Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa
File:                     5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa (raw, json)
Hash identifier:          7O+aFsdXpofTdIWZPRnz5MLHjUpVrSnq4pEhdcqnigI=
Subject key identifier:   CC:65:2C:B5:63:D9:92:B3:85:BC:9B:3D:28:8B:76:B0:B8:9C:49:5E
Certificate issuer:       /CN=b94accf0-8067-4a9a-ba69-832d3d95402d
Certificate serial:       010D0C9F4328584A00DAC1591A2E2F676275618F
Authority key identifier: AE:8E:16:C6:CD:47:F7:01:8F:62:8D:0C:33:24:C4:A9:A4:5E:6E:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     8075
IP address blocks:        170.62.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c1:59:1a:2e:2f:67:62:75:61:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b94accf0-8067-4a9a-ba69-832d3d95402d
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=93119fc8-7d0b-4b5d-9f53-d54d60e9e89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:17:21:7d:b3:cb:7c:74:cf:80:78:a5:e9:
                    7c:93:66:0e:7a:ec:b3:47:3d:6d:aa:75:31:92:fb:
                    a5:8a:ba:1e:6d:44:2b:74:b2:e7:1f:7d:fd:6a:22:
                    84:3e:26:ad:a7:2a:ee:48:03:51:11:4d:69:fc:8a:
                    f2:03:84:a0:89:bd:e9:9f:63:47:cc:e1:ba:ff:60:
                    ba:56:e7:02:63:85:52:93:12:24:ee:17:e9:12:f0:
                    3b:95:4a:c9:c8:aa:a4:6c:48:ba:35:8e:69:d0:ef:
                    06:34:a6:75:a7:10:6d:fa:51:4e:57:7f:ac:74:8e:
                    fe:c0:8e:43:65:c9:d9:35:82:c6:c5:94:4b:af:76:
                    4b:3e:4f:6f:04:9e:7d:94:5b:ae:6b:ab:cb:85:76:
                    40:54:7f:f8:43:22:27:ac:e4:b3:dc:d2:16:24:df:
                    86:2e:5f:28:c4:c3:22:5a:67:3f:15:d8:5f:37:92:
                    a6:fb:58:9c:ff:1a:33:4e:87:24:93:d3:2f:a2:28:
                    d1:a4:0a:3e:2f:05:54:70:a2:dd:43:7d:db:e4:f3:
                    0a:a3:06:27:87:6b:f5:98:40:f3:54:be:94:c5:3a:
                    d5:0d:44:ef:66:81:7d:c0:1b:dc:82:87:b5:10:44:
                    4a:53:6b:0a:1b:73:e3:d1:da:a2:d8:5c:da:03:17:
                    2a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:65:2C:B5:63:D9:92:B3:85:BC:9B:3D:28:8B:76:B0:B8:9C:49:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.crl

            X509v3 Authority Key Identifier:
                keyid:AE:8E:16:C6:CD:47:F7:01:8F:62:8D:0C:33:24:C4:A9:A4:5E:6E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:91:9e:bc:db:7d:ae:d8:8b:c7:b0:ff:f7:20:37:b6:35:dd:
         5c:84:39:59:53:45:7e:27:71:15:87:e4:58:e8:c7:5e:80:57:
         cb:89:7c:bd:69:7e:9b:fd:71:cf:05:45:16:d5:48:a9:0d:95:
         84:e0:cd:b8:21:40:26:64:ef:b1:f5:b9:a9:15:0e:d1:73:d7:
         11:80:18:9c:1e:37:77:18:70:7c:c4:e2:21:51:b3:d3:cb:b3:
         57:a3:e1:ff:ef:8c:f4:24:a3:2a:68:4e:f5:d0:b5:b4:de:8f:
         4f:51:ae:c0:a3:cf:d3:ba:1e:c8:22:88:5b:32:92:61:c3:c4:
         4d:ff:8c:23:09:6e:08:41:80:bb:ed:e2:b8:ed:d8:f0:ae:4e:
         38:54:e8:d7:6b:bc:f3:67:5b:b1:0c:2c:2c:8f:9e:7e:c6:50:
         15:eb:09:45:e0:7f:62:08:b2:0f:81:13:9c:94:69:4c:61:20:
         87:58:ba:69:e3:3a:7b:dc:b7:98:6f:10:4f:65:72:be:ed:a4:
         1c:69:f4:0b:a0:3b:b4:f4:69:b1:68:df:4c:01:2a:f0:ec:b1:
         ee:ff:cb:83:6b:39:b3:7a:24:d2:5f:78:29:4a:0d:3d:43:ed:
         b3:98:73:e3:2f:bf:83:ea:ed:22:4b:36:da:32:bb:d3:fc:43:
         1a:35:53:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:19:39 2025 by rpki-client