Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f83f6edd-d7fc-3d1e-a678-fc9eaf5a6568.roa
File:                     f83f6edd-d7fc-3d1e-a678-fc9eaf5a6568.roa (raw, json)
Hash identifier:          JqHk1c/Uj1X0SZc0QsFgnpERdsR6DfUr91MMVhOaRsI=
Subject key identifier:   C2:E9:02:02:9D:89:16:4F:1E:0E:F7:B3:50:62:2C:46:E0:08:67:28
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A46F6CBD24FBD61B5DD904E48
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f83f6edd-d7fc-3d1e-a678-fc9eaf5a6568.roa
Signing time:             Sun 22 Jun 2025 15:44:37 +0000
ROA not before:           Sun 22 Jun 2025 15:44:37 +0000
ROA not after:            Sat 20 Sep 2025 15:44:37 +0000
asID:                     7385
IP address blocks:        172.110.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:f6:cb:d2:4f:bd:61:b5:dd:90:4e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 22 15:44:37 2025 GMT
            Not After : Sep 20 15:44:37 2025 GMT
        Subject: CN=f40d172d-5b7f-4021-8051-6a4accd7d9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:a7:71:d2:0b:17:21:21:6a:5a:e0:10:eb:
                    31:c6:a2:06:1c:db:d1:93:51:7b:30:83:c4:45:5e:
                    32:c1:22:35:ad:f8:f4:72:37:57:39:db:4c:0c:43:
                    7e:63:1b:84:a1:bb:4a:1a:20:bb:26:6e:90:a9:93:
                    b5:d2:2a:44:83:bb:6e:5c:4e:16:3f:4f:ab:94:2a:
                    29:ad:10:a6:1b:76:f0:9b:71:79:36:73:c3:8d:9b:
                    56:2b:d4:51:e0:0d:34:fc:c7:a2:c7:81:a1:8c:75:
                    98:8d:ae:da:27:b4:d3:47:0b:1e:fe:09:af:df:3f:
                    f4:37:79:b8:d7:f7:df:e6:9d:2a:c7:ca:ba:66:e5:
                    0f:82:10:7c:4d:f8:dd:a4:0c:2a:26:72:11:0c:a5:
                    78:fb:a0:12:10:0e:ca:71:c1:b7:b7:f5:cf:c4:dc:
                    35:af:90:c6:33:96:14:61:83:83:c7:68:b6:c9:ad:
                    75:cb:7d:d5:a5:31:c9:fa:17:5a:8a:49:25:85:5a:
                    7b:23:04:fd:14:f7:06:a6:a3:f9:5d:e7:f9:cf:8b:
                    14:58:24:3c:8b:67:c4:80:2a:e5:e1:18:92:68:bf:
                    42:47:0f:57:fd:a4:8c:3e:19:1b:d5:91:33:6f:7a:
                    e1:6e:57:8d:6b:4a:e9:11:da:21:b1:9e:97:9f:f8:
                    29:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E9:02:02:9D:89:16:4F:1E:0E:F7:B3:50:62:2C:46:E0:08:67:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f83f6edd-d7fc-3d1e-a678-fc9eaf5a6568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:ff:68:00:9b:51:fc:70:b2:3c:70:10:cb:21:ae:30:f4:5d:
         77:12:ad:fd:a1:70:1a:17:10:b3:dc:ff:65:70:a7:b5:76:0c:
         7b:b2:06:c0:86:42:94:0b:c6:04:65:30:cb:67:21:e3:3a:44:
         92:1b:7f:99:4c:87:e4:0e:34:d9:c8:1c:5b:b9:b8:f5:a3:36:
         df:29:0a:b5:7c:08:49:d2:cd:3d:65:54:89:02:fc:4f:97:41:
         63:97:d6:d7:fe:76:db:9d:6a:93:ff:23:f8:ce:64:03:7e:73:
         36:4e:c6:ee:df:d4:89:49:63:1a:25:c4:23:3f:44:bd:f1:78:
         3b:dc:87:30:ba:81:0b:fc:98:1d:04:7a:94:3a:6e:3e:8c:6c:
         58:af:49:14:33:60:ea:ca:7e:94:70:0c:f4:fb:4c:48:cd:01:
         1a:c5:05:2b:5d:ef:9c:4c:d4:f0:78:27:fa:16:16:5d:d5:f0:
         a6:df:6b:2b:29:8b:25:69:c8:34:ee:d9:9a:99:a3:b6:88:34:
         a6:d6:cf:44:81:f6:73:f9:f0:bf:f4:ee:43:0a:98:ca:c9:a0:
         90:e5:5e:c3:4f:a9:36:9a:8d:41:f1:db:5f:96:54:aa:3f:a8:
         65:34:be:10:21:5f:57:ee:40:a5:81:4f:99:92:b2:fc:10:23:
         98:74:b1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:37:43 2025 by rpki-client