Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/bf04624b-2810-314d-8509-0a4c13e7ef1c.roa
File:                     bf04624b-2810-314d-8509-0a4c13e7ef1c.roa (raw, json)
Hash identifier:          gJ9fi7LaqS5dxgqowObmGXswZ2l/ZxVMQg1corKzf6A=
Subject key identifier:   70:5D:2E:9A:10:F3:9A:1A:58:CB:D0:C1:57:0E:75:9F:1F:DD:E1:9F
Certificate issuer:       /CN=c2e53398-d877-4381-8fdb-2ec7db53fc5e
Certificate serial:       010D0C9F4328584AD7D121EAED7D10F3AA1B3F00
Authority key identifier: 2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/bf04624b-2810-314d-8509-0a4c13e7ef1c.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     16801
IP address blocks:        151.179.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:21:ea:ed:7d:10:f3:aa:1b:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e53398-d877-4381-8fdb-2ec7db53fc5e
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=f6e01b59-bf9c-4c28-a62e-a1a1fe40a215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:04:35:91:68:60:e2:bc:b5:cd:93:6a:ec:f6:
                    af:28:e2:7e:5b:a1:8b:70:93:94:d9:49:51:2d:9d:
                    46:ee:2f:e9:2d:a8:99:40:b5:23:2f:f4:76:bd:f2:
                    b2:cb:6a:cc:ab:0b:4b:10:19:e5:48:3f:be:dc:06:
                    b3:df:a2:74:7c:94:71:79:6f:ad:20:44:8e:f9:99:
                    20:f7:2d:a1:67:d4:31:2f:c3:13:d2:06:3a:0f:d4:
                    f6:d7:ac:ae:12:07:8e:50:4d:de:01:97:52:28:3f:
                    22:e2:dc:30:6b:79:69:b0:b1:a2:10:a9:17:fd:16:
                    d9:03:7e:7d:1b:5e:22:5c:2b:20:dd:4a:e9:d7:63:
                    aa:40:89:72:ac:3e:fa:b0:f2:2f:75:00:7e:38:07:
                    e9:85:39:cc:65:1e:1f:67:f4:d8:c1:a1:cd:a3:44:
                    37:c2:73:97:a8:27:8c:62:c4:9d:f7:e7:90:f4:f5:
                    6c:ac:76:5c:13:56:a6:37:f5:bd:71:3a:07:36:a8:
                    1c:66:5b:10:ae:89:61:38:06:4b:43:6b:5b:fc:e0:
                    b3:6e:1e:1a:e4:c9:88:6e:00:8b:a1:bc:5d:9e:f7:
                    d4:c3:0d:6d:8a:1b:33:ce:b4:1c:62:92:39:fd:7b:
                    87:0c:92:4e:6c:4d:9e:ee:00:cd:43:21:8b:af:97:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5D:2E:9A:10:F3:9A:1A:58:CB:D0:C1:57:0E:75:9F:1F:DD:E1:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/bf04624b-2810-314d-8509-0a4c13e7ef1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.crl

            X509v3 Authority Key Identifier:
                keyid:2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.179.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:dc:ec:79:72:ff:92:c3:c7:f6:d6:0a:7f:7f:46:8c:1a:52:
         79:be:e3:22:26:6b:57:73:4f:7e:57:85:51:43:f5:43:11:37:
         f5:4d:2c:3d:0d:35:48:27:f3:f8:30:5e:a7:2c:34:13:a8:83:
         1c:6e:1e:dc:b1:7b:3c:4b:06:50:ec:72:5e:66:16:31:d3:95:
         24:2e:5c:b8:e1:9a:50:98:f6:71:ac:b4:51:a2:20:21:bf:0c:
         76:9a:99:9b:81:ca:04:c8:57:8e:5d:2f:c5:23:e2:ec:e4:f5:
         71:ab:8b:e8:58:df:49:9a:61:bc:e4:c4:a0:1d:9d:cc:12:fd:
         e5:17:0c:c5:30:9a:6b:3e:59:70:bb:16:05:65:16:ef:cd:4b:
         0a:88:31:43:04:29:8a:0b:4a:50:d4:57:e2:7d:8e:93:ce:28:
         1b:35:c9:ee:83:54:ad:64:d1:2c:69:0e:af:1e:4c:43:f3:b7:
         d0:40:c1:4a:91:a3:71:4b:12:ee:16:b8:ef:bf:08:79:e8:5d:
         09:f6:35:c9:3e:dc:b5:83:62:92:46:c7:f2:13:42:af:d8:b7:
         82:a5:50:f2:cd:32:68:8c:e3:ee:74:be:05:49:3d:6e:f2:a8:
         20:1b:2a:d3:15:68:55:91:3f:f3:b5:87:3b:6d:4f:4d:bc:41:
         ba:df:ec:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:13:52 2025 by rpki-client