Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/05b97d02-04d2-3a3c-bd2c-0f7da0043062.roa
File:                     05b97d02-04d2-3a3c-bd2c-0f7da0043062.roa (raw, json)
Hash identifier:          tG9UN9+3p82V/wv2q6s5SjBv5jOsILetIha/Qx9reKM=
Subject key identifier:   0C:FD:86:E8:B7:0F:A5:E9:9B:BE:C3:F6:FE:09:BA:0E:1C:4C:2E:C5
Certificate issuer:       /CN=046edc58-3188-4be4-bad7-643a593bcf38
Certificate serial:       010D0C9F4328584A374AD32F1B72B09C47A4EE60
Authority key identifier: 31:EF:CB:6B:90:66:B6:32:B4:3B:90:67:CD:AF:1E:20:6E:47:FD:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/05b97d02-04d2-3a3c-bd2c-0f7da0043062.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     52053
IP address blocks:        170.39.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/046edc58-3188-4be4-bad7-643a593bcf38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/046edc58-3188-4be4-bad7-643a593bcf38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d3:2f:1b:72:b0:9c:47:a4:ee:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046edc58-3188-4be4-bad7-643a593bcf38
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=a83c1cdf-9e99-42d0-a774-dac208e30ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:92:4a:27:de:49:d4:7e:57:8f:3c:2d:dc:97:
                    ea:ba:2e:1f:e1:76:bd:9b:df:6b:8a:65:11:68:ce:
                    90:18:64:ee:24:c3:72:67:57:1a:25:55:1f:d2:89:
                    63:4f:6c:b1:7c:0f:87:e2:78:c3:2f:3c:fb:63:27:
                    a6:d3:11:a1:38:28:59:65:2b:c9:69:74:03:b4:80:
                    05:f0:a1:f4:8d:2d:39:79:92:aa:d8:b5:7c:52:b7:
                    88:f7:e6:e2:e7:92:3a:d7:d5:53:9d:15:03:5d:3a:
                    03:f2:1d:8f:15:9a:96:0d:d4:83:19:78:5f:5e:43:
                    ed:9c:8f:ce:04:c2:f6:a9:36:2c:5d:2f:02:dc:fc:
                    ac:a5:0e:ed:7f:8f:32:50:c9:b6:f1:7a:9e:ba:bf:
                    04:d3:3b:fa:0d:ec:99:62:a7:6a:6e:a6:1b:7f:4b:
                    9d:9e:91:d4:50:34:f8:0e:eb:36:10:28:3f:c3:69:
                    ee:80:9a:04:2a:d3:68:bc:d0:54:af:59:4f:2c:6f:
                    d7:fc:6c:58:56:a5:2b:63:eb:39:cf:68:bd:82:0e:
                    81:fc:b6:97:02:85:a0:9b:28:50:bb:5f:85:47:75:
                    57:8e:2b:ca:c9:cf:f6:46:5e:91:b9:e2:e2:51:6d:
                    a2:9b:d6:d4:cf:6a:6b:0c:bc:85:b8:8c:08:84:48:
                    16:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FD:86:E8:B7:0F:A5:E9:9B:BE:C3:F6:FE:09:BA:0E:1C:4C:2E:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/05b97d02-04d2-3a3c-bd2c-0f7da0043062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38/046edc58-3188-4be4-bad7-643a593bcf38.crl

            X509v3 Authority Key Identifier:
                keyid:31:EF:CB:6B:90:66:B6:32:B4:3B:90:67:CD:AF:1E:20:6E:47:FD:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/046edc58-3188-4be4-bad7-643a593bcf38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:92:14:d0:cd:0d:ca:80:aa:ae:dc:56:9e:1b:1f:c3:c9:31:
         b3:5b:f6:47:cc:d0:0c:1c:22:d7:c0:3e:e2:d5:34:ad:cc:42:
         90:01:59:49:d7:1f:ca:86:54:05:1b:72:09:76:a2:cc:70:8f:
         1a:e1:30:26:64:91:d3:c0:96:ea:27:c2:0b:37:72:f3:cb:31:
         fe:c4:89:b2:3e:91:06:63:98:f4:eb:33:d5:84:53:bd:6c:1a:
         dc:e7:04:28:51:87:e5:6f:16:85:a8:0e:05:84:cf:02:64:00:
         58:89:74:c4:51:17:d1:5f:17:0f:79:ed:21:3d:0b:0d:94:ec:
         57:e8:a2:8c:c3:cb:2b:28:06:71:82:f2:87:08:b8:16:60:96:
         2e:b0:f7:d3:a4:25:c3:bd:c0:13:cb:97:2b:36:0b:43:5e:24:
         2f:76:af:c5:f0:a7:8b:7e:02:b9:1b:41:6d:e5:79:e9:c1:dd:
         14:f9:6b:f1:7f:05:4b:33:80:e7:37:ec:a0:cd:8f:c4:56:cf:
         ef:6b:9e:d6:cb:8d:c4:9f:8f:90:36:18:65:a7:8c:ad:76:84:
         39:a8:ef:51:55:be:be:5a:4c:0b:57:8d:9c:20:a4:f6:7f:e4:
         a3:cc:79:8e:44:9c:21:d2:7a:b7:fa:9e:03:89:9f:c2:be:e1:
         87:5d:62:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:54:17 2025 by rpki-client