Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/012032c5-cec8-312c-b752-a6bb310540f2.roa
File:                     012032c5-cec8-312c-b752-a6bb310540f2.roa (raw, json)
Hash identifier:          m5ivozub2TZiNvwVkZcGGa7atU+ygZGJAU6UtC6c3Gs=
Subject key identifier:   32:47:DE:D4:F2:F9:9F:6C:76:D4:E3:F5:78:10:E6:78:1E:42:FB:9C
Certificate issuer:       /CN=c75c2a49-d4ec-49ef-affc-f07717c14231
Certificate serial:       010D0C9F4328584A549B1D47376721AF64D16740
Authority key identifier: 1D:AB:A6:60:5B:91:EA:C1:D4:F7:19:D1:23:FC:C0:38:C1:5A:12:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/012032c5-cec8-312c-b752-a6bb310540f2.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     7029
IP address blocks:        170.205.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:1d:47:37:67:21:af:64:d1:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c75c2a49-d4ec-49ef-affc-f07717c14231
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=8b4e8ca1-312d-4b06-b0c7-b4f08e756da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:39:10:36:d7:8d:d0:9b:f0:29:af:cd:16:50:
                    29:ee:06:c1:e1:05:6d:01:7e:bf:4e:df:40:60:e3:
                    7f:a4:5e:2f:40:b2:fa:0a:39:69:ad:bd:12:08:5f:
                    d9:bd:2a:65:ac:75:71:c5:19:5e:6c:f7:67:ec:85:
                    ee:53:46:bd:46:f3:72:8b:71:0a:c6:21:ea:20:87:
                    e9:b0:ce:f0:31:b7:26:bb:65:79:9e:b1:d7:23:7e:
                    de:1b:8d:1b:dc:03:4d:de:14:d4:23:01:31:9d:78:
                    38:89:7d:6d:3f:25:93:f2:a0:94:07:72:9d:a0:46:
                    b6:ca:2d:9d:62:62:27:c8:6c:cd:b8:45:6d:59:da:
                    55:84:ed:19:01:71:a9:df:d2:3c:67:26:86:da:e4:
                    8b:05:cd:60:01:b4:90:8b:9e:ab:45:1d:25:e0:5f:
                    3f:34:2a:1a:9c:50:fb:38:6d:15:98:8e:2a:ce:d9:
                    94:c1:bd:e3:82:ae:d0:2d:82:6c:1e:0a:c3:fc:32:
                    7b:05:a1:9a:21:f7:ed:f0:a7:48:50:73:77:fc:85:
                    03:a9:48:1e:2d:cd:47:36:82:d5:19:09:6d:63:2f:
                    d7:b7:f1:f6:d5:e3:b6:22:50:14:7c:6b:d6:21:95:
                    32:a1:fd:0e:e3:42:ad:1f:7a:2f:37:f8:24:f5:b0:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:47:DE:D4:F2:F9:9F:6C:76:D4:E3:F5:78:10:E6:78:1E:42:FB:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/012032c5-cec8-312c-b752-a6bb310540f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.crl

            X509v3 Authority Key Identifier:
                keyid:1D:AB:A6:60:5B:91:EA:C1:D4:F7:19:D1:23:FC:C0:38:C1:5A:12:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0b:b9:31:1f:09:95:75:5e:9f:db:bd:e1:89:50:12:a6:65:
         be:09:20:ae:53:39:1c:72:83:50:07:9a:bf:94:48:62:c0:fd:
         a1:18:39:07:44:a1:90:ea:17:e5:e0:2f:63:8a:12:bf:90:1c:
         44:fd:ac:a2:a7:81:42:17:28:20:9a:e0:f1:d7:56:7d:ad:47:
         2b:d0:f8:76:48:d2:86:57:89:94:75:b4:cc:1f:40:d3:f8:c6:
         fd:9a:a4:8b:3c:9f:3d:9f:2d:b4:95:30:fe:23:ea:aa:8a:66:
         4a:13:39:bd:ea:4a:01:bc:1f:3d:2d:54:75:d5:91:55:e5:70:
         73:80:80:05:99:b4:1e:76:ce:86:3b:ce:be:d8:d7:18:e5:bc:
         07:a0:83:82:ed:22:8a:87:d6:22:f2:42:94:86:9d:39:40:50:
         c7:73:01:32:14:b3:fb:3e:5e:67:7a:b4:5f:39:6e:b3:e9:69:
         3b:34:3a:4e:f1:98:74:b9:ef:43:67:ec:9f:7a:46:ce:3e:3e:
         46:d1:b1:d6:89:c7:17:03:bb:5e:ee:7a:4d:09:f1:b6:b9:0c:
         7a:fe:38:59:1d:43:a6:9a:71:f6:f1:37:9a:b2:87:05:ff:69:
         20:d7:ac:0b:df:37:0e:30:92:6f:72:aa:62:e7:7d:52:ed:25:
         65:64:53:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:24:06 2025 by rpki-client