Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/1953e907-ca48-305e-be13-e2db5f32b554.roa
File:                     1953e907-ca48-305e-be13-e2db5f32b554.roa (raw, json)
Hash identifier:          +vOO5MJBpCw0mvZ7VY/v8F/caAzg4/KW9WtIBMSYsqg=
Subject key identifier:   E0:FC:49:67:25:B0:62:EE:C8:6A:09:CC:93:A5:94:3A:82:D1:77:90
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F43285849F49163A77927D2A0274E6540
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/1953e907-ca48-305e-be13-e2db5f32b554.roa
Signing time:             Sat 24 May 2025 03:24:00 +0000
ROA not before:           Sat 24 May 2025 03:24:00 +0000
ROA not after:            Fri 22 Aug 2025 03:24:00 +0000
asID:                     19886
IP address blocks:        171.162.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:91:63:a7:79:27:d2:a0:27:4e:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: May 24 03:24:00 2025 GMT
            Not After : Aug 22 03:24:00 2025 GMT
        Subject: CN=027641a6-8404-4fea-a8ef-042d98a3abe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:9d:15:04:de:5c:30:50:36:e3:a6:d3:52:
                    0b:bf:dd:c0:2d:c1:2b:d6:6b:6d:ad:3e:20:e0:f2:
                    aa:fc:12:dc:de:cf:72:8e:76:06:bd:da:4f:ef:e6:
                    bb:09:0f:97:23:6a:d7:60:a4:5b:09:48:88:51:f2:
                    dd:cb:ca:2e:c6:56:66:cd:72:07:b2:24:d4:c8:19:
                    50:3b:a3:a2:01:0c:88:97:c2:38:31:69:ad:cd:42:
                    0a:5f:d7:0c:fe:34:df:9e:a0:28:c6:d5:e1:cd:bf:
                    74:61:31:1a:df:b8:58:c3:19:a7:ff:1b:2a:97:ff:
                    d5:e5:bc:4a:53:5b:41:fc:b9:c8:46:86:23:1c:d5:
                    c2:37:b6:19:d2:1f:33:d5:98:06:ff:64:86:6f:1d:
                    68:2f:1e:15:da:63:31:11:8f:75:50:a2:66:32:e2:
                    80:9c:50:9e:40:86:7b:4d:41:05:8f:be:23:f6:d8:
                    d3:50:4c:9d:70:18:29:66:7d:48:49:d2:c5:f7:1b:
                    b1:fd:c2:df:5a:4d:07:bc:a0:77:b6:2f:43:93:3a:
                    32:8b:0d:a4:0d:05:60:08:a3:f9:16:76:76:74:e7:
                    ff:c0:4f:1c:43:66:28:2e:ac:1f:ee:d3:5e:df:7e:
                    7b:8f:37:fd:14:ab:4d:a5:e9:9f:91:8b:c4:63:af:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FC:49:67:25:B0:62:EE:C8:6A:09:CC:93:A5:94:3A:82:D1:77:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/1953e907-ca48-305e-be13-e2db5f32b554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:32:dd:b6:0e:d3:4a:b5:5a:16:01:11:46:3e:14:68:ca:6e:
         13:46:94:d8:dc:81:4b:3f:f0:eb:4c:9c:5c:01:b4:f2:a5:05:
         ca:20:93:f3:c9:bd:c6:71:f9:75:85:fb:2b:d6:6c:a8:45:d5:
         7d:86:68:5a:84:32:7d:ec:1f:0f:e9:9d:7f:25:0a:47:22:8d:
         e3:d1:23:65:c6:ca:bb:1a:73:18:bd:a9:54:77:73:03:53:6f:
         4e:bf:f6:29:fa:3b:33:5f:7e:f5:0f:30:a7:22:91:08:ec:92:
         6d:25:08:c6:ad:6b:8e:5c:03:7e:13:a2:10:96:29:f6:c7:63:
         f5:9b:65:82:9d:28:92:7b:e7:6e:a7:cb:12:03:6d:a5:22:fe:
         e2:df:12:cc:30:96:7e:e8:99:ee:eb:42:f9:d5:21:6b:41:30:
         d5:22:36:4c:8d:b1:b0:67:e0:75:7c:fe:d7:21:e3:42:f2:fe:
         57:48:fe:89:e3:da:6e:42:e9:6e:b3:89:21:e0:54:83:b6:29:
         10:7c:1c:62:f1:64:6a:5a:9b:76:3b:6c:96:40:19:66:28:02:
         00:ce:a4:9a:39:26:d8:b7:58:3c:ad:06:c6:42:72:d6:c2:55:
         32:19:a4:7a:12:df:02:6d:6d:c8:36:d9:21:31:99:3f:55:f3:
         cb:d0:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:47:55 2025 by rpki-client