Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/e5655dc3-73c5-3131-8e9f-364ab5c2e0ee.roa
File:                     e5655dc3-73c5-3131-8e9f-364ab5c2e0ee.roa (raw, json)
Hash identifier:          GJdFoCtrhmi/fh++vcrHe1fAGrwZyTA7ysCaY8f3lKA=
Subject key identifier:   21:30:15:BF:A1:79:D6:41:E5:95:14:80:A5:09:78:E6:B4:5C:5C:C7
Certificate issuer:       /CN=aa6b84f9-271a-420e-904b-b25ba5f52b05
Certificate serial:       010D0C9F4328584A1248E6478C63CD9B11106780
Authority key identifier: 7D:4E:33:3E:10:FB:69:81:93:75:C1:D6:C0:3C:17:7B:F9:4B:5D:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/e5655dc3-73c5-3131-8e9f-364ab5c2e0ee.roa
Signing time:             Tue 03 Jun 2025 18:52:12 +0000
ROA not before:           Tue 03 Jun 2025 18:52:12 +0000
ROA not after:            Mon 01 Sep 2025 18:52:12 +0000
asID:                     395155
IP address blocks:        198.179.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/aa6b84f9-271a-420e-904b-b25ba5f52b05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/aa6b84f9-271a-420e-904b-b25ba5f52b05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:12:48:e6:47:8c:63:cd:9b:11:10:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa6b84f9-271a-420e-904b-b25ba5f52b05
        Validity
            Not Before: Jun  3 18:52:12 2025 GMT
            Not After : Sep  1 18:52:12 2025 GMT
        Subject: CN=818b0453-31b4-44cc-b754-9d22d55e7fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:57:c3:e5:16:84:96:46:cd:eb:78:2e:26:
                    39:dc:73:56:41:33:0d:90:3a:79:c1:2c:2e:31:4c:
                    ab:b6:75:16:ae:f6:3e:ea:35:a1:9e:65:e5:b3:ec:
                    fb:3f:01:78:24:04:35:d8:ab:03:04:40:b8:fb:4f:
                    e4:77:00:66:65:5b:77:5d:af:9f:1e:f5:81:dd:35:
                    85:04:01:b3:d2:fa:7b:8e:dc:d9:05:7c:ca:19:7d:
                    0d:94:7d:d5:d0:9a:bc:33:ea:84:1d:b7:35:06:32:
                    c1:dc:d3:87:0b:82:cd:f8:b1:ff:1d:46:11:ba:5c:
                    ac:4a:f6:7d:48:2d:87:55:b8:f8:cb:6e:51:25:0f:
                    9e:fd:7a:0e:cd:63:bc:04:de:ef:70:21:7a:69:d3:
                    04:54:16:01:c0:65:b0:23:8a:c0:07:2c:4f:44:4b:
                    5c:24:f0:36:a2:e1:fa:e0:5d:f0:71:54:85:31:a9:
                    d6:58:db:41:18:f1:f9:f4:9c:f6:6f:86:df:27:2b:
                    6b:ef:b2:db:8f:c5:1b:ba:35:40:dc:2e:e3:85:86:
                    1d:6c:3a:78:de:a6:7b:ba:aa:17:81:8c:51:f5:79:
                    b3:43:95:c3:c9:0c:b1:00:6d:8c:b7:50:e4:dc:7b:
                    31:1a:e1:af:22:96:e0:6e:78:34:77:55:fe:ce:96:
                    f2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:30:15:BF:A1:79:D6:41:E5:95:14:80:A5:09:78:E6:B4:5C:5C:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/e5655dc3-73c5-3131-8e9f-364ab5c2e0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05/aa6b84f9-271a-420e-904b-b25ba5f52b05.crl

            X509v3 Authority Key Identifier:
                keyid:7D:4E:33:3E:10:FB:69:81:93:75:C1:D6:C0:3C:17:7B:F9:4B:5D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa6b84f9-271a-420e-904b-b25ba5f52b05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:27:3a:b2:c0:85:a9:11:a1:27:4a:ac:4c:0d:fe:43:06:05:
         d2:71:a7:b7:0f:2d:65:41:8c:df:60:54:82:68:c2:07:31:5b:
         6a:0b:44:98:19:68:ab:21:79:e2:46:b1:33:3e:ca:0c:dc:0b:
         76:26:66:6f:26:1f:b5:7c:18:86:84:69:87:ce:79:5b:60:8b:
         79:53:48:74:fa:06:cc:86:f5:d0:94:c8:ea:51:fe:a4:36:77:
         35:56:ab:f5:4d:d7:b5:f1:e4:f5:c7:88:75:a2:c6:43:47:aa:
         d9:ae:09:5b:f2:fc:85:21:0e:57:90:de:0e:d9:67:6d:02:de:
         f2:06:4c:31:be:3a:c3:76:9a:77:64:6f:6e:07:5a:f0:da:c2:
         a4:ed:8e:e1:f5:46:91:1f:ad:a4:2a:0e:66:54:5d:7e:04:5a:
         91:46:67:12:67:cb:47:df:2f:58:a5:f5:11:35:c1:0a:64:a8:
         7b:31:ba:fa:41:34:32:3a:a3:3f:cb:b8:33:43:7e:86:5a:84:
         72:06:a0:e1:5d:cb:2e:e8:ec:50:02:e2:a4:14:8d:ba:b7:cd:
         6b:c5:f6:a4:eb:09:0d:c0:6d:96:68:92:e6:dd:3c:5c:f9:c3:
         87:9d:11:d5:da:73:39:d6:dd:2b:09:77:f8:cc:ac:44:ee:ac:
         e6:d5:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:49:37 2025 by rpki-client