Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/e0bd1b5c-1033-326e-b0cf-bf81748840f1.roa
File:                     e0bd1b5c-1033-326e-b0cf-bf81748840f1.roa (raw, json)
Hash identifier:          SO/Jpxe+XXyA7YiEIU03vEoHxBFvUlSN7zDQejoHXP0=
Subject key identifier:   D3:EA:2E:D5:DE:2E:AF:80:17:68:19:B5:B9:D1:4F:EA:AF:A4:4E:47
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F4328584A3B7AFE9AF6D883B6903C3D80
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/e0bd1b5c-1033-326e-b0cf-bf81748840f1.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     31898
IP address blocks:        161.221.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:fe:9a:f6:d8:83:b6:90:3c:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=e04f6b03-53b4-42ab-b7a0-6a1b095a01a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:ad:25:75:fb:8e:f9:69:67:2e:23:86:a0:
                    47:fd:c1:a5:0a:6f:dd:f8:3f:1f:60:06:b9:8e:34:
                    ec:ed:03:74:9c:b6:82:a1:64:c3:4d:6c:e1:f0:59:
                    2c:48:92:58:52:23:1a:d1:21:9d:7d:2e:0e:65:51:
                    c7:f5:06:6b:a4:42:de:4c:c2:cb:72:41:f8:80:7e:
                    2e:2c:92:53:fc:2d:7e:d0:e4:60:34:4f:1f:ef:79:
                    ec:78:3a:68:bb:48:84:48:35:be:b1:83:de:46:55:
                    ae:49:dc:d0:d8:e5:8a:c9:56:ad:fe:8a:ed:8f:fd:
                    97:d0:5d:0c:2f:6a:95:c3:42:a9:9e:3b:4c:3c:01:
                    49:53:f2:c2:42:f3:cd:40:d0:e8:2f:db:6e:0e:a8:
                    80:38:d8:dc:22:b0:ed:e2:9b:28:3e:cf:99:e9:27:
                    6f:23:7f:aa:92:0a:55:96:ed:be:f2:38:88:ca:50:
                    e5:8a:25:b4:9a:4e:d5:89:76:77:58:96:00:50:e8:
                    c6:f4:1a:b2:4d:40:0f:8b:75:65:5b:39:15:73:69:
                    e7:14:5e:31:66:f3:cf:1e:dd:ad:ec:e4:bb:33:15:
                    6f:e3:fd:cb:d1:bd:b8:b1:b5:29:30:eb:46:cb:9a:
                    50:86:fb:3f:a6:1f:1b:8e:63:34:87:7e:8e:6f:4f:
                    9f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EA:2E:D5:DE:2E:AF:80:17:68:19:B5:B9:D1:4F:EA:AF:A4:4E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/e0bd1b5c-1033-326e-b0cf-bf81748840f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:33:4a:3c:a9:c4:d6:d1:c0:19:dd:10:0f:b1:fe:61:c4:c1:
         db:0c:65:0f:60:55:3b:9a:cd:e2:9a:90:48:b7:c6:e8:b5:df:
         44:c1:82:0a:11:06:7c:b9:f4:43:47:98:2c:84:0a:51:42:27:
         43:52:b8:8e:10:7a:e1:65:a6:e7:d0:54:c1:97:f0:ab:e7:7e:
         57:07:49:6a:5d:c5:52:b2:ad:de:83:a8:07:fc:dc:3b:17:de:
         05:ea:b3:87:8b:c9:8a:6a:f8:c8:7e:09:b3:50:05:6f:25:cf:
         48:5d:bb:73:6a:7e:56:3d:d9:88:16:0a:ec:a9:e0:b5:7c:95:
         53:7e:52:ea:e0:e0:12:41:a2:eb:b0:24:d1:70:7c:c1:a6:f7:
         f1:df:07:e1:ae:79:22:ab:92:19:ff:c9:69:2a:56:79:29:9d:
         be:f8:04:6d:08:b1:eb:09:56:39:be:a8:bf:88:b3:1d:8f:fb:
         2a:47:73:2e:fa:14:11:90:d7:f0:24:b2:2c:74:dd:e2:7f:a2:
         55:df:f5:47:3c:7f:91:8b:f4:b2:ed:b9:9f:97:ff:4b:dd:ac:
         de:6e:42:68:86:e4:37:97:21:39:8e:99:b1:70:e4:e4:da:32:
         5d:00:56:b6:01:7b:74:b2:95:8f:71:0a:97:d1:47:25:0b:cc:
         68:78:2e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:27:56 2025 by rpki-client