Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/4a085550-2955-396e-9f1c-930034bb2305.roa
File:                     4a085550-2955-396e-9f1c-930034bb2305.roa (raw, json)
Hash identifier:          4kR9semQ1jEjysrfa8V7qZp/NecuM4ktQyvijSgPGB4=
Subject key identifier:   A5:DB:A2:6A:15:7A:A1:E5:A7:81:78:08:B7:83:0E:DD:FC:A6:54:0D
Certificate issuer:       /CN=992a069e-bb9c-4ed2-85de-84d226ccbba2
Certificate serial:       010D0C9F4328584A51D069B445E6EDB43158EF80
Authority key identifier: D1:7D:C7:A0:0B:B6:12:A2:2B:4D:AD:34:F8:33:88:B6:B9:37:E1:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/4a085550-2955-396e-9f1c-930034bb2305.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     14183
IP address blocks:        144.167.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/992a069e-bb9c-4ed2-85de-84d226ccbba2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/992a069e-bb9c-4ed2-85de-84d226ccbba2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:69:b4:45:e6:ed:b4:31:58:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992a069e-bb9c-4ed2-85de-84d226ccbba2
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=471a1531-8e70-4c8d-bca8-378b58aa00dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:c3:66:4e:fa:b8:5d:29:ce:1f:3d:05:1e:
                    79:89:b0:60:85:fd:04:bc:e5:b0:56:1a:df:55:d6:
                    50:51:f6:78:c0:14:c5:3e:e8:51:f0:9f:c9:d0:16:
                    2f:2e:a6:6e:3a:15:98:c6:5e:b8:d6:a0:54:ce:b6:
                    cc:7a:52:d8:32:93:c1:50:73:c4:3f:80:82:3c:57:
                    cf:dd:48:5c:fd:9e:9c:74:80:33:36:92:fa:d1:cd:
                    6d:c3:c2:01:48:a9:85:2f:56:01:c0:f0:90:4b:f2:
                    fb:01:42:dd:46:6f:6f:20:b5:0e:97:0b:b4:55:a3:
                    33:32:f2:a6:65:7f:6b:95:a4:22:a2:7c:d8:0b:71:
                    be:f6:b2:56:4c:22:26:79:66:29:60:1e:ef:a0:4c:
                    80:17:a8:7b:67:85:5c:20:35:d5:2d:a9:ad:d3:f3:
                    47:e3:ed:a9:42:af:32:d7:8d:7d:e1:5e:28:2a:9d:
                    31:10:0b:81:89:90:bd:ee:a1:d3:a4:36:aa:81:93:
                    59:c8:79:e9:e3:c0:60:88:76:93:dd:98:45:ad:ce:
                    c2:45:53:cf:0a:96:cd:5a:5b:ab:71:df:ac:c3:17:
                    aa:66:89:4a:a2:be:79:dc:4d:d7:5e:f6:e5:20:97:
                    ed:a5:e2:7c:66:49:7e:a7:d2:f1:de:19:9d:c8:de:
                    d8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DB:A2:6A:15:7A:A1:E5:A7:81:78:08:B7:83:0E:DD:FC:A6:54:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/4a085550-2955-396e-9f1c-930034bb2305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/992a069e-bb9c-4ed2-85de-84d226ccbba2.crl

            X509v3 Authority Key Identifier:
                keyid:D1:7D:C7:A0:0B:B6:12:A2:2B:4D:AD:34:F8:33:88:B6:B9:37:E1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.167.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:08:c5:de:95:f2:65:08:17:f6:5f:8d:86:0c:db:14:c1:3f:
         9f:00:a0:e4:f9:73:1e:31:6b:8c:0c:f1:ff:c3:25:f3:b0:15:
         dd:d6:47:c7:ca:c8:12:42:eb:22:a2:8e:08:7f:7e:f8:09:22:
         d1:6b:5a:c4:64:61:37:1f:f6:28:a9:d1:20:a8:6b:9b:27:59:
         08:e1:81:1d:d9:6e:68:48:fe:fe:b4:52:1e:5d:0a:ac:b0:32:
         0f:70:d0:a7:73:5b:71:75:1d:01:13:49:65:49:89:e3:7e:5a:
         12:f2:84:be:29:ea:0e:bf:a2:f5:a9:2b:d1:48:73:20:09:40:
         43:c5:22:8d:9c:d5:52:08:ad:02:87:78:ff:f1:da:08:99:17:
         e7:21:46:6b:b1:e9:ac:92:81:c5:2b:e9:92:1c:47:c1:eb:2e:
         c9:ea:0b:3d:c1:d8:4c:9c:81:84:d5:cf:e7:17:7f:30:bf:7c:
         d2:a5:ef:a4:0d:7f:56:07:72:4a:4c:5e:93:95:ea:cd:91:b0:
         39:fb:9d:e2:27:82:6d:79:ee:3c:35:11:ab:04:54:92:03:1d:
         a3:8e:d1:a3:af:14:27:2d:75:ab:a0:0a:51:50:46:18:53:e4:
         97:b2:fe:c2:d6:27:a1:ef:e1:4d:de:ca:81:03:ba:2a:5a:e2:
         e4:be:1e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:10:23 2025 by rpki-client