Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/c5492a25-61e2-3397-848b-141163ce58ef.roa
File:                     c5492a25-61e2-3397-848b-141163ce58ef.roa (raw, json)
Hash identifier:          JHp+TdeY+zh5rB/JTdi7Jh/e1VwPIaEbnIo6u8/+09c=
Subject key identifier:   47:A6:91:5B:46:19:1A:FB:E1:4D:76:EE:4D:47:97:FC:60:A2:AC:EA
Certificate issuer:       /CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Certificate serial:       010D0C9F4328584A2ABAE6A1066855019C259E00
Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/c5492a25-61e2-3397-848b-141163ce58ef.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     397511
IP address blocks:        128.211.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e6:a1:06:68:55:01:9c:25:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=bce77596-10cd-4886-996e-e6765bb26995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:38:1a:e9:12:e2:56:c8:38:6d:8b:d2:f2:
                    8b:e4:bf:38:5a:e9:54:55:09:53:0e:93:ce:42:75:
                    e4:ff:67:8e:12:f0:59:5e:a8:8c:52:ed:dc:a1:5c:
                    8d:35:3a:71:ae:1e:b0:6f:4b:8c:6f:89:5f:97:7f:
                    41:60:ab:fb:10:96:e7:ef:52:2e:77:23:2b:1a:6c:
                    84:20:57:51:93:dc:38:43:fa:b1:13:b9:0b:27:76:
                    9b:dc:d7:f5:d4:68:89:d9:51:18:36:6d:ef:1b:cb:
                    0b:4f:35:40:d3:6d:d1:57:87:2e:fc:83:1b:7d:23:
                    dc:df:09:14:f2:0e:e1:54:3c:94:47:30:4c:a5:91:
                    ea:82:da:17:a5:ec:c8:8c:94:76:50:77:ad:96:8d:
                    3a:ba:d8:7d:21:ac:bf:20:d3:26:e8:e2:b1:38:a2:
                    7a:eb:24:af:4e:c8:1a:16:6f:2a:da:fb:94:2c:af:
                    63:01:29:d7:dc:8f:ed:e9:e3:c2:43:d4:d7:8d:7c:
                    34:3d:49:7f:44:9c:0b:c2:b0:f3:7d:46:c0:f9:8d:
                    8b:eb:53:49:ae:ca:83:ab:be:fa:a9:f3:f3:0c:8e:
                    c9:ad:4f:af:51:be:07:f6:ff:a0:0e:64:05:c9:13:
                    ea:b4:2a:c7:f1:a6:b3:5b:3d:61:13:87:3d:a3:dc:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A6:91:5B:46:19:1A:FB:E1:4D:76:EE:4D:47:97:FC:60:A2:AC:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/c5492a25-61e2-3397-848b-141163ce58ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl

            X509v3 Authority Key Identifier:
                keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.211.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:7a:a2:8b:13:ff:30:8e:c6:25:8f:30:a1:0a:08:be:8e:1a:
         47:91:23:5a:8f:2a:9d:1b:39:80:bc:56:59:a0:14:b5:e1:37:
         15:6a:e2:31:3c:d1:14:1f:5b:e1:6d:7e:00:49:60:b4:c3:86:
         9a:34:57:0d:b3:b9:99:df:1a:01:6c:34:58:6c:b9:63:2f:55:
         97:74:cb:3c:f1:32:54:a5:0d:88:5d:f5:02:4b:98:99:47:eb:
         05:19:b1:04:77:8a:f2:1a:73:59:dd:ae:ab:19:83:16:8b:a6:
         82:09:5e:b7:8c:8c:8a:6d:be:9c:97:3f:2b:56:f2:95:52:1b:
         57:46:1d:8c:ef:8a:26:77:97:b3:d7:9f:c2:5a:65:1d:a8:ba:
         ab:a8:63:4b:cc:c8:61:2f:89:09:f8:8c:57:d1:e1:b5:8d:7e:
         96:8f:07:4c:cb:68:56:6a:9e:3b:02:26:73:5a:22:82:55:c7:
         1e:c4:0b:9e:e7:de:19:92:41:d3:75:a0:3d:aa:46:e7:68:ad:
         e4:8b:19:96:ae:84:ef:7e:49:ed:a1:5f:e8:87:d3:23:f4:12:
         e4:75:4a:4c:f9:77:57:9f:f2:a7:c4:05:07:a3:9b:76:44:00:
         1f:e4:da:02:1f:08:58:72:f8:01:4e:79:10:e6:73:dc:53:60:
         25:d2:47:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:58:48 2025 by rpki-client