Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/bf7dc132-07f3-31d2-a98d-37e8dab67de0.roa
File:                     bf7dc132-07f3-31d2-a98d-37e8dab67de0.roa (raw, json)
Hash identifier:          ZyhcxPxu1Lb4s2voBJjE72KMVLK9v/3lW+3OGh7P/gw=
Subject key identifier:   5B:06:F3:9D:B4:FD:B3:70:59:6F:94:1B:CA:4C:39:35:08:69:41:9A
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584A45403688B82694CB903D6F00
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/bf7dc132-07f3-31d2-a98d-37e8dab67de0.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     5769
IP address blocks:        135.19.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:36:88:b8:26:94:cb:90:3d:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=27c32890-5b45-4e4d-ab92-8f9de2f460b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:de:bc:f4:19:8d:d9:dd:88:5f:a2:e0:35:
                    62:19:3f:1b:bd:43:2a:0b:e1:e9:44:72:2e:43:bb:
                    72:35:a5:ed:c3:e9:7f:80:df:ad:5b:b2:55:14:e3:
                    74:a9:14:23:12:6f:be:75:33:6e:87:13:20:f5:ea:
                    bd:5e:39:3d:12:c4:d0:b2:f3:92:6d:b6:6d:27:98:
                    50:27:11:5a:eb:ac:0a:4a:11:06:7a:90:3f:35:ca:
                    58:57:54:48:9f:cb:85:fa:a7:12:df:8d:98:a1:cb:
                    7b:e9:f4:9a:60:f8:96:dc:da:2b:b5:49:4b:ab:3e:
                    1f:fc:70:a4:c3:94:8d:6f:8b:a6:cd:3b:1c:a2:fe:
                    7a:d9:37:d8:ec:e5:c6:9e:4b:f2:d1:b7:23:7d:25:
                    22:84:1e:b3:24:e0:02:be:ab:bb:ed:fd:16:ad:e7:
                    f9:d8:45:e4:ca:0b:ae:b1:90:91:74:18:1d:a9:a3:
                    b0:c7:42:e2:e1:f7:aa:30:97:a6:ed:d5:d2:e4:4d:
                    e2:1b:67:64:af:7b:ea:07:6c:0f:dc:e1:19:2d:d7:
                    02:e8:75:33:34:fc:e0:f8:48:b1:fc:08:e9:a2:31:
                    16:ae:73:38:30:7b:d8:a3:df:bd:3e:46:12:4d:72:
                    05:e0:35:b5:fb:f4:da:42:fb:8a:bd:c0:57:9c:47:
                    2b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:06:F3:9D:B4:FD:B3:70:59:6F:94:1B:CA:4C:39:35:08:69:41:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/bf7dc132-07f3-31d2-a98d-37e8dab67de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.19.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:45:6a:39:c7:af:65:5e:ba:8e:06:1b:a7:3f:e5:df:3a:71:
         1e:b9:68:85:ce:2f:cc:9e:98:9c:71:c8:0c:2d:0d:2d:39:b4:
         5a:9a:b0:04:8b:31:e2:9c:ab:0f:69:e3:56:87:34:d8:58:24:
         5a:6d:49:35:35:78:7c:d0:ec:82:f0:b8:aa:57:5c:2b:5b:32:
         7b:48:38:ec:d3:60:94:7e:fa:70:ed:f9:fc:10:3b:92:71:37:
         8b:54:80:f3:6c:11:60:7f:e3:5d:26:a0:58:65:1b:61:e4:c9:
         8b:05:3c:a5:cd:43:6c:28:fb:ca:11:9d:fc:5b:c9:24:f2:94:
         90:05:4d:9f:5f:4d:cc:cf:af:2b:48:8a:61:57:ae:a5:5b:a3:
         97:7a:04:f0:b0:6f:cd:25:bf:7c:81:93:22:81:a4:8f:ce:33:
         8d:c7:38:5e:b1:3d:5a:e2:ae:55:41:59:5e:f6:a9:e1:75:7a:
         69:ff:82:4f:23:bf:68:a7:c2:53:f2:23:92:26:73:c8:98:e5:
         4a:65:36:67:09:c2:fe:95:42:97:cd:a3:67:04:9f:8f:fa:00:
         81:7c:54:f7:a5:17:69:3f:fa:5e:19:3c:41:f5:f9:35:f8:d0:
         4e:3d:68:d7:9b:2d:42:6f:ad:5b:62:b0:5b:e5:87:42:12:b8:
         2d:af:65:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:55:43 2025 by rpki-client