Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa
File:                     92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa (raw, json)
Hash identifier:          RWBsj71D2rQiACplZA2wicGXbPAYknXcX+PHaMFOJd0=
Subject key identifier:   AB:B4:52:1B:78:02:A8:AC:28:4D:B5:29:00:12:36:0B:7A:7E:7A:E1
Certificate issuer:       /CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5
Certificate serial:       010D0C9F4328584A4970705AD62E3234F1FDE9C0
Authority key identifier: 8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     25813
IP address blocks:        192.252.0.0/21 maxlen: 24
                          207.231.176.0/20 maxlen: 24
                          208.65.4.0/22 maxlen: 24
                          216.9.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:70:5a:d6:2e:32:34:f1:fd:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=d29dcbc4-6d28-4860-9994-5996204e7cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:20:48:2e:42:cc:9f:dc:72:de:4f:87:b9:8f:
                    ea:e3:f3:84:19:d7:08:c5:96:09:b1:b5:fa:fe:9e:
                    a8:07:92:08:46:31:c1:4b:23:3f:3f:32:3a:16:95:
                    c8:31:7a:56:1b:bb:89:06:82:9c:0b:2c:18:77:64:
                    69:9f:77:dd:2b:12:b7:1c:53:6c:0b:1c:0e:5d:05:
                    65:97:1f:eb:ae:d4:82:46:2d:4e:18:d2:99:67:8b:
                    19:8f:21:3d:3a:38:47:4b:15:63:ec:2f:a2:7f:f7:
                    07:fc:e0:5f:d8:36:26:59:b3:7b:5d:f4:09:72:9d:
                    a4:9a:70:f9:b0:f4:f3:5c:39:96:97:9b:e0:59:88:
                    c0:58:4c:40:bd:5a:1e:6f:24:de:60:5e:e0:2a:b1:
                    e1:f4:d0:27:5e:75:5e:d8:ce:2a:d3:bf:2f:a4:10:
                    6b:e6:f6:e4:81:27:21:d5:3a:24:a9:05:ec:cd:06:
                    22:f7:72:22:92:5a:c1:b3:e3:8f:a0:54:d8:d6:c4:
                    21:85:bb:3d:13:ca:63:50:f1:bb:8a:7a:90:14:29:
                    a7:ac:db:b4:61:ef:6d:37:ec:85:02:9a:9b:17:0e:
                    92:3a:02:10:0e:05:fe:8f:7b:43:50:66:49:b0:d4:
                    44:c5:fd:4e:ae:15:ed:0d:1d:90:36:7f:c2:bf:cc:
                    c4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B4:52:1B:78:02:A8:AC:28:4D:B5:29:00:12:36:0B:7A:7E:7A:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl

            X509v3 Authority Key Identifier:
                keyid:8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.252.0.0/21
                  207.231.176.0/20
                  208.65.4.0/22
                  216.9.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3a:5b:01:b0:e5:ac:da:d2:43:0c:79:49:44:58:da:9a:d0:
         c4:ce:19:bb:da:56:aa:24:8b:64:82:24:ce:e9:63:87:7e:2a:
         ad:fc:da:cd:c5:9c:00:c6:7f:b7:0a:be:96:65:f3:cc:cd:7b:
         38:c2:44:87:4d:42:0f:a1:0b:92:b1:67:b0:23:5f:6f:6b:01:
         99:96:49:d0:6b:a8:3b:db:58:39:83:60:a5:86:64:2e:23:90:
         95:97:63:9c:07:01:69:b5:77:07:70:c9:af:92:88:64:30:e2:
         c2:d1:bf:79:83:a6:63:77:17:22:e3:0a:c2:04:f4:71:a9:ea:
         74:4c:28:5e:94:9f:40:31:59:e2:4f:d3:d7:7d:b0:54:36:ac:
         0a:07:9a:b0:68:70:a8:60:70:87:26:aa:c8:75:0c:f2:09:e7:
         4d:1e:f6:92:0f:40:92:57:6f:4f:a5:15:e4:81:1c:7e:9a:1e:
         e1:54:82:e2:49:3d:c9:23:64:c5:89:34:cc:d0:df:ce:e5:51:
         a1:14:db:57:fd:59:23:d9:bf:95:67:77:ac:76:f2:b0:84:00:
         27:cb:94:d5:75:0d:af:b5:b4:89:30:bf:bb:8b:b5:75:b8:0f:
         73:1f:08:02:e2:2d:ed:a5:c8:8a:ee:b3:2c:fb:a2:d9:9d:22:
         66:a1:fa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:41:18 2025 by rpki-client