Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/c079fba8-549d-3ddd-9036-68e9dd0e76b9.roa
File:                     c079fba8-549d-3ddd-9036-68e9dd0e76b9.roa (raw, json)
Hash identifier:          uEOLX5yoAUXPtgeipRxGQehUF7OPkc2KWM19pAkoEqg=
Subject key identifier:   38:42:82:43:72:73:F3:31:71:53:87:2A:7A:35:22:D2:36:66:25:B8
Certificate issuer:       /CN=77258d44-b15b-4045-943b-356f0becdaa2
Certificate serial:       010D0C9F4328584A45403C0BC43C093FD3900FD0
Authority key identifier: 6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/c079fba8-549d-3ddd-9036-68e9dd0e76b9.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     399554
IP address blocks:        170.117.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:3c:0b:c4:3c:09:3f:d3:90:0f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77258d44-b15b-4045-943b-356f0becdaa2
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=28b73684-3c21-4d90-86c9-7f260c03a7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4c:57:dd:ef:a4:b9:12:7f:85:69:01:9f:96:
                    4c:db:00:e1:14:52:6c:9e:da:a2:51:45:53:43:28:
                    ff:97:f1:95:83:4c:3a:41:28:b0:6c:a4:6d:d8:e5:
                    83:8e:06:a6:cc:d9:07:67:68:af:5c:1d:11:25:76:
                    8f:ee:d2:78:78:f4:15:80:a7:75:dd:54:60:dd:12:
                    cb:19:c6:a3:5f:4a:e7:b5:bb:e0:51:27:64:5f:fb:
                    8c:f2:d0:2f:4a:f6:99:bb:fe:83:11:cb:cc:1e:45:
                    ea:94:5b:bc:af:e2:39:4c:95:4a:cc:00:5e:75:97:
                    7c:ce:74:8f:d7:ee:75:66:b1:7e:6f:cd:cc:b0:54:
                    49:cc:d5:e6:c7:a8:31:1a:6d:49:35:a9:af:e7:73:
                    3b:66:8a:8b:36:8a:52:98:69:6b:d2:a4:72:d3:e4:
                    50:d3:cc:3d:ea:42:8f:c6:26:49:02:4a:75:21:a7:
                    a3:fb:1d:76:0f:69:4e:02:90:93:51:32:e6:7d:41:
                    7a:06:c7:1a:d5:14:79:56:dd:1c:81:f1:2c:82:fd:
                    d7:4f:14:65:85:90:f4:76:91:ae:2c:52:8f:78:88:
                    9d:8f:44:ad:a8:99:0a:42:7e:9e:74:2f:99:2e:cf:
                    da:72:8a:df:35:2d:0f:51:e7:3e:72:8c:fb:cb:78:
                    18:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:42:82:43:72:73:F3:31:71:53:87:2A:7A:35:22:D2:36:66:25:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/c079fba8-549d-3ddd-9036-68e9dd0e76b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl

            X509v3 Authority Key Identifier:
                keyid:6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.117.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:91:19:d8:99:eb:73:af:8b:57:73:76:66:9c:e5:67:1b:cf:
         8d:09:78:eb:d1:db:c8:36:6e:68:de:64:55:e6:5a:44:dc:37:
         df:60:4c:b1:82:d6:2d:72:a8:49:90:95:af:b1:7a:2b:2d:6c:
         e9:01:58:75:ee:ec:3c:57:cb:b2:0c:31:78:42:c9:55:52:de:
         6d:8f:c0:42:ae:6d:35:1d:c4:9d:72:d2:6c:92:5e:d8:7d:c4:
         91:1c:fc:c3:68:3c:d8:0a:15:f6:44:64:2a:f4:76:2a:39:06:
         c1:17:67:3b:d3:e7:78:61:3e:46:0b:25:ba:7f:2e:79:96:3c:
         67:c2:70:e8:b8:e0:c6:5f:68:ab:e1:4c:69:96:ed:b9:8a:9b:
         e3:c8:3e:53:87:b4:9a:50:c9:f7:82:95:f4:db:65:fb:69:d3:
         80:16:9a:0f:fb:aa:15:47:12:f4:f3:22:20:0a:b5:a9:24:93:
         55:da:99:da:38:2d:4c:bf:ff:82:b4:c6:8a:a1:a9:a7:eb:73:
         7d:3b:a2:c5:be:7b:9d:8e:8b:2e:30:2a:b0:36:c3:da:b7:70:
         63:e0:d0:9c:c9:0d:37:56:b2:63:d4:cc:8b:a1:08:f4:8c:5f:
         a9:b1:d0:ce:f6:98:91:b8:ab:ef:a8:6d:08:63:93:2f:8e:4a:
         50:cc:18:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:01:26 2025 by rpki-client