Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/14548d7d-2b08-3b90-b195-5519a199be26.roa
File:                     14548d7d-2b08-3b90-b195-5519a199be26.roa (raw, json)
Hash identifier:          NML9FnmegXjAw+IRW3xc6dDuRVgcJbMvG5DkB2OsCFE=
Subject key identifier:   15:EC:F2:37:5E:F9:7B:44:1E:A5:C3:C7:59:0D:E2:FC:83:4A:2B:8D
Certificate issuer:       /CN=2dd62bbc-ac6b-44a9-9097-0de386a3ef8b
Certificate serial:       010D0C9F4328584A612B13F970C93521316C5D60
Authority key identifier: 2A:90:BB:00:F0:A9:B6:C5:A8:E4:97:F5:1F:6F:C5:6E:67:47:98:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/14548d7d-2b08-3b90-b195-5519a199be26.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     1050
IP address blocks:        136.175.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:13:f9:70:c9:35:21:31:6c:5d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd62bbc-ac6b-44a9-9097-0de386a3ef8b
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=0c64e1ef-00a9-4df1-b9ba-a4dcc027aa28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5b:1e:b4:8e:9f:90:ac:e8:44:8e:83:67:ff:
                    7b:e3:33:3c:cd:00:ea:4e:0b:7e:77:83:8f:cf:fa:
                    7c:3b:eb:f3:e4:30:a5:fe:15:23:a4:9b:3c:1e:04:
                    52:cd:bc:3b:c4:b5:d8:ac:5c:23:92:d7:5a:6c:3b:
                    e1:e2:f8:d7:a7:ea:b1:68:88:fb:ec:d1:66:df:d2:
                    85:f8:c1:b2:3a:1b:cb:15:3d:99:22:60:63:ac:a2:
                    a1:fb:30:84:0f:31:6c:9c:41:e5:c3:d9:51:73:4d:
                    1d:62:d1:0b:3b:67:62:72:ca:08:24:56:72:40:43:
                    ce:07:9b:da:16:1f:aa:91:74:60:41:ae:66:53:9a:
                    18:86:cd:df:f2:ff:6a:39:fa:39:79:5d:8e:f4:db:
                    97:a8:5f:87:55:bc:e4:fa:6c:11:79:71:7a:ff:68:
                    1f:05:7b:2a:aa:a6:f0:de:fa:eb:1e:bd:00:13:a1:
                    a0:63:99:38:19:c6:5b:6c:0a:73:32:c9:22:7f:9c:
                    0a:c7:33:77:54:d5:af:df:5b:a0:83:d6:88:f0:cc:
                    9b:40:d1:27:b5:8b:f0:a3:01:30:c6:4a:5a:c7:0e:
                    7f:46:8f:04:74:70:fa:fe:39:75:f8:32:8a:3e:a4:
                    d7:aa:1c:0b:ed:17:83:80:01:19:f6:f2:7f:a9:d3:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EC:F2:37:5E:F9:7B:44:1E:A5:C3:C7:59:0D:E2:FC:83:4A:2B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/14548d7d-2b08-3b90-b195-5519a199be26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:90:BB:00:F0:A9:B6:C5:A8:E4:97:F5:1F:6F:C5:6E:67:47:98:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f1:79:45:db:5e:17:b3:6f:6b:29:73:fe:c9:7b:1b:e6:ad:
         4f:9e:a4:bb:e0:52:35:7b:57:76:c5:f7:c0:74:ee:9f:b9:f1:
         34:65:28:35:bd:a6:ab:3e:c1:8a:8e:be:4c:81:cf:7c:90:d0:
         a8:bb:e3:37:7e:10:67:d1:90:57:25:4e:16:df:e7:af:4d:19:
         3d:b0:38:71:cd:40:c9:67:12:6a:fa:c5:b4:56:d4:d2:e4:28:
         8b:80:4d:7c:32:2c:fa:f8:a5:e5:f3:f1:89:43:c2:4a:ce:02:
         88:9b:c7:98:8b:ee:84:1d:e9:4f:63:a0:50:73:b4:a0:24:13:
         12:e1:40:4a:66:75:8e:cd:0b:69:0f:dd:62:ce:56:33:05:c8:
         55:2f:26:9a:e3:9a:9d:46:86:68:f9:4f:da:77:e7:ce:b3:e1:
         aa:e5:4e:ad:8d:49:30:c6:e1:4a:31:e4:a1:7e:65:bd:0e:be:
         75:8c:6e:99:34:8b:a2:b8:6e:8b:0b:d7:24:3e:b7:32:24:74:
         8e:37:b9:b6:b8:e7:cd:ed:c6:4c:98:9e:e7:ab:8e:bf:ec:b8:
         a2:7b:2a:08:0c:68:e4:ed:1d:5f:ff:f8:a7:57:0e:ef:30:59:
         7f:b5:ee:63:b1:6a:cc:54:3a:87:11:fd:31:be:09:ed:68:6d:
         5a:5e:2e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:42:29 2025 by rpki-client