Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/beb39055-851c-3403-be13-88e04d185388.roa
File:                     beb39055-851c-3403-be13-88e04d185388.roa (raw, json)
Hash identifier:          I2iSx2tqYmuhcVwrlQHQ7kdziLeXIV16i+wuZpQDIbs=
Subject key identifier:   AF:61:F5:A4:F3:42:A7:99:76:8D:82:54:F5:E3:DD:A6:87:00:8E:B1
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584A34801D42F205E8C24FC44570
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/beb39055-851c-3403-be13-88e04d185388.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     0
IP address blocks:        192.35.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:1d:42:f2:05:e8:c2:4f:c4:45:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=c9bdc7b7-da24-4449-b05f-717820aa6142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fb:a9:00:77:9d:20:73:2c:ee:3b:da:85:c0:
                    c5:a4:ea:ab:15:eb:57:98:c0:af:cd:7c:b3:72:59:
                    7a:85:de:ea:fa:48:e4:15:a3:39:05:7f:c6:a4:2b:
                    6f:73:f4:d1:f9:9e:16:0a:03:8d:9e:b5:a3:04:35:
                    92:c4:90:7d:c7:bf:34:9e:d7:9e:6b:d5:e5:92:b9:
                    19:8b:f0:d3:48:83:f6:63:56:cf:fa:9f:06:03:17:
                    30:7c:c9:d7:c1:fa:65:4a:21:ff:de:3b:87:00:db:
                    a9:e8:57:80:55:a5:ba:98:e3:b9:d8:b0:75:62:9b:
                    3d:80:e0:5f:b2:ae:1b:78:15:fe:44:00:c3:bf:1a:
                    99:69:7c:e9:b8:09:88:63:04:dd:a1:58:71:18:98:
                    1b:aa:7a:fe:2f:9c:9f:db:c1:5c:d5:67:c9:ce:df:
                    cc:bb:36:09:9e:e0:e0:95:39:0c:81:0e:66:0a:49:
                    a1:63:c8:f1:2e:d8:ab:b5:19:bf:a7:29:e8:fa:ae:
                    47:62:9a:02:9b:38:29:2b:b9:a1:85:a4:d2:90:57:
                    0d:54:69:74:28:c8:7f:70:47:4a:75:e9:b8:82:11:
                    0f:ee:6c:ee:11:c0:bc:90:8b:de:b5:ed:50:09:34:
                    1c:02:e7:04:f3:0a:11:63:da:bc:54:93:ad:ab:bb:
                    c6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:61:F5:A4:F3:42:A7:99:76:8D:82:54:F5:E3:DD:A6:87:00:8E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/beb39055-851c-3403-be13-88e04d185388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:09:4b:24:ce:72:68:83:84:b0:a0:66:b5:1b:c8:a1:e9:25:
         91:d9:13:30:99:9d:7d:be:fa:94:8c:3b:b9:29:16:a4:8c:40:
         1f:00:c6:0c:ad:bb:aa:2f:2a:88:f6:34:bb:5b:ed:a2:3c:77:
         c6:6a:92:e1:99:f5:64:58:ad:9e:0a:10:8f:39:82:e4:fc:9e:
         9b:f3:5d:f4:26:e4:91:af:ff:41:ab:04:80:36:e0:8d:e8:80:
         91:94:60:dd:ce:71:c4:e3:6d:3a:a3:bb:c7:d3:95:30:6d:8b:
         ff:fd:8e:7a:02:43:ed:34:82:4d:b0:6a:e8:37:e6:a2:fb:29:
         8e:d2:99:a0:3d:f9:0d:59:8e:f5:2e:52:5a:e4:9f:01:3a:16:
         14:34:6f:46:2d:64:bd:13:50:45:7a:03:33:c0:44:3c:d3:3c:
         26:a5:ec:2f:ca:59:77:4a:ad:d1:3f:04:05:05:ac:90:41:45:
         72:43:01:fb:fd:4f:f8:79:56:99:75:be:82:6c:1f:8a:49:a9:
         a0:7c:4f:f9:a6:8c:ea:13:82:43:a6:a6:d6:b2:fc:ce:68:11:
         8b:cb:6f:93:0a:a9:dd:0e:a1:22:eb:35:88:00:d6:c3:5a:5d:
         a0:e1:4c:23:cb:51:26:0a:54:06:d3:f9:f7:d5:c6:91:a0:dd:
         70:73:a8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:18:41 2025 by rpki-client