18:ea:a4:02:00:ce:
         94:ba:dc:f5:d6:38:bd:17:96:05:00:ba:d3:85:a3:7f:d9:ad:
         23:19:4b:c2:be:39:c1:72:eb:e7:62:a5:47:69:6a:cd:fe:65:
         60:3b:cc:68:01:e8:39:ea:52:e4:d5:85:d2:0f:6e:3f:8a:13:
         6b:03:f0:a7:cf:c8:75:8e:4a:47:7c:ab:0a:86:66:c4:f3:05:
         d2:57:b8:95:11:d3:6f:5e:5c:69:00:21:5a:ae:71:86:c5:12:
         bb:82:25:ea:6a:75:57:07:23:16:47:dd:14:ca:2d:9d:4b:c0:
         03:7e:19:4c:b4:c8:4b:b0:59:35:5c:7b:98:67:37:36:c2:55:
         d2:a6:1f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:53:31 2025 by rpki-client