Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/55a4b51a-6d67-315f-a016-1c040d115980.roa
File:                     55a4b51a-6d67-315f-a016-1c040d115980.roa (raw, json)
Hash identifier:          8zQCbdN2p/1/mFhPUR8geoxjWuWu6I3MjLmHRAVuBn0=
Subject key identifier:   06:62:0A:74:53:31:17:0C:F2:B5:26:6A:EA:E7:F3:44:B5:8A:BF:FE
Certificate issuer:       /CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
Certificate serial:       010D0C9F43285849DF5A6FDD02B3E6E39C6A0EA0
Authority key identifier: 65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/55a4b51a-6d67-315f-a016-1c040d115980.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     21693
IP address blocks:        192.234.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:6f:dd:02:b3:e6:e3:9c:6a:0e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=cb625693-47d2-4b19-8222-b16a078c0c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:b3:74:8f:07:a2:bf:b3:6f:35:06:51:97:
                    f6:a9:17:3b:ba:50:e5:ee:dd:42:f3:e7:d2:eb:1d:
                    e9:4c:8b:3b:ef:0a:1e:58:35:59:2d:1c:0a:55:41:
                    c1:22:33:c4:6e:85:7f:38:b9:62:35:c6:9f:75:e3:
                    30:49:71:34:55:c9:b4:10:30:79:61:4d:89:31:b7:
                    7d:08:7d:0c:5c:f7:d7:a5:af:cd:4e:38:7d:6b:62:
                    a7:68:11:c0:15:d0:56:31:87:76:c7:3d:30:0d:c5:
                    9f:c5:99:7b:5c:59:02:35:9f:91:b3:94:83:04:f8:
                    65:a3:b0:3f:2d:89:7a:94:34:49:0d:7d:60:fa:5d:
                    04:02:2a:61:8a:0d:a6:36:b6:d4:d2:12:d8:39:70:
                    ba:46:cd:da:dd:e5:72:93:cb:28:57:6e:9d:18:e2:
                    62:3b:31:d6:50:e6:e7:e4:9b:79:ec:0b:1c:93:9f:
                    a7:53:bf:20:26:e2:5c:a1:da:63:ed:c4:e0:7b:2b:
                    6b:f2:ae:2e:dd:88:68:f1:92:1f:48:e7:b6:ac:b2:
                    8d:65:19:70:f5:01:23:a2:06:3b:d8:84:23:21:c8:
                    87:c4:8e:1e:72:35:29:44:b9:02:29:6a:2c:7a:16:
                    bc:1a:8c:08:df:53:fd:cb:21:b0:eb:73:e7:62:9c:
                    17:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:62:0A:74:53:31:17:0C:F2:B5:26:6A:EA:E7:F3:44:B5:8A:BF:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/55a4b51a-6d67-315f-a016-1c040d115980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl

            X509v3 Authority Key Identifier:
                keyid:65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:40:35:a3:8b:52:05:e4:82:ea:9e:fc:4e:70:dd:fc:5e:41:
         31:93:57:39:32:d8:1c:a8:a0:80:b5:1c:c0:08:d7:f0:9c:d7:
         62:e8:29:99:07:a0:30:5b:45:e0:0f:53:6c:e1:dc:62:29:08:
         e6:f2:a9:38:34:73:3a:4f:89:ce:b0:24:6b:f0:58:32:a1:ad:
         e1:39:51:e7:4d:90:dc:04:0f:19:ce:6b:d7:74:21:1e:9e:86:
         40:9e:c4:a6:cb:62:c6:ec:2f:ff:d3:c2:9a:78:66:5c:77:14:
         db:f0:e0:11:66:d8:f6:ab:48:61:2f:14:58:fd:90:e0:6d:4f:
         3d:bc:1b:c2:66:e4:64:d1:a4:97:21:8b:92:9e:06:e2:a3:66:
         9f:9d:64:16:45:0f:2b:ab:40:f6:78:72:30:5b:44:c2:00:c1:
         c3:97:74:b3:61:a2:b3:c4:64:74:2e:2f:b4:11:55:9b:eb:c3:
         df:48:12:25:d8:34:c2:64:35:09:30:77:7c:8e:59:b7:a0:d0:
         97:ff:57:a0:1b:8f:81:ce:b2:3a:cc:e3:5a:e6:32:0c:34:ee:
         84:3d:5b:71:8b:72:29:78:3b:29:8d:ba:2d:2b:dc:fb:3b:e2:
         76:96:90:72:3d:2b:44:07:3b:0a:ae:64:50:1d:a2:00:80:a8:
         35:38:66:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:38:02 2025 by rpki-client