Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb/f1e71ff0-cdd3-311c-9e81-288340776062.roa
File:                     f1e71ff0-cdd3-311c-9e81-288340776062.roa (raw, json)
Hash identifier:          3NuhyJSK+qhPYqLbAPqZLJMIs0Q02C0vpC+eU/lBLks=
Subject key identifier:   BA:1B:55:DE:C9:0C:1D:6E:FC:FE:9B:98:91:4F:74:88:92:65:F1:35
Certificate issuer:       /CN=44c2b619-4d8d-47ef-ab56-fedefb0e01bb
Certificate serial:       010D0C9F4328584A0D6A8056D7CFBC284F08E600
Authority key identifier: 76:C9:87:90:5E:9E:64:24:93:86:65:30:07:72:39:36:87:68:9B:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb/f1e71ff0-cdd3-311c-9e81-288340776062.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     12029
IP address blocks:        167.253.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb/44c2b619-4d8d-47ef-ab56-fedefb0e01bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb/44c2b619-4d8d-47ef-ab56-fedefb0e01bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:80:56:d7:cf:bc:28:4f:08:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c2b619-4d8d-47ef-ab56-fedefb0e01bb
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=1f4f5871-d983-423d-bd5c-7760477d5be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:56:23:5c:b4:63:0f:b0:05:ff:67:49:9c:
                    d1:23:b6:9b:f8:2f:c0:b4:7c:e0:fd:e8:ef:64:b2:
                    9e:60:59:a8:ba:76:8f:6d:d8:52:35:69:5b:1c:eb:
                    bc:06:60:3e:ab:b1:a8:a4:aa:08:4a:2b:2c:e4:fa:
                    d3:fc:73:98:7a:08:ed:74:d2:60:41:fc:36:33:3a:
                    10:fe:d5:6a:56:34:65:74:14:5a:f6:00:aa:05:a0:
                    68:c0:73:48:34:45:6a:ff:1e:ac:9f:56:90:b0:b9:
                    d1:01:13:95:a3:9d:d5:86:35:11:48:5d:58:d1:6d:
                    91:57:18:28:96:7c:9d:cf:4d:2b:c0:77:b7:16:74:
                    f3:fe:45:90:43:f5:fd:00:d3:dc:d0:b3:50:ec:02:
                    d5:bb:9f:64:f9:07:39:e6:17:03:2f:bd:fa:1c:59:
                    d2:af:75:4a:a8:42:65:66:de:cc:7b:b8:4f:01:f1:
                    e0:f8:8f:95:f5:1e:00:2f:ca:1e:2a:3f:75:c6:18:
                    d2:bf:e0:61:f1:33:c2:23:e4:46:49:fe:81:64:60:
                    ed:89:eb:71:74:c7:1d:05:74:a9:b0:5c:8e:00:af:
                    7d:98:56:2b:2b:5a:16:c8:eb:f4:ff:e5:0f:02:9d:
                    9b:a2:2a:8c:42:1d:83:da:8a:85:d6:1f:db:ba:23:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1B:55:DE:C9:0C:1D:6E:FC:FE:9B:98:91:4F:74:88:92:65:F1:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb/f1e71ff0-cdd3-311c-9e81-288340776062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb/44c2b619-4d8d-47ef-ab56-fedefb0e01bb.crl

            X509v3 Authority Key Identifier:
                keyid:76:C9:87:90:5E:9E:64:24:93:86:65:30:07:72:39:36:87:68:9B:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/44c2b619-4d8d-47ef-ab56-fedefb0e01bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ab:4f:41:dd:43:23:dd:65:07:3d:33:83:16:4b:4e:cb:9d:
         61:da:33:bb:f7:7c:44:7b:96:26:e5:34:27:d3:96:6c:62:36:
         92:68:21:44:40:8d:a6:34:83:af:bd:e6:a1:d6:1e:b1:e8:67:
         de:35:0e:fa:1c:63:97:99:5e:34:6e:78:e6:2c:99:00:1c:ea:
         e9:e6:71:32:4e:ad:b5:89:32:00:11:3e:ca:e5:b0:ea:db:b6:
         4b:bb:7f:b1:b3:24:f8:9d:4c:ac:9e:63:52:13:9e:37:bb:ec:
         0e:78:be:7c:f7:64:d5:16:4b:0f:41:7c:50:08:9d:d9:68:62:
         49:00:14:52:15:ce:cc:5a:df:f5:98:3f:84:87:12:cd:42:b0:
         c4:d6:eb:14:53:e0:9d:94:64:26:30:0d:f3:b9:0d:9b:16:19:
         bd:64:78:e4:35:0e:61:ae:c9:e4:42:12:58:ff:09:a4:16:d4:
         38:2f:2b:b7:ee:be:7b:6b:77:91:ea:62:7f:34:70:21:a7:6f:
         a1:1a:0e:36:49:60:da:f4:e1:58:d7:17:b1:62:b6:29:6e:39:
         a9:c9:7d:cc:f6:74:1d:71:85:1c:f5:b8:39:bf:de:54:1f:e3:
         16:03:0a:e3:5f:a4:2c:7a:93:34:fd:d9:14:3e:89:6d:24:fb:
         58:84:8b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:08:15 2025 by rpki-client