Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/d51e2141-526f-3d50-85c1-f992569c4005.roa
File:                     d51e2141-526f-3d50-85c1-f992569c4005.roa (raw, json)
Hash identifier:          zqjs/66kGutqf/AQ7Wq3HQIMwq7vizovoTM3JxcrzsE=
Subject key identifier:   BC:26:C3:41:5F:57:81:4E:F8:CD:76:41:41:D6:52:D9:F7:60:4A:A2
Certificate issuer:       /CN=a54703a4-3daa-455c-8724-7af942d1a391
Certificate serial:       010D0C9F4328584A3B7AF84EC7CD665BCB568700
Authority key identifier: C1:6C:5C:8A:3F:77:F6:A9:08:27:D4:A0:9D:84:80:E4:DD:DD:ED:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/d51e2141-526f-3d50-85c1-f992569c4005.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     396982
IP address blocks:        192.107.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f8:4e:c7:cd:66:5b:cb:56:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a54703a4-3daa-455c-8724-7af942d1a391
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=4626248f-d696-45af-826c-2a0464c31630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:91:34:dd:39:3f:8e:ce:6d:de:96:33:75:
                    06:ca:f8:4c:01:08:1b:ba:ce:7c:47:47:69:6b:7e:
                    27:2b:40:8f:bd:8a:ad:99:90:ef:02:9c:d3:5f:43:
                    83:14:ba:75:c7:d4:64:80:b6:df:77:4d:3c:38:24:
                    dd:10:ea:55:a5:5a:76:d0:a7:e9:43:87:9a:0e:e1:
                    74:1c:4c:b5:54:8e:14:b6:6c:21:2a:2e:20:78:90:
                    12:c4:cc:a9:66:82:df:89:90:6f:ed:54:d2:d4:7a:
                    ac:b4:7d:90:d1:0b:91:f0:6c:d7:4b:eb:e7:92:1e:
                    03:ab:a7:26:db:b9:37:c8:3f:ea:2b:df:73:0a:db:
                    1f:b6:a8:26:78:fb:08:25:a9:74:88:01:ab:bb:a7:
                    03:0f:f1:ee:90:dd:ab:fc:6f:b8:8f:86:39:e6:44:
                    0e:f2:7e:22:1f:f5:f0:73:f1:92:c9:8f:b0:f3:54:
                    e6:00:55:00:b3:59:5e:bc:8a:76:a9:7e:b6:40:1e:
                    d4:3e:8a:75:4c:f8:75:53:a3:1c:44:64:cf:98:8f:
                    6a:f1:89:d9:54:18:80:d5:12:55:e7:a4:a7:6d:34:
                    d4:b6:b6:b7:c1:8b:83:91:5e:2a:6d:cf:fd:46:d7:
                    f5:55:1a:ca:15:78:53:2a:3b:f7:08:79:96:3f:18:
                    51:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:26:C3:41:5F:57:81:4E:F8:CD:76:41:41:D6:52:D9:F7:60:4A:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/d51e2141-526f-3d50-85c1-f992569c4005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.crl

            X509v3 Authority Key Identifier:
                keyid:C1:6C:5C:8A:3F:77:F6:A9:08:27:D4:A0:9D:84:80:E4:DD:DD:ED:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.107.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:34:7f:ee:8b:66:95:2b:77:5b:6c:0c:fb:bc:10:76:81:21:
         d4:f1:59:43:33:fc:e3:18:95:bc:e5:29:07:41:93:fd:1a:a5:
         a6:d0:4a:99:0a:b3:71:06:be:c6:9e:14:89:dd:bd:95:41:13:
         05:dd:e8:8c:45:d7:4e:4b:ed:9e:c8:f7:88:61:5b:01:dc:33:
         a8:62:c0:6e:66:f2:e1:f4:72:d9:9c:a8:64:74:49:40:2d:b8:
         6d:2d:60:37:1f:4a:47:16:c7:65:63:f7:d5:f3:8d:86:8f:cc:
         76:af:0a:c4:09:e1:00:91:65:56:c2:65:a4:2c:db:14:f1:78:
         1f:6d:75:39:16:d4:be:b7:bd:01:69:58:c3:b9:2e:32:74:b2:
         95:fd:9f:38:1b:77:eb:c0:ff:d2:71:85:4a:82:ce:17:9f:26:
         ba:62:f8:70:80:c0:62:59:fc:5f:70:42:46:41:ce:e8:b8:ed:
         b9:15:57:3b:22:38:db:f7:b3:26:64:89:67:ec:03:7d:df:82:
         50:e7:64:e1:46:be:73:a6:ea:1a:f3:6e:0c:8b:9d:7d:77:27:
         2e:59:df:93:d6:61:b6:3c:58:7f:a4:db:0d:34:9a:81:b8:71:
         d6:39:ae:3e:82:62:93:b7:73:20:43:e2:47:8f:4b:12:f6:ce:
         7b:ba:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:50:16 2025 by rpki-client