Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/fc3f28f7-e231-3209-8777-75ef9c41b477.roa
File:                     fc3f28f7-e231-3209-8777-75ef9c41b477.roa (raw, json)
Hash identifier:          HXAMjl0QhMQCZu2giydo+FAzmtkQtB7i09zd1vWDqZk=
Subject key identifier:   23:FF:65:CE:F4:A6:E8:A2:3F:00:CB:BE:3F:38:18:96:8D:0B:33:20
Certificate issuer:       /CN=62ec8079-292d-409a-a736-bddf9af8d979
Certificate serial:       010D0C9F4328584A07D5331392107B84DB5B9B80
Authority key identifier: 4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/fc3f28f7-e231-3209-8777-75ef9c41b477.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     46353
IP address blocks:        199.231.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:33:13:92:10:7b:84:db:5b:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ec8079-292d-409a-a736-bddf9af8d979
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=feed7df4-81c6-4daf-9810-f7a9f5f92042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:fd:22:20:c3:7f:5f:ff:a7:46:0c:ff:d5:
                    fd:d4:94:87:e2:03:92:3c:c2:45:26:95:7f:1b:c4:
                    a8:79:6d:23:3d:0f:cf:b9:49:11:dc:96:c0:f0:39:
                    1a:53:6a:1d:87:11:0e:97:24:75:b6:f5:23:37:fa:
                    4e:04:40:93:99:65:50:89:47:3a:09:c1:5a:ac:e3:
                    2d:bd:eb:fb:f5:4d:c8:00:6a:e8:b8:cd:5b:e8:58:
                    bd:00:ff:08:57:44:75:89:e2:7a:23:58:07:6e:70:
                    f0:ae:ed:42:9a:f0:3d:71:5a:1a:3b:e1:92:8c:5c:
                    6a:89:4b:22:e2:fb:f5:ba:82:69:1d:82:1a:2c:bb:
                    f7:f1:58:a2:5b:39:69:d9:d8:99:7d:b7:00:d5:b1:
                    ef:a4:1b:25:71:33:f0:36:e0:7e:73:eb:d8:cd:34:
                    c3:5e:8e:39:9f:b0:5f:4b:7d:4e:0e:3f:e3:f3:72:
                    9d:59:78:2f:96:09:26:51:dd:9f:9b:dc:d0:3f:31:
                    bb:8f:7c:df:73:02:77:53:55:cb:73:30:27:f4:3a:
                    e3:84:e8:46:e8:27:7f:29:35:f1:b5:33:7f:24:a8:
                    df:98:f8:42:44:c7:ea:a7:47:39:bb:25:39:e4:de:
                    df:15:54:9b:42:14:ce:b7:71:f9:5b:87:5d:88:d8:
                    b0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FF:65:CE:F4:A6:E8:A2:3F:00:CB:BE:3F:38:18:96:8D:0B:33:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/fc3f28f7-e231-3209-8777-75ef9c41b477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl

            X509v3 Authority Key Identifier:
                keyid:4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1c:71:0b:a2:7d:fd:4e:5b:cc:d9:06:05:ec:47:ff:ac:b8:
         3d:14:e6:69:ff:b6:8f:b4:f0:11:b9:21:a5:cf:21:06:e4:87:
         0c:17:e9:c4:96:4e:44:07:1e:45:27:f4:16:f8:4b:86:fa:d2:
         49:ed:e0:69:1c:b6:d1:18:22:3b:7f:d6:8c:ed:32:4b:99:ce:
         eb:88:17:1f:e6:52:d8:79:07:bc:3a:9b:b8:67:1b:55:a0:d4:
         06:18:04:2e:b6:bc:19:48:a0:10:07:00:da:eb:f8:1e:17:55:
         58:1a:5a:93:69:0b:8c:e4:dc:7a:35:95:e2:aa:be:fe:3f:88:
         43:e6:ea:17:e3:48:e6:62:fe:a3:7d:f1:f8:9e:c4:01:a4:14:
         d1:33:94:14:59:f5:ff:f2:6a:4a:ca:5c:cb:2a:1e:5a:1f:23:
         67:a6:c0:2d:26:b2:56:71:5a:47:2b:f4:84:20:8a:6c:8f:71:
         80:17:5e:c2:81:68:22:12:64:e1:c5:db:e0:53:be:d8:8f:46:
         55:7e:05:90:e9:b5:91:32:0f:e2:f6:eb:79:5e:48:7a:ee:61:
         b2:2b:4a:34:a6:10:59:28:b8:e0:81:90:0b:5d:3a:69:d0:66:
         32:aa:0d:9b:54:cd:9d:2c:1b:a2:46:02:ea:69:44:b3:be:84:
         b1:6e:65:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:36:01 2025 by rpki-client