Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c3122433-5fe5-3274-962b-d349ef6c9114.roa
File:                     c3122433-5fe5-3274-962b-d349ef6c9114.roa (raw, json)
Hash identifier:          mD0ENpnvXjNMGj/2DU6NE6ybURMXeFx31bZaI/ddIaM=
Subject key identifier:   0D:89:4B:3B:6A:1B:B2:81:FD:D9:87:B7:D7:9F:6E:30:48:B1:CD:04
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F17FEEF6E5670EEC60FA5EC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c3122433-5fe5-3274-962b-d349ef6c9114.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397218
IP address blocks:        209.173.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:ee:f6:e5:67:0e:ec:60:fa:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=36cf4744-d30a-478c-9959-111523af262c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:e3:b0:3e:fb:a7:96:03:ea:21:1b:8d:fe:
                    e6:be:03:a8:2c:4b:cf:6b:d6:1e:34:af:00:e8:5c:
                    f7:89:c5:ff:a8:81:2d:f1:a3:21:0b:a9:3c:60:14:
                    c7:34:ad:fa:1a:ca:6f:7e:4d:be:4b:85:30:bc:44:
                    12:15:5b:d3:0a:76:6d:10:1d:7a:94:47:dd:18:34:
                    46:a4:87:cd:54:52:d5:e5:77:a3:98:89:4b:f1:ba:
                    65:e0:a9:b7:d2:27:21:c2:a3:4e:d6:a0:9c:60:b3:
                    34:1a:f1:bc:27:00:e2:11:35:55:3b:72:17:39:b8:
                    f3:89:b6:76:78:bd:8d:50:8e:49:b9:cd:aa:6f:da:
                    28:d2:7b:47:c6:22:a6:48:12:a1:b8:52:64:bf:0b:
                    01:94:4f:ba:3d:82:e5:bc:5b:9c:30:4b:ff:a3:35:
                    ec:6a:8d:c0:68:b2:94:a9:12:91:47:67:60:0f:a7:
                    eb:41:56:96:2b:1c:90:71:47:3a:54:2d:1c:22:65:
                    51:e3:9b:cc:7e:86:0b:9f:77:8c:aa:6e:de:fb:48:
                    dd:c2:b0:20:38:bb:4c:07:cf:87:40:67:21:2b:ca:
                    bc:73:ab:dd:11:32:12:bf:4f:3a:53:07:c1:89:be:
                    56:3b:32:ba:58:82:46:ec:0b:12:9f:05:3a:c1:66:
                    f0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:89:4B:3B:6A:1B:B2:81:FD:D9:87:B7:D7:9F:6E:30:48:B1:CD:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c3122433-5fe5-3274-962b-d349ef6c9114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e0:1e:e4:7d:58:ed:af:dc:c0:8d:51:7c:8a:60:96:69:99:
         03:02:1c:04:c6:73:e7:32:01:a7:91:c3:e1:5a:ca:6e:01:ac:
         91:7f:8d:63:52:53:f6:06:12:0c:87:98:99:92:de:b8:4a:a2:
         cf:0d:56:f2:f0:4b:25:ca:09:90:a6:9e:c9:c3:ac:87:16:de:
         dc:21:d9:ac:c8:95:9e:90:df:fc:4a:ab:9b:d7:fd:06:e5:8d:
         98:de:83:17:b3:a1:a5:90:bc:b0:35:a7:5d:23:db:87:e1:b8:
         fb:7f:ce:4d:a5:a1:6d:58:71:d4:e6:f5:d9:31:d8:f5:05:9c:
         5d:30:e9:a9:6a:8f:2b:f8:04:4e:67:aa:93:a8:71:17:6f:d2:
         a0:3d:50:b5:8c:6b:31:4a:60:2c:60:d0:00:4d:54:89:28:88:
         d1:ad:69:b1:cf:b3:b8:f3:ba:9a:47:2d:04:fe:f0:47:2f:43:
         99:5d:3c:45:a3:3f:e6:c2:60:69:29:19:58:cc:42:3a:92:d8:
         d5:85:e8:41:2e:d8:7d:8f:4d:79:c1:64:dc:99:0b:b8:37:5d:
         f4:ae:f0:a5:d0:29:b2:0c:e6:94:93:a8:31:b0:09:ea:4b:41:
         84:5b:e6:63:97:43:42:f3:f7:e9:56:fc:68:b7:bd:12:c6:16:
         84:0e:9d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:26:43 2025 by rpki-client