Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/00f3f14f-8cb5-33c0-a68f-59b0e01e4a25.roa
File:                     00f3f14f-8cb5-33c0-a68f-59b0e01e4a25.roa (raw, json)
Hash identifier:          qDmGabE6cma/jzF7t1Vh1XtCW957mHmHK9v4upxd2Y0=
Subject key identifier:   12:16:F4:9D:64:83:83:F0:B3:52:08:72:AD:6D:DA:C8:98:16:89:42
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849B6497A661007563B8AE34F00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/00f3f14f-8cb5-33c0-a68f-59b0e01e4a25.roa
Signing time:             Thu 01 May 2025 19:59:00 +0000
ROA not before:           Thu 01 May 2025 19:59:00 +0000
ROA not after:            Wed 30 Jul 2025 19:59:00 +0000
asID:                     401182
IP address blocks:        208.184.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:49:7a:66:10:07:56:3b:8a:e3:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May  1 19:59:00 2025 GMT
            Not After : Jul 30 19:59:00 2025 GMT
        Subject: CN=a39dd559-f94f-426a-933e-41f89256e186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c4:b7:88:5e:04:83:15:ff:ee:93:7a:02:dc:
                    5d:ac:19:a5:ea:94:8d:57:57:37:df:63:fb:c9:b5:
                    6d:25:98:2c:eb:9b:21:13:ba:90:8b:46:40:3b:54:
                    e6:cd:e1:1e:f0:fa:ec:41:e1:82:76:00:ac:2f:88:
                    7c:1c:cb:2a:d0:2a:38:0d:65:90:66:fc:af:1f:7f:
                    43:49:13:ce:40:39:72:16:fb:25:57:59:8a:7f:dc:
                    5d:14:fd:e8:da:04:a3:c2:be:4d:d3:c9:e9:22:13:
                    45:f4:00:7a:11:b2:6d:06:e0:4c:fe:05:c1:43:e2:
                    f7:3d:1e:8b:55:2b:27:80:09:e1:11:da:67:25:24:
                    34:9f:63:ac:f1:7c:19:c8:05:95:41:51:40:9c:68:
                    d4:82:81:2d:c8:e8:46:f9:21:3d:a9:21:2e:c8:1c:
                    41:1e:b2:7e:c0:ae:ee:d2:ee:2e:73:25:4a:fc:8b:
                    63:43:5f:e2:ca:ab:4f:b1:4b:75:06:6a:81:0d:a8:
                    13:e8:75:54:ec:7d:e0:12:32:cb:ca:7a:c4:69:04:
                    99:2b:31:da:c8:49:2c:fc:dc:d2:2f:96:83:8f:32:
                    ae:06:c1:fe:cf:16:ef:73:4f:9f:9f:2c:51:79:6c:
                    07:23:53:73:2c:80:a7:8e:75:23:66:05:93:b1:39:
                    69:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:16:F4:9D:64:83:83:F0:B3:52:08:72:AD:6D:DA:C8:98:16:89:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/00f3f14f-8cb5-33c0-a68f-59b0e01e4a25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:fa:de:d7:6c:f1:57:5c:fb:09:36:a3:8c:b5:4b:52:f1:53:
         2b:2f:62:57:d5:53:e7:0c:56:8b:7e:5f:73:e5:f9:25:a5:12:
         aa:dc:19:c3:4e:ac:7e:4e:65:30:ad:6a:9a:40:50:c0:23:3a:
         0b:3c:ef:50:de:08:e7:5a:0b:bf:79:26:a3:b2:44:aa:f7:0a:
         9b:49:7c:ee:d5:a2:50:e8:e4:84:36:d1:4f:7b:e7:c0:48:b8:
         26:ee:f5:71:f2:df:de:3c:d9:63:58:b9:ba:cc:b7:48:48:d0:
         07:bc:69:86:eb:8a:54:35:74:94:0c:4a:4e:81:6a:8c:e8:98:
         a6:b0:fa:da:93:f8:ed:79:82:35:d9:ca:81:d8:f5:15:b1:db:
         66:e9:e6:4a:f0:7a:67:c1:5e:de:0f:d0:8b:8c:86:2f:c5:91:
         d3:c3:bf:db:c0:2d:db:25:af:97:c5:c4:4e:b8:41:84:c2:f6:
         14:9d:27:ac:a0:92:02:f2:bb:96:83:86:55:7e:b3:d9:17:be:
         72:81:d9:8b:c5:15:44:fc:c6:2d:58:44:ea:71:31:7e:13:aa:
         b9:d3:b1:ec:6d:b1:cd:25:6b:48:9a:d4:b0:0d:fc:08:e9:12:
         4c:ec:73:b7:30:dd:58:0f:25:0b:e3:54:f0:fd:3b:04:03:c1:
         9e:64:ef:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:13:35 2025 by rpki-client