Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/c75bc20f-6532-3c41-9539-e3da4d4b642a.roa
File:                     c75bc20f-6532-3c41-9539-e3da4d4b642a.roa (raw, json)
Hash identifier:          hsIuhOmdmcCjQEfRaPDhnhDrm1DbXT5VCxfJMhvb2X0=
Subject key identifier:   36:F0:6F:6C:C4:C0:18:B9:32:95:59:67:F3:6A:5C:E4:00:85:4F:5A
Certificate issuer:       /CN=e41130c1-4af1-4678-90df-9d7c854ceb98
Certificate serial:       010D0C9F432858498B99D1450CE483671FBCAA80
Authority key identifier: DF:24:BF:B9:B1:E3:38:17:32:1C:79:8B:22:FE:17:99:A6:0B:C5:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/c75bc20f-6532-3c41-9539-e3da4d4b642a.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     19431
IP address blocks:        158.51.236.0/22 maxlen: 24
                          2605:9340::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/e41130c1-4af1-4678-90df-9d7c854ceb98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/e41130c1-4af1-4678-90df-9d7c854ceb98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:d1:45:0c:e4:83:67:1f:bc:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41130c1-4af1-4678-90df-9d7c854ceb98
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=879be80f-92dd-467d-a715-1c89d84fe6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:f5:1e:a0:7b:6e:20:1a:35:c8:4f:81:3b:
                    01:8a:c8:6b:fb:e6:1f:9a:e9:8e:02:bb:f5:96:f7:
                    0a:8a:93:3d:dd:30:39:cc:82:2c:4d:db:ef:6b:d5:
                    00:be:0f:29:25:a4:8b:76:5c:3d:65:1e:0b:0e:ce:
                    c8:d4:86:42:71:e6:f0:53:ab:03:67:9c:1a:7f:1a:
                    44:31:42:aa:cf:2e:60:69:54:a0:65:57:59:21:8f:
                    9b:26:7f:00:ca:ab:f8:4f:bd:c5:96:12:42:08:da:
                    a7:3a:51:ec:78:1c:e6:ce:61:5d:4f:98:6e:08:31:
                    13:71:e9:87:2a:8d:a0:b6:e9:bf:76:df:ef:25:1c:
                    31:14:2d:91:c0:f1:7a:40:ab:d1:fb:bb:13:a1:29:
                    33:0b:bd:69:3c:1d:97:04:80:d8:04:7d:6d:7b:ab:
                    24:14:02:de:fa:d0:57:2a:1e:dc:0e:4c:77:01:ae:
                    c6:95:0b:8a:45:bd:37:79:44:fe:f8:ea:58:3e:b4:
                    19:95:9f:1c:70:04:9f:eb:eb:95:30:ec:a2:08:d2:
                    bd:39:3b:5f:71:94:31:05:17:35:fe:ab:cd:20:42:
                    13:49:3e:e0:02:7c:75:07:4f:35:c4:b8:29:46:6a:
                    f0:94:46:a6:89:62:0f:db:59:af:8f:e7:3a:91:d2:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F0:6F:6C:C4:C0:18:B9:32:95:59:67:F3:6A:5C:E4:00:85:4F:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/c75bc20f-6532-3c41-9539-e3da4d4b642a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/e41130c1-4af1-4678-90df-9d7c854ceb98.crl

            X509v3 Authority Key Identifier:
                keyid:DF:24:BF:B9:B1:E3:38:17:32:1C:79:8B:22:FE:17:99:A6:0B:C5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.236.0/22
                IPv6:
                  2605:9340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:2c:df:8d:d4:c8:42:04:43:3e:1c:5e:d3:49:61:15:86:ab:
         a7:14:6c:3c:6c:9e:bf:44:04:d6:f3:94:fe:a2:5a:85:11:0b:
         d0:86:18:7e:51:88:54:9c:1f:d2:7e:b7:4b:36:7f:58:40:6b:
         5a:2d:31:b6:22:7e:80:2f:46:f4:25:44:95:9b:14:93:05:85:
         c7:18:2b:ba:93:1a:a7:38:a2:10:71:51:d3:77:80:8e:85:47:
         0e:26:56:16:7f:8a:2f:08:77:06:68:bf:4f:e4:22:e7:5b:67:
         2e:2b:57:4d:4d:8f:80:18:a4:9f:24:35:d7:98:d3:34:7e:c7:
         11:1c:63:fe:ab:35:fa:c7:2d:82:eb:02:ab:a8:cc:eb:7d:a5:
         4b:fd:f1:bf:9f:b5:53:8a:58:94:79:2e:62:c7:18:58:24:4f:
         7a:e7:c6:85:c0:2f:68:c2:1b:05:98:a8:17:c7:82:3e:99:7f:
         20:c4:c7:be:e4:38:8f:3c:e6:1e:2f:e4:eb:35:96:9d:5c:75:
         e2:02:10:84:75:f7:90:1e:0e:b4:7c:71:59:37:ca:04:45:bc:
         b4:08:3c:90:a7:22:63:31:d5:fd:0d:0c:ef:59:35:59:5a:37:
         7d:d8:2d:b2:88:69:7d:fd:91:97:65:65:59:c7:12:4d:5b:1c:
         3a:2f:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:18:02 2025 by rpki-client