Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3fa69f5f-3eab-334a-b72f-f556121b7e40.roa
File:                     3fa69f5f-3eab-334a-b72f-f556121b7e40.roa (raw, json)
Hash identifier:          LhTvuwfKc+9KRwTJOKBDOrnGwV9Xp/m9TzJ7h4UzQgo=
Subject key identifier:   50:25:3D:BC:F8:54:DB:BE:9B:DA:45:16:51:9C:78:EC:DC:B9:8D:22
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584A43DB0349BCAF3C1D1094D380
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3fa69f5f-3eab-334a-b72f-f556121b7e40.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     5769
IP address blocks:        137.175.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:03:49:bc:af:3c:1d:10:94:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=9182bb45-362d-433c-8012-a4bf5ae46e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e1:cd:24:9b:e3:19:1c:96:ad:07:7c:55:20:
                    0d:9c:17:e3:15:bf:b5:5e:f2:be:94:24:2a:ec:ad:
                    d8:f6:73:44:90:51:cc:86:ad:60:37:1a:a3:43:d5:
                    0c:fe:1f:69:56:e8:4b:2a:1b:48:7d:1d:ea:a6:65:
                    5d:1a:f3:37:30:6e:70:29:25:fd:c2:22:ac:7a:59:
                    7e:67:d0:5e:32:d2:69:45:d5:57:75:a6:fc:f5:40:
                    3e:df:c1:f1:b0:a0:0e:2d:56:97:d3:c3:90:32:bc:
                    1a:a6:d2:f9:cc:38:da:75:19:40:10:1d:56:f8:96:
                    40:ed:3d:7b:c6:75:49:9d:b8:23:20:37:c5:0c:1b:
                    7e:10:2b:df:24:c2:0a:df:22:b5:8c:18:6d:43:f8:
                    33:bd:40:cf:d6:2d:b8:99:c0:6c:31:9f:f0:15:b3:
                    3d:10:19:4e:f8:35:4f:1b:ae:0a:b8:2c:fd:3e:f5:
                    16:b0:06:37:cb:78:76:d8:6b:a9:ef:09:03:9b:b5:
                    07:77:a6:ff:6e:48:92:39:d2:1b:a1:6c:e0:32:cf:
                    08:ad:4e:e7:21:08:13:80:74:5a:28:b8:7f:4b:ee:
                    f5:1e:25:0f:68:41:55:36:b8:56:76:43:ce:2b:10:
                    33:9c:25:87:57:fe:50:92:a3:5b:7a:f1:c3:f7:9b:
                    ec:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:25:3D:BC:F8:54:DB:BE:9B:DA:45:16:51:9C:78:EC:DC:B9:8D:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3fa69f5f-3eab-334a-b72f-f556121b7e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.175.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:80:88:43:fd:44:23:6a:e0:aa:20:07:a4:33:b3:64:41:4d:
         cd:f6:74:cf:3f:dc:67:1b:6f:13:60:f8:76:38:71:19:93:42:
         ce:9d:f4:2c:c5:ca:ae:2e:50:b7:7d:9d:f7:cb:03:dc:1a:00:
         66:f6:2d:93:cf:23:44:ac:74:1e:34:0a:5b:75:8f:f8:01:80:
         0f:f0:12:8c:65:05:16:6b:a8:a8:94:1f:b1:7f:1c:43:e4:d9:
         97:f5:19:47:a2:3a:03:4f:eb:37:b5:08:fd:62:5b:02:2e:c1:
         86:b3:89:f6:3e:f7:c3:da:a9:0f:b8:bf:a2:69:a9:03:ff:9f:
         61:1d:e4:be:13:05:bc:28:48:a5:24:f6:c4:e7:da:a7:de:ca:
         fd:1f:8b:d6:cf:50:32:18:27:09:9d:b5:4a:ba:9d:26:fe:21:
         7f:6b:ff:86:e1:fa:61:d5:2d:92:2a:d0:43:09:c1:25:c1:4b:
         e5:32:47:20:ff:36:f6:dd:9e:50:ea:49:d6:02:c3:8a:ab:15:
         39:86:31:d6:b9:d7:61:d9:7a:a7:d2:2e:e0:8a:5e:82:11:4f:
         18:17:8a:6d:10:c2:39:c7:96:1a:c0:a6:c8:f6:5b:40:a3:9e:
         fe:72:c2:b1:1d:20:8a:be:56:d2:cf:2e:42:73:d2:41:7f:a2:
         5b:2d:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:54:46 2025 by rpki-client