Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fef62001-6028-3bd1-8a07-e4214fc1d3c9.roa
File:                     fef62001-6028-3bd1-8a07-e4214fc1d3c9.roa (raw, json)
Hash identifier:          X94WjE7uX/L2WVSqzbaFsjSTbjnTNm0fJmyxPyVGOPM=
Subject key identifier:   80:62:E3:DB:5E:70:DE:E5:01:55:03:BB:9D:4B:B1:C6:C1:9F:DC:D0
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499AF47BBC1E310B684468E800
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fef62001-6028-3bd1-8a07-e4214fc1d3c9.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        173.181.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:7b:bc:1e:31:0b:68:44:68:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=f9400354-b1eb-4a18-b377-343628bacc54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:92:59:5b:84:8f:7f:95:5b:e2:11:4c:42:
                    46:c4:c3:bf:68:3d:5d:5f:a9:83:43:82:03:a1:eb:
                    7f:19:22:86:4b:da:82:1e:8a:ce:12:85:86:bf:6d:
                    2d:cc:6b:65:6d:4b:64:be:2e:e2:72:d9:05:79:99:
                    2c:ea:31:7e:a6:00:51:11:57:10:ab:d2:42:21:36:
                    1f:ef:07:92:e2:78:9d:d3:b3:8a:64:be:cc:94:12:
                    51:6f:3a:5d:1f:94:1a:3d:ca:91:da:00:9b:e8:1b:
                    5e:a4:89:97:ca:77:73:d1:76:f8:4f:e5:0c:23:eb:
                    39:49:a8:4e:9e:b9:cd:83:68:f0:7f:f0:dc:41:69:
                    6c:73:32:bc:60:d0:f1:70:d5:38:60:6e:ec:1c:a4:
                    70:cb:71:fe:57:bc:a5:3e:0f:e4:6d:ac:0e:c7:ff:
                    3a:e7:2a:7c:01:ba:f3:a7:fd:b2:b4:f6:af:7a:52:
                    e1:36:0d:9f:8f:80:95:6e:c4:8e:d4:67:a9:24:87:
                    1c:86:6e:8f:94:58:59:cf:ac:1a:9d:49:33:22:7e:
                    98:41:76:15:59:28:78:31:64:8d:4d:55:d6:40:d2:
                    04:7a:ef:a1:07:fe:91:2c:25:7f:2a:f3:20:ad:f5:
                    d0:c8:11:79:7f:af:33:15:6a:a5:50:30:f0:ad:f6:
                    56:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:62:E3:DB:5E:70:DE:E5:01:55:03:BB:9D:4B:B1:C6:C1:9F:DC:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fef62001-6028-3bd1-8a07-e4214fc1d3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.181.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:eb:1e:d9:c9:b1:3f:19:e4:d7:fe:e6:cd:c0:22:7a:60:de:
         15:3b:c1:8c:d2:51:f1:68:30:e2:85:ee:c0:7c:94:f5:e0:f2:
         f8:ab:f0:df:c7:cf:cd:7e:83:ba:54:72:18:9d:3b:58:5a:2d:
         6f:90:2c:00:57:3f:c5:c0:35:86:76:78:6b:8c:a0:32:f3:fe:
         96:21:2e:38:30:fd:75:42:31:70:2d:37:d5:b8:b1:5f:d3:fb:
         2a:1d:2b:74:30:ab:6f:cc:0d:e1:8f:b1:62:fd:3c:5c:85:f3:
         46:fa:b1:dc:ef:93:90:b0:22:12:64:97:75:1e:ca:22:57:fe:
         99:a9:ef:99:e1:86:da:13:b4:30:2f:6a:98:06:61:50:89:d5:
         6e:8b:38:e8:f1:6c:58:24:c8:f3:a9:ac:52:d5:ae:51:fc:4c:
         23:db:1b:a6:92:31:4f:e7:f3:e9:3f:58:a7:aa:02:07:bb:87:
         76:50:8b:a6:b1:74:dc:42:9d:10:e4:d0:f4:30:76:6e:d9:d1:
         08:be:6c:80:06:7c:b6:5f:25:2b:f8:d4:cf:b8:63:20:ad:20:
         9a:a6:ee:3e:12:19:b6:5b:18:95:94:22:cb:39:09:d7:71:b8:
         72:b8:d3:f3:a4:bc:9f:e7:7f:fb:64:53:2a:1b:43:e1:a2:61:
         ae:06:4f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:46:44 2025 by rpki-client