Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/e24e3271-0614-3bb1-911f-071e1fdad8b6.roa
File:                     e24e3271-0614-3bb1-911f-071e1fdad8b6.roa (raw, json)
Hash identifier:          Lx/KkiTIWpCHUBRSFFuuIUIUGmDGLAsh59rAJAVOfiQ=
Subject key identifier:   A6:79:7F:62:5D:E0:48:34:04:5B:3B:C4:93:C4:41:B1:0A:E1:53:59
Certificate issuer:       /CN=ef4796fd-6bef-4a60-aeea-580d00ee4335
Certificate serial:       010D0C9F4328584A3A157BB81B5A08F52BF18D08
Authority key identifier: 86:AD:5E:34:50:E6:09:22:8D:AC:4E:97:03:60:0F:4B:11:6C:3B:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/e24e3271-0614-3bb1-911f-071e1fdad8b6.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        199.165.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/ef4796fd-6bef-4a60-aeea-580d00ee4335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/ef4796fd-6bef-4a60-aeea-580d00ee4335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:7b:b8:1b:5a:08:f5:2b:f1:8d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef4796fd-6bef-4a60-aeea-580d00ee4335
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=79e7ee3b-a221-4e4e-a52b-15d7e5856a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c0:da:1b:39:90:f2:79:fc:de:05:9c:26:df:
                    70:34:b9:9d:1d:ef:01:7f:4c:59:ba:7e:6b:ff:40:
                    06:91:70:76:8c:30:af:54:f7:2d:cb:81:8e:de:22:
                    51:62:2d:b0:c2:7b:ea:08:0e:65:3e:53:cb:d4:60:
                    b1:a2:a5:c0:b0:4e:31:c8:c2:2c:37:44:72:a3:14:
                    de:74:80:2c:0f:63:e2:7a:ae:6a:58:28:9a:b9:39:
                    9f:d5:57:c1:23:13:2b:5f:fb:e1:d3:ce:af:5b:83:
                    c7:99:ec:f3:ec:55:4d:14:37:7e:b9:18:92:b8:a9:
                    c3:17:ac:f1:bb:fa:91:2b:49:37:03:c0:44:af:db:
                    0b:2e:1c:62:89:29:f6:c5:00:2e:1a:e8:3f:15:ff:
                    ef:a5:de:98:08:04:e6:d1:b2:f4:43:07:db:e6:83:
                    25:32:ea:26:c5:2f:93:ec:53:7d:33:ca:bc:29:a8:
                    11:89:73:8d:cf:5a:3c:b1:08:95:28:30:fa:66:93:
                    82:10:82:87:52:94:92:9b:dd:28:35:dd:87:ba:f9:
                    0e:2e:0a:9f:4c:d6:40:1f:40:2b:0f:75:2d:92:8d:
                    e7:1c:2b:fc:75:60:7f:c7:47:dd:ef:9d:f9:e8:9b:
                    a5:2b:a5:5a:cd:12:74:87:4a:58:e8:09:55:56:6c:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:79:7F:62:5D:E0:48:34:04:5B:3B:C4:93:C4:41:B1:0A:E1:53:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/e24e3271-0614-3bb1-911f-071e1fdad8b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/ef4796fd-6bef-4a60-aeea-580d00ee4335.crl

            X509v3 Authority Key Identifier:
                keyid:86:AD:5E:34:50:E6:09:22:8D:AC:4E:97:03:60:0F:4B:11:6C:3B:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.165.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:48:3c:e6:65:03:08:83:bd:73:45:7a:e8:2d:a2:7c:ab:ac:
         be:0a:6f:f9:43:ed:4a:dc:1c:f5:36:aa:7d:a1:8c:ad:88:8f:
         1b:6f:f9:10:41:ca:58:d8:5a:70:ff:5e:69:84:50:bd:9a:7f:
         5d:2a:3e:22:59:a1:8d:49:2a:ef:87:14:1a:05:d4:2b:56:3e:
         e3:63:62:1d:88:19:01:4a:5c:a3:54:dc:7b:47:24:5f:a5:66:
         cb:ad:96:36:43:fd:f7:e0:bb:41:f1:53:7c:0c:eb:03:20:8a:
         4b:28:43:d9:af:c1:13:8e:91:93:a7:53:96:e6:ca:0c:24:2d:
         be:b4:25:25:33:81:e9:85:61:d7:77:10:a0:cd:45:2b:90:b4:
         14:f9:bd:13:03:1a:9d:c4:d0:1f:64:ab:27:78:d1:a6:40:a3:
         7f:f0:db:4a:3f:30:29:33:82:ad:40:62:d9:b6:26:2f:ca:b1:
         cc:42:44:35:23:9f:9b:5e:06:12:75:68:e6:f3:f7:d6:d3:a0:
         35:f7:e9:9c:da:4b:ff:23:e5:04:45:e0:0a:e6:a1:9e:ed:da:
         a2:49:b7:ea:69:3b:ee:62:3b:be:8c:30:f9:b0:fb:98:fa:e7:
         ad:01:02:99:7b:0b:c5:57:d2:36:52:5a:fa:aa:ad:89:b7:54:
         e6:96:fe:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:31:58 2025 by rpki-client