Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa
File:                     5d321907-381d-32af-ad76-b3fd1b984280.roa (raw, json)
Hash identifier:          9kDcIVWFHZlKtLFgqnHmVosZqt4GetbGXdiX4SKwrv4=
Subject key identifier:   6A:83:44:0F:65:8A:F1:30:1B:C7:53:24:53:2E:BB:A0:B8:23:9C:EC
Certificate issuer:       /CN=a110574b-b0a8-4116-8fba-63e69eba9d92
Certificate serial:       010D0C9F4328584A58CAF7CDC0B88341797B9500
Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     31942
IP address blocks:        199.102.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:ca:f7:cd:c0:b8:83:41:79:7b:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=22d8fff4-a293-4456-b313-9d05eed60135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:40:02:05:d8:34:4d:a4:04:27:01:1f:60:9f:
                    b3:7f:f6:c5:be:d5:ae:59:e5:12:d7:91:dc:45:88:
                    ea:c9:75:8e:8f:fc:e3:a2:83:ee:a9:57:57:fe:cb:
                    42:e6:94:ce:7f:37:df:bb:30:a7:89:1b:b2:9b:59:
                    b4:0f:10:45:f3:93:fa:41:52:82:74:9e:0b:62:75:
                    04:ea:06:b9:b3:00:58:d0:3d:5b:ab:d3:dd:37:20:
                    3b:ef:66:9a:70:1b:da:55:c5:eb:3c:50:4e:8a:17:
                    b2:c0:8f:6d:53:18:f6:6d:c7:d8:1f:3a:bd:58:0e:
                    68:c5:bc:a7:f5:fd:e3:e3:b7:a4:37:ae:88:5a:b5:
                    51:b3:cf:ad:19:67:78:ed:29:72:6f:37:27:66:88:
                    ed:a6:c3:68:60:f4:1c:ea:65:26:06:cd:f6:0a:f7:
                    52:31:ba:73:00:c6:b7:e2:b8:de:45:38:33:33:b9:
                    ed:81:ff:86:21:17:b6:be:97:66:8e:20:00:46:83:
                    4f:ff:e3:c6:26:6c:fd:5e:e3:76:cb:6f:ee:a7:cf:
                    d5:46:75:c3:fb:a2:87:c2:78:ed:fe:af:24:ef:1d:
                    1b:92:fc:b3:c5:b2:5d:2b:6f:14:89:6e:15:16:d5:
                    72:fd:dc:4c:da:29:cc:f3:e6:8a:f4:a5:81:32:46:
                    31:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:83:44:0F:65:8A:F1:30:1B:C7:53:24:53:2E:BB:A0:B8:23:9C:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl

            X509v3 Authority Key Identifier:
                keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.102.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8c:1a:72:d6:6f:87:5f:c3:4f:e9:e0:53:04:6f:9e:fa:29:
         99:5b:e0:86:75:c1:74:5b:10:50:aa:d7:8e:ec:df:36:a5:ae:
         38:40:90:64:5c:87:f8:d6:86:c4:26:49:b9:4a:ea:04:ac:12:
         20:8d:c0:2c:5e:fc:c8:de:ba:a0:2b:88:e0:0f:27:8a:b0:69:
         c2:b3:cf:a7:e3:89:27:66:ce:88:2a:e8:09:55:22:25:0c:13:
         b7:6f:27:43:41:1a:23:c5:64:f7:54:c0:2f:f1:d5:4f:1d:18:
         3e:a0:f9:15:0d:b9:a1:2e:18:d0:a7:58:52:75:69:f1:f2:53:
         05:ec:ab:e9:0e:2b:fc:9f:df:29:34:eb:2e:b5:44:a6:3d:f8:
         b2:87:0c:f7:9d:21:21:92:11:92:9b:03:5f:73:7e:71:27:f2:
         93:c3:13:42:17:d3:18:1e:32:6b:77:e5:2c:f5:e3:7b:b6:88:
         0a:fa:d1:a0:1d:fe:e8:3c:b6:45:e4:0a:4d:08:e8:ab:54:7a:
         39:c4:b3:9e:1a:85:42:3e:8e:26:55:c1:25:a3:68:ab:48:34:
         0a:2f:30:94:dc:6b:53:23:de:07:9b:9b:63:2f:f3:b7:e6:cf:
         87:6d:63:fb:4f:8b:ad:42:1f:cf:73:7d:fd:05:02:b4:7f:f7:
         cd:25:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:48:59 2025 by rpki-client