Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/afaa99ac-9444-373b-8b95-8e74320c2b99.roa
File:                     afaa99ac-9444-373b-8b95-8e74320c2b99.roa (raw, json)
Hash identifier:          cAvgeCX5v7dsVwwBqEEeK3aBJo+VhdLxiyQ6xxGlyfc=
Subject key identifier:   64:4A:AA:2A:66:D1:44:22:EE:36:E8:05:DC:7B:10:09:14:B1:9F:1F
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A49707D55E697C6FABEF712C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/afaa99ac-9444-373b-8b95-8e74320c2b99.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     54113
IP address blocks:        167.82.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:7d:55:e6:97:c6:fa:be:f7:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=20f998ff-d165-4f56-bc0f-8a63295ccb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:34:23:80:47:99:fa:55:51:f5:d2:f3:74:
                    3a:df:d9:33:e7:8e:73:b9:3d:29:3f:59:fa:3a:1b:
                    18:55:ce:09:dc:30:55:bc:71:25:93:6b:c0:8e:d0:
                    6a:7c:12:8f:4c:2b:65:e0:3e:42:bf:5f:ec:4c:54:
                    88:14:dc:ed:9c:06:22:c9:79:90:22:fb:1b:64:33:
                    c0:54:c8:d7:f7:5f:41:8d:34:a9:be:b0:ad:56:6f:
                    1d:6c:a1:62:21:d6:70:05:77:45:80:74:35:51:f9:
                    34:70:d6:5e:87:53:09:56:d9:bf:21:e6:79:07:25:
                    92:aa:20:8b:16:0f:b6:f2:b3:c8:9f:f5:56:3f:2b:
                    ec:fa:17:86:30:dc:28:5b:ee:1e:37:c0:c5:d6:57:
                    9e:32:42:13:78:73:92:e0:ad:b8:10:4a:55:1b:b3:
                    eb:48:f1:ff:34:51:f7:2b:80:ba:d2:61:fd:ee:a8:
                    7f:a8:9b:5c:75:9e:41:e7:33:1e:c8:82:b5:31:17:
                    be:2c:68:d2:d8:7c:15:92:e9:29:2d:1d:af:52:eb:
                    a8:af:c7:2e:5f:24:9e:71:25:c8:39:90:89:2a:ea:
                    86:c9:ec:40:22:85:9d:58:17:8e:de:37:7a:2f:d4:
                    f6:c2:c1:a3:b1:94:1e:01:46:1e:9b:aa:9f:ce:d8:
                    93:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4A:AA:2A:66:D1:44:22:EE:36:E8:05:DC:7B:10:09:14:B1:9F:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/afaa99ac-9444-373b-8b95-8e74320c2b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.82.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:23:04:5f:26:da:ca:b8:32:9e:9c:86:71:69:b5:1c:9c:31:
         99:a7:6e:96:d1:29:69:38:a5:d7:cd:4f:ba:ab:2e:46:c4:d0:
         8a:56:65:83:5b:77:84:63:04:8b:7a:64:cf:20:4c:ee:1a:37:
         46:f6:12:31:31:74:56:51:49:e2:5d:6d:b5:24:47:ae:7d:dc:
         82:d4:51:ce:b6:e5:13:b7:95:a5:3d:1f:98:5e:12:54:0b:28:
         a4:6c:87:e5:08:ef:5e:31:8c:ca:cc:86:3f:a0:3c:be:e8:76:
         2a:33:9a:01:7e:e4:b8:c5:da:e2:ae:0b:63:ae:92:04:6f:16:
         62:fe:da:18:0a:47:2b:1a:ae:e1:d3:f2:19:05:25:a5:1d:2e:
         3b:95:02:53:c3:d1:f0:64:a3:92:11:c5:c8:8b:f6:b3:91:a3:
         cb:dd:a7:d4:9d:e2:a9:92:ba:69:30:ac:db:ef:05:38:3d:11:
         7f:7a:3e:a0:1c:b2:a6:82:bb:ce:09:ea:77:f1:bb:dd:78:63:
         0d:1a:e5:b3:97:92:4e:27:1b:36:f1:42:2a:21:3e:34:d9:58:
         d0:3c:84:b3:c4:b1:7f:7e:3c:a8:d4:77:fa:e8:73:90:d1:03:
         18:1b:9b:e4:71:3f:3c:91:66:28:76:54:54:e7:04:fa:84:bb:
         39:49:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:03:45 2025 by rpki-client