Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/68587886-0724-3bc4-a0f0-ac8745defcc4.roa
File:                     68587886-0724-3bc4-a0f0-ac8745defcc4.roa (raw, json)
Hash identifier:          ehktUCrUXpR1M+MKPToJ8G5lqTOxy3GJOCq3P4tdmEY=
Subject key identifier:   3D:30:5B:68:3A:1A:71:31:94:4A:26:0E:AB:BC:AA:39:7D:3B:72:24
Certificate issuer:       /CN=2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e
Certificate serial:       010D0C9F4328584A3A1586A9B93E9856AFAA2300
Authority key identifier: 5E:79:AD:88:68:E4:EE:11:F3:E4:DB:6E:8F:CE:E0:30:BE:FD:D5:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/68587886-0724-3bc4-a0f0-ac8745defcc4.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        172.83.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:86:a9:b9:3e:98:56:af:aa:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=d41645c2-733f-4267-b18d-7493be37ff2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:66:74:db:1b:af:11:b6:e6:39:bc:24:94:
                    97:12:77:d5:76:66:c4:27:fb:57:5c:99:93:58:dd:
                    2d:ed:b9:35:c9:24:92:4a:33:c1:70:9b:38:28:9d:
                    a2:36:31:b5:67:28:e1:37:ea:d5:b2:03:40:5e:1c:
                    79:2c:8f:71:93:eb:01:8e:27:5d:d0:74:ca:b0:29:
                    7f:2a:11:72:d8:e3:3c:e6:bb:2e:7c:2a:0e:48:1f:
                    f9:71:e1:d3:f0:14:ac:3a:82:13:c2:00:f0:58:0e:
                    a8:9a:ac:e2:c2:b7:17:50:56:89:0e:04:66:83:fc:
                    c6:8c:b7:0c:4b:d2:30:00:f4:fa:a4:0c:87:76:f7:
                    9e:83:5c:61:a5:33:87:b7:63:73:1a:37:49:c3:f8:
                    55:e7:e2:eb:9f:09:96:0a:51:88:e5:b8:75:9f:73:
                    70:3d:77:18:82:4f:bf:f8:9c:49:93:13:0c:06:85:
                    11:e3:9b:21:13:9e:dd:c9:ed:91:65:96:4a:0c:b5:
                    56:ec:4b:d1:67:45:c7:0d:24:67:ac:ba:44:fa:a9:
                    32:26:92:a1:38:00:c9:70:68:31:a3:b2:10:da:7d:
                    61:f9:dc:fd:eb:93:ab:a2:34:ef:62:95:db:ad:ec:
                    5b:3c:f7:d4:c4:10:6a:35:84:c3:3e:84:50:e5:03:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:30:5B:68:3A:1A:71:31:94:4A:26:0E:AB:BC:AA:39:7D:3B:72:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/68587886-0724-3bc4-a0f0-ac8745defcc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.crl

            X509v3 Authority Key Identifier:
                keyid:5E:79:AD:88:68:E4:EE:11:F3:E4:DB:6E:8F:CE:E0:30:BE:FD:D5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:aa:df:11:b1:03:80:ba:aa:08:69:08:da:27:b5:e1:08:f5:
         4f:05:8e:ab:f6:d0:2f:b9:4f:4d:ec:7e:a2:c0:b0:d4:ae:fa:
         ba:15:a4:42:12:8d:bb:b0:f3:40:90:46:20:68:c3:4e:c5:68:
         1e:e9:c9:69:71:29:70:9c:d0:75:ba:e3:8f:e5:fc:53:aa:95:
         60:ee:57:4b:3f:ef:4a:8e:23:6f:75:39:03:de:62:64:a6:65:
         df:28:fd:55:c4:8c:46:60:12:0f:c7:28:af:34:25:ce:cd:4f:
         d2:e8:1d:b3:18:09:8e:eb:03:b0:9c:e6:b9:6a:7d:57:07:41:
         cc:18:ff:24:be:d3:d4:7a:2e:4c:b9:21:13:2e:5b:c9:e1:d4:
         01:fb:1a:79:cb:83:64:1b:32:93:af:e3:25:4d:2e:da:3f:36:
         ce:43:41:6d:b4:fd:0b:37:9e:b0:ff:54:35:53:2b:9e:b6:f8:
         f9:56:e3:4b:c4:9d:4d:c0:ee:79:40:c0:7b:93:20:48:d1:76:
         7b:99:bc:08:71:04:06:a6:85:55:d3:d6:ad:d9:31:fc:4a:02:
         7b:4c:19:4c:80:56:c0:cd:34:a3:0a:72:06:16:0c:9f:f9:8e:
         61:e9:db:62:3e:5d:a6:fe:b9:f6:7a:28:bb:4d:e7:b0:d9:43:
         3d:2d:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:07:06 2025 by rpki-client