Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/05938bb8-f6c8-3f2e-ab04-db116d97b78c.roa
File:                     05938bb8-f6c8-3f2e-ab04-db116d97b78c.roa (raw, json)
Hash identifier:          xszziqOhqz0psLA8rNfwlCmEGKmoiLD1JvtdVauGAOo=
Subject key identifier:   41:CC:77:22:18:88:BB:3B:4E:4F:BE:73:D7:7C:59:5E:12:39:D1:96
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A4A03E040CDBB226CC1AAA680
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/05938bb8-f6c8-3f2e-ab04-db116d97b78c.roa
Signing time:             Mon 23 Jun 2025 17:58:23 +0000
ROA not before:           Mon 23 Jun 2025 17:58:23 +0000
ROA not after:            Sun 21 Sep 2025 17:58:23 +0000
asID:                     15290
IP address blocks:        207.245.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:03:e0:40:cd:bb:22:6c:c1:aa:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 17:58:23 2025 GMT
            Not After : Sep 21 17:58:23 2025 GMT
        Subject: CN=08207fc0-d157-485a-a32d-5b5527d4a88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6e:52:3d:d3:b1:10:1f:a3:84:b6:dc:99:2a:
                    d8:83:21:6c:37:f8:fd:8b:2c:f6:7c:13:b6:68:6b:
                    d6:e6:17:e9:7d:19:ff:70:be:e7:e9:12:79:19:ba:
                    1a:45:49:7e:f7:7e:87:9a:55:6e:73:6e:eb:72:f5:
                    3f:4f:fb:61:be:51:58:16:61:50:08:1d:4e:f7:01:
                    a1:81:44:bd:0e:fc:14:51:b8:00:60:56:38:44:95:
                    d5:8f:22:52:f6:bb:2b:35:6b:84:25:da:2f:29:dd:
                    3b:99:5e:6a:35:ef:91:1e:cb:4f:39:93:17:38:ac:
                    52:e6:ca:4d:04:95:a3:e1:8d:5b:e1:b1:26:eb:01:
                    e2:2b:6a:45:5a:4b:13:9b:89:3a:d8:7a:94:d5:9a:
                    20:ad:ec:ad:89:67:e4:23:16:a1:27:c2:09:76:72:
                    aa:c0:f6:32:4a:3f:6a:0f:bf:2c:11:10:8d:7a:ab:
                    e6:7e:d5:fb:1e:67:2a:f4:b7:42:a8:2f:7a:1c:ef:
                    da:56:d3:70:f8:c1:a7:7d:3c:55:39:aa:9d:09:1e:
                    01:c3:62:59:f7:96:68:e1:4a:d9:e1:74:e9:38:26:
                    8c:8c:0c:0f:93:b6:91:de:ad:e3:7f:9f:ad:57:63:
                    3e:b8:23:d7:84:16:25:8a:b1:79:50:32:5e:16:0e:
                    2a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CC:77:22:18:88:BB:3B:4E:4F:BE:73:D7:7C:59:5E:12:39:D1:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/05938bb8-f6c8-3f2e-ab04-db116d97b78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:1b:35:0c:4d:8e:b3:31:48:2a:16:3c:a1:99:5e:eb:45:23:
         eb:2e:9a:56:01:3b:9a:43:db:4b:f1:72:c6:d2:09:03:9c:1d:
         58:0c:5d:ed:3d:b8:68:ab:ad:18:df:2d:e8:91:45:5c:f5:fd:
         86:f4:dc:81:76:34:cc:cc:25:05:96:db:43:83:94:f5:4e:df:
         dd:c1:d1:c6:6c:28:9a:fb:63:0d:3a:33:c8:9d:f7:cb:8b:78:
         f2:d8:f4:f7:ba:04:00:b9:34:29:3b:ea:39:1e:d0:39:c9:53:
         27:a7:bc:6f:05:65:2a:c5:cc:b2:72:60:f9:dc:da:94:e2:70:
         fb:4b:3c:e6:58:84:a3:8d:7f:6c:d5:b6:50:c9:52:65:96:01:
         0c:ea:c9:31:4f:4c:3c:cf:b0:55:ae:ea:37:87:7f:64:86:e5:
         c1:df:1e:1b:85:6f:8f:d5:a1:32:78:4d:05:d2:33:4d:b4:83:
         c2:23:d9:41:65:cf:64:0c:f1:83:f0:d2:d8:60:50:3c:47:4b:
         74:1f:df:22:1e:c0:f3:6e:17:25:47:6b:19:55:5d:14:63:e8:
         b8:a4:2b:35:a7:77:45:f7:3b:90:c4:2f:99:ff:4c:34:09:09:
         bd:85:d3:65:72:74:15:81:c2:27:69:bc:0f:83:44:8c:08:74:
         61:bd:81:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:47:36 2025 by rpki-client