Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa
File:                     1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa (raw, json)
Hash identifier:          38HHZYoQ4WRgRCEokgTS1uXQ2jl/sUfBRa/ncfnXCAQ=
Subject key identifier:   91:7E:04:D5:14:7E:7A:88:E8:DA:39:EB:DB:7C:23:C1:76:06:C4:93
Certificate issuer:       /CN=1665ff60-5477-4f7b-afe6-350c2fd5af8f
Certificate serial:       010D0C9F43285849F2E52A2F73F67488576B1180
Authority key identifier: 19:07:59:66:D4:29:5B:B7:68:E9:C7:B0:5A:0B:2D:32:7E:46:AA:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     397553
IP address blocks:        172.111.60.0/22 maxlen: 22
                          172.111.60.0/24 maxlen: 24
                          172.111.61.0/24 maxlen: 24
                          172.111.62.0/24 maxlen: 24
                          172.111.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:2a:2f:73:f6:74:88:57:6b:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1665ff60-5477-4f7b-afe6-350c2fd5af8f
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=2e188209-2953-4fa9-97cd-ac24499933ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:7f:df:bd:b6:c6:68:61:66:79:a9:b7:5f:
                    6c:ff:2b:a1:af:62:3a:ae:26:0a:2c:ed:5d:5d:40:
                    8a:82:ec:b2:1b:f2:f4:36:77:b4:ed:19:13:96:da:
                    d0:35:8b:41:07:ac:32:fd:a0:05:12:df:9f:53:43:
                    f3:b3:80:7c:92:2b:d1:0a:bd:d4:d8:ae:c5:4f:58:
                    f4:ff:50:2c:1c:6b:0e:a8:dd:41:77:a3:1a:c3:06:
                    f0:dd:9b:3b:a3:a0:e9:62:b6:99:fa:1e:e0:0d:d5:
                    c1:c2:9e:aa:17:84:c9:cb:05:02:62:ab:8f:91:80:
                    fd:ac:f1:85:c6:4a:98:a4:03:bc:73:69:64:55:cd:
                    13:a3:86:fa:99:a0:8a:90:0d:d0:61:6d:60:5a:ca:
                    d1:9c:b0:40:89:b4:b2:91:3a:c5:32:52:9c:3e:19:
                    23:9e:2d:81:72:df:ee:14:ea:77:a3:76:0b:25:ee:
                    e4:8a:aa:85:15:7b:40:27:77:14:ef:61:0a:0d:dd:
                    ff:5f:44:43:69:5e:b2:dc:e4:b8:aa:4b:f0:79:24:
                    b2:99:b7:8a:18:eb:80:2a:74:52:c0:d8:07:c0:5b:
                    bc:e5:cf:54:81:12:1b:35:b8:dc:5c:d5:3c:9e:e7:
                    df:18:0b:cf:15:72:ec:cc:68:08:bb:01:26:16:bd:
                    05:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7E:04:D5:14:7E:7A:88:E8:DA:39:EB:DB:7C:23:C1:76:06:C4:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:59:66:D4:29:5B:B7:68:E9:C7:B0:5A:0B:2D:32:7E:46:AA:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a5:f1:c7:2f:5f:3c:6b:27:18:09:4c:20:44:97:d8:1c:a2:
         79:71:af:23:e4:ca:08:7c:5d:4b:0d:78:86:35:46:2a:0c:b6:
         70:3a:00:bc:04:57:4c:80:96:f5:7e:c2:53:38:43:81:ef:84:
         c3:36:4b:1f:13:fe:90:1c:a2:59:dd:43:ba:b0:5c:f0:d4:df:
         21:d5:50:de:40:ba:62:70:ae:15:89:2e:6c:e0:60:7c:aa:53:
         76:d2:e9:d9:89:fe:00:c9:8a:e4:91:91:6d:e0:68:8b:d6:2c:
         10:ee:ef:11:40:1d:cc:04:ec:b0:12:d5:41:72:59:51:6c:0a:
         e6:0d:d0:00:dc:0e:0a:4e:74:a6:25:85:70:16:21:7c:a7:db:
         b3:b9:c7:51:2c:c9:87:e3:ed:63:44:3a:07:5d:c7:d4:65:e1:
         65:29:ef:f2:8a:89:94:f2:f4:28:40:bc:f4:c6:45:99:20:64:
         12:c2:ce:40:f0:e8:bf:d8:4c:b0:6e:d3:ca:08:a7:c4:8b:ba:
         96:77:f0:e4:56:85:4d:c1:1e:35:3f:51:c1:22:79:9d:f9:0b:
         30:aa:86:cf:f3:36:d6:f9:85:3a:0e:7a:3e:e1:3e:62:c1:7b:
         20:25:85:21:8f:4e:b5:26:7d:82:d6:01:42:d4:36:f4:4b:5c:
         4a:78:36:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:58:00 2025 by rpki-client