Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e30e365f-7059-338b-a386-05d6c191965e.roa
File:                     e30e365f-7059-338b-a386-05d6c191965e.roa (raw, json)
Hash identifier:          jpy2swWFgT0xVcKNSKEK7FUCCZKJxd4H5+eTYyG27qA=
Subject key identifier:   C2:34:B8:59:97:84:83:A7:67:7A:B1:05:E8:C8:A9:22:CE:CF:F1:2A
Certificate issuer:       /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
Certificate serial:       010D0C9F4328584A43DAFFF589A7EF63F5C8C840
Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e30e365f-7059-338b-a386-05d6c191965e.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        172.86.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:ff:f5:89:a7:ef:63:f5:c8:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=3c5c3ea2-124b-45a6-b138-bb7336c17cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:61:a0:83:cb:18:f9:cb:5c:47:a6:11:18:b1:
                    00:73:e7:c3:d4:99:27:e5:36:6e:9a:53:f1:56:f5:
                    ed:78:fb:0f:29:0c:f7:40:c6:8b:c8:78:20:47:2c:
                    8a:f6:5f:13:d6:04:8c:01:d6:10:33:05:52:0b:63:
                    a8:78:c8:d5:03:4c:f5:dc:e3:ff:c7:0c:76:57:a6:
                    67:9e:cd:0a:b1:ea:d6:09:90:03:01:71:b7:42:0c:
                    b3:f4:19:e7:8c:2a:a8:d2:bc:7f:75:70:d5:79:ee:
                    83:e3:ad:24:06:06:d3:33:3a:15:90:b2:d3:2f:d5:
                    ea:b2:49:41:2b:28:17:fd:e5:74:a7:a1:63:73:99:
                    ea:8a:85:b7:5d:c1:5c:f7:43:a7:16:50:f7:0a:63:
                    8d:4b:a9:e4:1c:b5:97:61:77:48:d9:3b:60:0c:c8:
                    f2:92:eb:73:b7:72:5b:d3:a5:c9:b7:91:ea:f4:4b:
                    0f:cf:ca:ba:ac:30:d3:4a:17:3a:a3:c2:d2:a8:19:
                    67:c3:d4:75:f0:01:7e:42:6e:91:84:06:ae:5a:64:
                    58:2d:0c:66:dc:63:b4:2c:28:10:9c:88:58:e0:fa:
                    bf:70:ac:5e:9f:23:81:5b:bb:72:29:ac:7b:f7:3f:
                    a9:96:7d:43:7b:22:fc:78:cb:cb:21:17:c6:20:3c:
                    30:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:34:B8:59:97:84:83:A7:67:7A:B1:05:E8:C8:A9:22:CE:CF:F1:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e30e365f-7059-338b-a386-05d6c191965e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl

            X509v3 Authority Key Identifier:
                keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6e:a0:d0:42:f0:21:2a:be:9f:94:94:0f:4f:fc:9c:f5:82:
         1e:c9:be:dc:e1:3e:09:25:28:4f:b7:dc:20:3a:fe:8b:5d:77:
         7d:56:66:7a:90:30:06:58:82:02:5f:69:cc:8d:06:ac:87:f4:
         39:d4:8e:87:63:16:87:1c:f1:28:d9:e3:4f:0d:7b:a5:28:d0:
         99:90:1e:cd:7b:20:87:f8:1c:c1:ff:b5:52:b8:13:1a:c7:0c:
         27:4f:bb:27:b0:90:13:00:4f:69:0e:96:63:a2:bd:f0:00:4d:
         2e:86:e0:27:4f:82:c4:2b:89:97:43:27:92:91:ee:2a:52:43:
         2e:83:53:86:46:4b:18:a0:e5:96:78:5c:73:fb:b3:a2:68:17:
         fa:ab:cc:58:3e:91:11:cc:98:ec:7b:fe:e9:75:82:cd:8f:2b:
         9a:e4:3a:18:7c:1e:88:f9:e6:a2:e9:f3:f6:47:43:b4:ad:c3:
         4d:db:50:56:b1:44:00:5c:37:e0:d2:84:c9:2a:bd:94:b2:49:
         84:49:aa:2e:b6:d9:06:f2:91:06:0d:2d:53:5b:a5:5d:f2:08:
         1a:f6:c5:3a:30:81:85:71:2a:fe:14:87:17:e1:79:63:a1:f6:
         43:64:46:73:e4:74:de:b4:20:0c:5a:32:d4:38:5e:26:ac:d7:
         ec:73:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:58:40 2025 by rpki-client