Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa
File:                     d24e1119-5be2-3190-a36f-e8056d9c96aa.roa (raw, json)
Hash identifier:          IshIxWUgC8R1wSGanknLsdFsl/av0AFqpQfIWjVEnxw=
Subject key identifier:   57:D3:BE:91:CA:4E:0C:6F:E5:23:75:11:31:0B:BE:74:A2:9E:1C:59
Certificate issuer:       /CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
Certificate serial:       010D0C9F4328584A189547C6DEF377551B029E00
Authority key identifier: 26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        192.172.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:47:c6:de:f3:77:55:1b:02:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=1ab377f7-348d-4285-8268-f5f0080455fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1d:b6:35:5f:0c:29:9c:58:d6:10:1d:60:1d:
                    5f:c8:34:5c:e3:a3:3d:e6:3f:b1:09:bf:b7:54:53:
                    1a:42:e4:19:2a:20:be:d2:3d:e0:ed:7a:94:c9:10:
                    17:33:3a:b4:1f:88:e2:10:34:16:00:e0:b3:7e:45:
                    5f:88:72:d6:ba:75:b7:8d:8e:43:63:e6:5a:b0:0e:
                    2a:93:de:2a:35:3f:cc:a2:d4:14:ee:4d:db:65:f8:
                    b0:f9:6f:67:f1:dd:e4:9d:47:e3:46:f8:3a:7b:0e:
                    ff:6f:77:f0:cd:e9:ca:96:db:e2:75:08:7e:67:ea:
                    00:7d:b3:0c:4b:cd:d0:b0:81:a4:27:7c:7f:c1:f9:
                    5e:33:cb:e1:4c:ab:08:e4:bb:d3:71:1b:6a:81:65:
                    8e:a0:3b:d7:2d:6b:f1:ef:b1:fa:78:3c:b7:54:08:
                    0b:57:ac:c9:c2:6d:0e:f1:c6:7e:b5:45:5a:9b:24:
                    7f:d0:79:16:49:77:3e:7a:12:8e:e9:0d:1a:98:44:
                    ae:3e:1e:a4:99:52:94:ca:48:15:35:61:0a:68:59:
                    f6:91:d8:9d:8d:1b:85:6c:ad:3c:d1:b4:d1:fd:3d:
                    69:d9:e4:46:82:20:97:b7:f0:7b:0a:61:d8:89:9a:
                    df:8b:f3:6c:e4:1e:74:1d:4a:af:12:99:31:65:3a:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D3:BE:91:CA:4E:0C:6F:E5:23:75:11:31:0B:BE:74:A2:9E:1C:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl

            X509v3 Authority Key Identifier:
                keyid:26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.172.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e0:1e:03:17:82:f4:39:81:a4:23:41:50:4e:57:30:fa:1e:
         bb:a0:af:53:64:e2:a9:2b:76:0d:b6:a8:d3:8f:8c:c2:2e:65:
         3e:a4:b1:af:3a:46:94:4a:e8:31:12:52:1b:21:33:55:16:5a:
         e2:d9:39:a3:e4:d1:08:97:7f:f2:33:f1:87:a4:3b:07:8f:f3:
         6a:e3:70:85:9c:0d:21:59:dd:a8:da:8a:b6:8e:c2:02:00:cb:
         e6:c7:ff:71:98:24:ca:92:25:7a:b9:bb:a2:94:90:f1:a0:5c:
         c8:bd:31:1d:57:c9:6d:4a:6e:88:f8:19:50:f1:04:5d:70:55:
         78:9f:77:b4:15:b1:a5:fc:12:46:bc:24:88:2e:74:33:de:bf:
         72:c6:e6:af:d6:9a:32:91:35:23:84:1e:86:b2:4b:09:14:19:
         f6:4e:9d:63:0b:0e:dd:34:bb:b3:45:3c:3d:56:a7:e6:80:bc:
         7c:14:9f:4e:b2:d6:d2:ed:1d:1a:61:80:96:5d:70:4d:6b:a0:
         53:19:5f:75:5f:de:64:63:55:51:14:f8:c5:ce:22:96:be:db:
         6e:7f:9b:fe:6f:7a:5c:f9:d9:56:92:88:6e:0b:66:16:e7:a6:
         ac:7f:51:d4:00:e2:b4:29:2a:dd:ec:03:02:d8:4b:fb:bd:9a:
         21:97:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:57:56 2025 by rpki-client