Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/3f8ae222-36cc-34fe-ab48-7592c1d4a082.roa
File:                     3f8ae222-36cc-34fe-ab48-7592c1d4a082.roa (raw, json)
Hash identifier:          Sg+QatO07oIUk6HNCRJ71aWdftqySbLs8kaDFcBNi5s=
Subject key identifier:   03:FE:8D:4B:93:3C:62:10:F9:46:7E:87:69:CB:1D:21:A2:EB:C7:78
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F4328584A5220EF177236BD4615A86480
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/3f8ae222-36cc-34fe-ab48-7592c1d4a082.roa
Signing time:             Thu 26 Jun 2025 15:43:24 +0000
ROA not before:           Thu 26 Jun 2025 15:43:24 +0000
ROA not after:            Wed 24 Sep 2025 15:43:24 +0000
asID:                     64267
IP address blocks:        199.255.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:52:20:ef:17:72:36:bd:46:15:a8:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Jun 26 15:43:24 2025 GMT
            Not After : Sep 24 15:43:24 2025 GMT
        Subject: CN=d5106554-387c-4c30-a5fe-d7ba7209fe98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:48:62:c3:c9:1b:63:dd:98:89:25:22:ce:5a:
                    72:48:fc:7c:55:0b:16:2a:5b:04:f3:9c:2f:16:7e:
                    c7:be:47:d5:dd:26:a8:84:05:1c:9a:c2:da:b3:89:
                    df:08:a6:d5:25:e8:b7:51:06:e1:96:d1:70:f8:7a:
                    3d:b4:f1:67:59:dd:95:24:f8:7f:30:5e:89:cb:d6:
                    78:49:f4:30:f4:ea:a0:44:7d:85:c5:bb:6e:2f:e5:
                    57:72:03:a0:57:97:ca:df:78:f4:63:e7:41:68:7f:
                    1a:b4:ab:f9:23:2f:f7:80:c1:fd:60:6f:5e:ed:28:
                    11:b0:8a:49:85:79:37:1d:0a:51:71:2b:ca:43:08:
                    54:99:c2:d8:6f:bd:6e:31:8e:02:83:30:03:08:47:
                    5f:b7:02:9a:0f:19:e6:86:fc:69:24:98:da:d5:bb:
                    52:b7:30:b2:cb:d7:cd:0c:0c:f7:23:eb:d9:65:e7:
                    67:c9:d6:76:e9:8b:7c:50:70:9c:7d:a3:9f:54:80:
                    f0:a4:4c:f0:d9:a0:a4:52:f8:0f:56:2f:63:c8:ae:
                    ff:52:6e:d5:ee:21:f5:72:31:4c:10:e4:96:7a:33:
                    23:99:b4:49:27:0a:a4:6d:c7:14:b3:b7:a4:da:d2:
                    70:d4:61:cf:25:a3:f2:6d:2c:72:9f:37:c4:34:4b:
                    83:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FE:8D:4B:93:3C:62:10:F9:46:7E:87:69:CB:1D:21:A2:EB:C7:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/3f8ae222-36cc-34fe-ab48-7592c1d4a082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:77:40:32:80:e6:4a:4a:97:4f:d1:70:ec:23:00:ef:3a:16:
         2f:a5:d0:10:5c:01:7b:ce:70:c2:d9:d8:13:e6:7d:5a:13:99:
         99:dc:ff:8a:e0:5b:6b:f1:ae:9c:40:03:60:79:b3:08:f2:bb:
         6d:2c:d5:b4:36:b9:e9:75:af:7e:68:ee:a7:a0:17:61:32:85:
         ff:fe:e6:33:71:b4:c8:ff:1b:40:76:d4:47:2d:6f:e6:bb:32:
         9c:1c:c5:ba:ff:f6:93:2c:e1:30:d7:c2:85:09:d1:ab:c5:f9:
         ea:cc:27:af:7c:b4:a4:33:b1:33:24:15:db:48:15:5d:70:52:
         b7:44:7e:29:9a:b6:f4:ba:c9:59:b3:13:84:9b:b8:e0:47:65:
         63:78:b9:07:08:a2:49:3f:9a:7c:7c:9c:5e:58:1e:2c:b2:3e:
         b1:0b:4a:2e:c3:e2:e8:41:19:8d:65:cf:9c:47:77:0b:bd:57:
         cb:72:ec:1d:d1:f5:3b:56:f4:e1:f6:24:4f:37:61:c5:34:f3:
         ea:aa:91:2e:83:52:23:4f:09:8d:d0:28:5a:e7:d2:ad:5e:76:
         8f:ef:7f:2d:5a:bb:6c:c7:f6:1b:2f:2b:cd:1b:78:71:a6:91:
         fb:12:e1:79:14:c8:5e:41:96:2f:8b:e7:c2:37:14:ec:b3:99:
         9d:57:b4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:24:45 2025 by rpki-client