Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/78f13497-5a5f-395b-a5db-7c66cb569eab.roa
File:                     78f13497-5a5f-395b-a5db-7c66cb569eab.roa (raw, json)
Hash identifier:          s1vJ8C4/fgm1mLm+fUiXWxwdzp+vG0x8+dzTRRK8484=
Subject key identifier:   5F:FE:33:FF:4F:C2:19:5E:DD:49:E6:9D:BA:A3:69:F1:07:68:78:AF
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F43285849B89F793676061D1779FB8640
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/78f13497-5a5f-395b-a5db-7c66cb569eab.roa
Signing time:             Fri 02 May 2025 16:03:53 +0000
ROA not before:           Fri 02 May 2025 16:03:53 +0000
ROA not after:            Thu 31 Jul 2025 16:03:53 +0000
asID:                     125
IP address blocks:        199.64.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b8:9f:79:36:76:06:1d:17:79:fb:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: May  2 16:03:53 2025 GMT
            Not After : Jul 31 16:03:53 2025 GMT
        Subject: CN=ab7a627c-3255-4b2f-9696-7281a154f90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7d:d9:76:d6:c1:22:21:ff:1a:dc:b1:6e:6f:
                    5b:52:3b:33:14:63:a6:0a:21:1e:64:0d:11:bd:f4:
                    2f:f6:59:53:55:81:86:97:c3:36:71:5a:38:25:3d:
                    32:6d:2a:64:4f:b0:1d:fb:1f:12:fa:6d:27:20:1d:
                    40:55:5e:ff:d7:c4:b5:27:d9:77:9c:d1:30:69:00:
                    c0:8b:c7:e7:1c:69:b1:91:0f:dc:a6:c3:b2:8e:53:
                    7f:3f:df:7e:b8:e6:f7:65:54:8d:e6:6e:3b:e1:09:
                    1a:6e:06:b2:16:43:14:92:e4:fa:28:e6:57:f8:19:
                    de:b5:83:32:03:ed:00:b6:1d:b1:dc:b4:f2:c9:94:
                    8a:e7:6e:76:e1:87:6a:81:22:9d:82:23:b0:6d:59:
                    a6:db:e9:43:4b:58:41:a9:56:01:b1:c6:c6:5b:c2:
                    bd:47:04:88:3e:a7:82:35:1b:1d:02:98:79:ae:d1:
                    1d:ad:71:61:2a:e6:d8:54:2e:0e:cc:05:90:61:ee:
                    50:0a:f6:21:cb:89:70:5a:cc:b2:89:33:37:29:80:
                    7d:e5:37:8d:f1:fb:35:7f:58:a1:dd:f3:a9:6f:2c:
                    e7:0e:09:76:ec:9d:df:1f:8b:a3:9d:a4:3b:7b:fc:
                    da:2a:6f:80:21:46:ad:43:c7:70:08:2f:b7:56:0e:
                    39:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FE:33:FF:4F:C2:19:5E:DD:49:E6:9D:BA:A3:69:F1:07:68:78:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/78f13497-5a5f-395b-a5db-7c66cb569eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:b6:bb:3f:78:a8:f6:35:89:7f:7a:cc:b2:11:0a:0b:18:
         2a:67:57:0b:bc:71:f6:90:11:04:7a:54:43:49:be:09:3b:1b:
         7f:f9:b0:87:b2:85:99:dd:2d:72:b1:70:5b:2d:ec:5f:77:0c:
         8b:90:32:fa:00:a0:bf:11:cc:2b:dd:94:d3:7a:8b:e0:6a:2e:
         67:9f:e0:bc:4a:ef:3d:af:fd:0d:8f:d4:07:8a:d0:df:65:9e:
         65:2f:9a:9a:18:e4:35:9d:d4:7e:1f:83:84:4f:e4:12:56:23:
         aa:fb:17:b5:de:84:e9:f5:61:af:32:d1:eb:57:8a:a2:19:11:
         4c:0f:65:ae:e5:10:02:dd:e2:23:32:a8:d6:de:81:2e:67:ab:
         96:ff:5a:cd:60:b5:56:a1:3e:cc:b8:45:3f:1e:a7:d5:ed:40:
         78:95:f8:55:02:25:e5:f0:ad:b2:7b:1a:cf:9e:c1:cf:fa:05:
         e2:de:30:d9:b0:19:80:81:a2:ff:28:52:38:4f:4b:a8:59:e2:
         98:1c:b2:76:c8:a6:44:e2:66:74:56:8b:23:7d:9c:f1:8e:7f:
         24:ad:4e:b9:8e:f8:96:b4:c9:67:9f:c1:e4:01:99:0b:b2:a7:
         21:07:52:25:50:bc:d1:fa:27:b6:46:f2:a5:0d:bd:26:f1:8b:
         ac:1c:cf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:47:29 2025 by rpki-client