Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa
File:                     4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa (raw, json)
Hash identifier:          Y3TooOF9g7m5lXZTBzFtsx52jtlXG4bG8VkVVOZHeW4=
Subject key identifier:   3F:DE:F0:DD:0D:75:98:49:C1:A5:27:AF:BB:EE:27:AD:F7:7B:E3:E5
Certificate issuer:       /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial:       010D0C9F4328584A3E459F3C59EE279F1CFCCB80
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        199.187.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:9f:3c:59:ee:27:9f:1c:fc:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=d32860f6-7776-492e-be08-993ab7d1bd39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fc:69:52:7d:4b:8d:95:9a:9e:fa:04:b9:e5:
                    30:8b:65:29:7a:6b:53:ec:d4:d5:55:42:bb:1e:61:
                    de:5b:36:b8:c7:21:06:fc:90:fd:3a:1a:4f:f1:e2:
                    3d:eb:8f:72:77:28:9c:17:d2:32:23:9a:d3:70:c4:
                    e4:b6:31:47:33:ed:81:cd:37:ea:ab:b6:18:34:ae:
                    d0:67:21:58:53:61:eb:60:39:ce:30:c0:c7:66:ed:
                    d9:2f:80:bf:3e:48:f4:19:2d:fb:e5:64:e8:f1:a2:
                    f2:0f:78:4b:e9:0e:3f:8a:b5:40:90:0c:a4:18:3a:
                    e2:7f:14:86:de:d2:22:4e:ba:a0:63:6c:8d:80:34:
                    cb:cf:85:64:56:eb:aa:6b:68:9f:fc:6f:96:a9:92:
                    90:19:30:bf:51:8c:3d:55:6f:68:62:c7:5d:23:9f:
                    d5:c7:e4:b7:a5:ae:f5:f2:10:18:4b:0c:57:49:78:
                    49:9a:b9:0c:9c:d4:88:09:59:dc:a1:76:cc:81:d6:
                    ee:0f:95:51:36:6f:e5:99:c7:66:0f:ed:73:ae:ed:
                    fe:7e:2d:93:22:28:63:03:cf:87:04:df:bd:64:9d:
                    19:0d:30:dc:c4:ec:cb:21:e9:cc:88:fa:26:52:12:
                    6d:b4:13:87:0c:dc:9c:20:36:fa:58:ce:e1:92:42:
                    8a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DE:F0:DD:0D:75:98:49:C1:A5:27:AF:BB:EE:27:AD:F7:7B:E3:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:96:46:b6:83:ac:93:c9:a7:4a:5f:6f:1a:52:56:25:1d:39:
         9b:65:a6:5e:ea:ba:09:c1:8c:16:67:5f:fd:04:0c:21:ca:45:
         53:8d:93:bf:d5:c8:65:97:45:1a:f3:b6:ff:09:19:31:c4:d7:
         e6:91:c1:fc:bc:67:ed:1e:be:84:e5:4f:61:7c:8d:bf:ad:04:
         b7:43:1c:81:8c:0b:ef:72:8c:a0:ad:65:b1:3d:bf:b2:00:70:
         82:91:18:3e:0d:4c:b1:a6:0b:48:42:8b:6f:d1:bb:bb:a0:51:
         03:7a:fc:13:48:08:c9:e2:e9:9d:9a:c1:e4:31:53:a2:20:c0:
         35:65:01:8e:88:db:fe:c0:8f:57:13:97:e1:94:be:38:11:e4:
         a5:26:53:12:49:a4:41:8f:36:6b:ea:6b:95:33:55:a7:21:69:
         3a:30:a8:df:5a:72:6e:1a:a8:b2:f4:b5:b0:bd:96:ab:55:ee:
         67:f2:1e:0a:eb:83:4c:80:2b:1d:0d:a4:09:fb:fd:c8:a3:b0:
         20:48:88:e2:ad:b7:6e:e3:93:39:49:88:32:cb:ab:1a:99:f6:
         be:92:26:49:e1:4a:5e:20:64:b3:6e:75:f2:2a:70:28:34:d5:
         10:6a:71:b2:45:eb:75:d6:e2:ea:18:87:e5:af:df:1c:e5:2c:
         7f:5b:28:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:45:20 2025 by rpki-client