Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1966d7bb-57cb-3d00-8f26-61906b2334f8.roa
File:                     1966d7bb-57cb-3d00-8f26-61906b2334f8.roa (raw, json)
Hash identifier:          6n2TNLywzOzHlcrSakI8CF6UyS2vZBA+ygb5JUU7Xj8=
Subject key identifier:   A7:90:15:04:1F:D3:65:16:0D:6A:90:B5:58:7A:79:D2:51:35:AD:FA
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F4328584A5765CEE20EB66DE89F359A00
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1966d7bb-57cb-3d00-8f26-61906b2334f8.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     5738
IP address blocks:        207.136.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:ce:e2:0e:b6:6d:e8:9f:35:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=f60eae27-f3f1-47b4-b335-b2fbea36da31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5c:a4:3d:8b:01:70:00:3d:61:ce:22:b3:1f:
                    08:7a:3c:78:38:3b:8b:94:df:ef:98:e3:4f:45:e4:
                    d2:7a:92:4d:c6:1c:6d:4e:4d:d2:22:ba:20:22:e6:
                    b7:3f:a9:4e:6f:bc:d3:11:42:c9:cf:2f:78:f3:94:
                    10:05:5f:3a:99:89:62:8e:85:8d:c6:98:43:a5:9b:
                    e6:92:63:3f:54:52:15:ad:8f:3a:30:9a:a2:0c:21:
                    a6:ba:36:3d:26:92:f9:52:79:3d:da:69:45:1d:1e:
                    5d:ad:56:d4:e6:c8:af:73:91:33:a1:ec:1c:cb:57:
                    53:b4:3c:1d:28:24:e8:44:fe:d1:d8:26:97:8f:62:
                    d2:40:c5:09:de:fa:a4:b3:35:af:aa:5d:26:b6:d2:
                    1e:5c:f8:b5:3b:38:f8:36:d5:b4:fd:a6:d9:e0:06:
                    d6:b0:8c:0e:3a:2f:f2:27:a8:27:90:3b:87:9b:80:
                    22:99:e0:8e:a5:97:f2:34:4d:54:64:f1:96:90:b1:
                    32:ea:93:3f:e8:c8:33:1b:a8:2d:5a:3a:6f:e0:00:
                    c7:c5:2d:2f:94:84:91:92:2f:61:4c:ea:cb:04:b2:
                    58:1e:21:ef:13:6f:65:72:46:5b:02:80:81:ff:ba:
                    5b:c1:6f:67:2e:9b:19:58:6c:60:0f:8e:ae:76:3e:
                    32:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:90:15:04:1F:D3:65:16:0D:6A:90:B5:58:7A:79:D2:51:35:AD:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1966d7bb-57cb-3d00-8f26-61906b2334f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.136.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:f2:27:4a:b1:aa:88:1e:29:18:36:32:1c:d0:07:6d:ee:7a:
         f7:e9:81:d8:bc:0b:52:25:91:21:ac:19:b0:b2:94:4a:d7:42:
         a6:4d:39:9f:41:41:1f:1f:dc:b2:81:c1:42:a3:f8:c6:a7:4b:
         8c:cf:7b:d4:7d:5d:8d:89:8f:14:6b:19:55:40:47:02:d4:75:
         be:83:b4:57:93:09:b7:e8:18:25:7b:5c:0a:b3:42:98:f0:34:
         07:99:21:bd:9e:68:22:2d:00:76:b1:5a:79:18:45:fe:1e:34:
         23:f5:68:22:62:09:5b:a8:38:ec:15:95:59:62:0c:e7:2d:3e:
         ec:38:1f:d6:53:ad:50:a9:8f:41:49:d7:bb:5d:9e:a7:e0:dd:
         fe:57:bc:b9:79:1b:0c:af:6d:70:df:97:e4:7e:54:34:a9:f5:
         79:f3:13:88:60:89:e4:10:22:ba:de:74:30:e2:81:39:1c:0e:
         be:92:63:3f:bc:2e:da:56:9e:48:f6:65:71:24:04:20:5b:fa:
         5a:a7:80:8f:26:57:bb:fd:d8:68:77:38:4f:af:78:de:96:0a:
         64:2d:ac:08:dc:54:4a:a9:b1:7c:56:26:56:67:94:db:53:63:
         34:6b:45:ca:e6:8e:c1:2d:a7:e3:57:ba:63:94:bf:2f:49:d6:
         34:70:f6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:04:59 2025 by rpki-client