Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/bb23f2fe-fe1d-342c-a3dc-3c3971dc6f98.roa
File:                     bb23f2fe-fe1d-342c-a3dc-3c3971dc6f98.roa (raw, json)
Hash identifier:          TbVlltAKFJ9PsOk29SiMeeQKIFQXED3y/LbvcRB164c=
Subject key identifier:   64:E2:2F:5D:55:4B:1D:4F:DA:42:4E:40:A1:31:F7:D2:4D:13:24:07
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F43285849B57A1FE1B08B329A9A90EE80
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/bb23f2fe-fe1d-342c-a3dc-3c3971dc6f98.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     399870
IP address blocks:        170.205.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:1f:e1:b0:8b:32:9a:9a:90:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=359e3876-2e62-4e1a-b17f-c9a1010302bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1b:f3:ea:e1:ee:21:27:ac:7c:74:0b:0e:79:
                    97:4e:1d:71:57:9b:1a:da:ae:e9:70:69:d2:c2:e1:
                    19:00:5c:cf:30:15:3c:a0:26:45:a9:fd:2d:16:d3:
                    80:3e:4d:ac:ee:b5:53:05:ee:f9:52:a6:8e:9a:10:
                    ba:a7:84:3e:39:14:21:dd:9c:2f:a3:25:a6:77:a9:
                    fa:9f:c1:b3:36:a3:56:73:18:05:2c:e8:55:57:b4:
                    6e:61:6c:8e:4d:de:5f:37:4a:6a:64:c2:b8:ba:39:
                    b2:03:7b:d9:30:b2:86:ff:22:4e:26:a4:2f:78:3e:
                    bd:2d:4e:bf:26:a8:68:00:90:77:97:22:96:11:87:
                    d3:33:ab:05:a1:a0:00:49:ff:a3:e8:87:08:7a:72:
                    44:61:e0:7e:b9:fc:26:69:3e:62:fc:85:e1:9b:09:
                    71:c3:2a:fc:f3:1c:62:be:9e:42:f6:6a:71:35:d8:
                    0f:e3:1e:19:aa:f6:8f:d9:b9:a6:d9:ba:5f:19:23:
                    75:15:f1:25:3e:8d:0d:e5:d9:47:a7:fb:6d:3e:6d:
                    5b:34:4a:1a:12:cd:18:59:b2:7c:b8:1c:1d:01:86:
                    a8:70:03:45:9a:0e:fa:16:0b:38:f3:45:ef:14:c5:
                    6d:0e:89:05:bf:fd:ae:fa:45:6f:22:2c:12:06:36:
                    de:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E2:2F:5D:55:4B:1D:4F:DA:42:4E:40:A1:31:F7:D2:4D:13:24:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/bb23f2fe-fe1d-342c-a3dc-3c3971dc6f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b2:a5:4a:59:f3:95:d4:c6:0e:98:9a:3b:91:37:c4:5d:20:
         81:8e:fe:72:86:ff:d0:80:c8:24:00:a6:5c:68:00:d6:0f:5f:
         29:43:dc:d6:c0:db:31:be:42:1f:04:ee:93:10:1c:9e:0a:7c:
         db:99:77:21:30:64:b0:5b:1b:fe:63:57:81:ed:94:56:cd:d7:
         3f:34:af:77:ea:75:eb:63:2e:4e:05:eb:bd:99:97:f0:63:32:
         03:4a:cf:ed:8b:1c:48:80:f2:2e:f0:c7:9b:0b:cb:03:fb:50:
         08:ac:e7:3b:cc:3a:f9:2b:a6:6c:c0:07:62:0d:72:ef:8f:f4:
         09:8b:ed:59:a6:ab:3f:50:02:1f:29:db:0c:db:d2:d2:b4:92:
         29:06:74:83:78:62:a5:e9:ce:75:67:4e:8e:d4:38:8f:cd:9c:
         04:8f:71:5d:14:b0:e1:cc:9a:28:18:10:51:01:0a:45:9c:0d:
         8c:4a:a4:1c:10:05:f8:eb:fd:7f:e4:32:e7:b0:e0:81:2c:40:
         0e:71:cc:b5:f0:82:b3:32:c9:4f:27:c6:7c:b1:83:3d:d5:9e:
         52:30:e3:ea:92:84:d2:9a:94:f0:45:f5:54:2f:ca:e0:80:07:
         31:c0:2c:8d:46:92:45:d4:3e:d2:71:ae:3c:ea:c8:f9:a8:f5:
         53:1a:da:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:52:59 2025 by rpki-client