Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa
File:                     a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa (raw, json)
Hash identifier:          c0r7xYs2kSJSFv4RvKm/ZQ5lR9aiNDFZO82wvyiZX+4=
Subject key identifier:   F5:AF:5C:44:76:F1:4A:18:4F:FF:A2:D7:38:9B:60:50:F0:E5:97:1B
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584A43DB03666DB57D0938198BE8
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     5769
IP address blocks:        144.172.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:03:66:6d:b5:7d:09:38:19:8b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=f4023ad5-5de3-4d52-8ee1-61ef51ccd2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:0a:c3:e7:b8:95:1b:fa:95:96:74:94:c5:
                    64:e7:e2:a6:80:dc:9e:a8:03:9b:8e:3b:f4:06:48:
                    97:a4:c0:bc:bc:a0:66:66:82:3c:ca:64:8b:10:e8:
                    aa:2f:57:56:4a:38:c6:90:aa:ad:bd:2e:17:11:97:
                    54:5d:b9:0d:f6:da:69:fd:fe:93:62:8a:3f:03:18:
                    38:76:23:fd:47:37:97:03:ed:26:be:38:27:bd:45:
                    75:d0:d0:5d:e0:cc:2c:7b:7f:e1:78:72:2f:80:76:
                    1c:31:18:f0:d8:e5:a8:39:03:f4:44:3e:bd:79:ef:
                    97:ff:bf:cf:bc:7f:2f:d1:d5:37:29:cb:f5:13:10:
                    2e:1d:f4:8b:55:35:95:cf:fb:9a:ae:02:13:da:aa:
                    3f:e1:74:30:ad:db:77:e9:17:18:f6:c7:c5:c2:02:
                    1d:f5:f5:e9:2c:fd:2f:e8:c0:bf:5b:0a:0c:4b:ff:
                    7a:02:8c:4a:70:87:c0:74:fc:28:30:ce:0b:9d:de:
                    31:55:07:d5:b4:34:87:83:81:11:70:b8:eb:6d:21:
                    c7:1f:a3:28:9a:13:b6:dc:6f:d2:e8:ff:f1:aa:a4:
                    9f:00:7c:79:9e:fb:fa:db:c3:c2:a0:15:57:03:59:
                    0e:94:4f:a0:2b:f2:4f:f3:04:3d:dd:42:d7:83:f9:
                    72:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AF:5C:44:76:F1:4A:18:4F:FF:A2:D7:38:9B:60:50:F0:E5:97:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:5d:00:a3:b6:3c:56:e8:c1:e2:9f:10:36:b7:55:84:b8:24:
         b2:b9:3b:00:29:bc:f6:af:bd:90:8d:41:3a:2b:d3:b4:50:3b:
         e8:17:4e:60:ef:15:4b:e4:f9:4b:3e:a3:87:40:c1:2e:c5:ec:
         3b:6a:23:d1:d2:db:8f:d6:9f:d6:da:27:6f:55:d2:36:01:a5:
         34:f5:45:e5:86:ec:cb:8e:8b:ca:ff:28:df:0a:f5:dd:e5:43:
         bf:ec:93:58:af:54:6f:43:81:17:3a:8c:39:ad:be:c9:d8:6d:
         44:01:17:86:4f:82:0d:78:c1:c9:c6:f6:19:ca:01:bf:7b:11:
         f6:ef:a3:e8:7e:9a:4c:1b:45:12:bf:b6:77:38:1c:65:39:00:
         1d:67:bc:4f:0f:2a:aa:62:55:92:ee:16:bd:02:1c:f6:f7:69:
         e1:4f:85:59:9b:3c:22:33:22:26:d3:0e:9a:95:1c:74:63:35:
         dd:55:8f:25:3f:25:dc:0f:af:34:f3:36:9f:ed:bc:ad:f1:ea:
         8c:85:c0:53:00:b0:23:bd:1b:7e:29:7a:c9:47:8d:e3:02:b5:
         bc:c3:a3:77:03:a9:ff:a6:21:b1:ac:e2:a8:f1:59:30:e9:3a:
         e3:f8:c7:03:21:5e:6f:69:8c:ab:bc:09:ea:e4:9d:df:af:65:
         a4:39:71:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:54:13 2025 by rpki-client