Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0aa5e5e7-4aba-34d8-b602-e35d9650a51e.roa
File:                     0aa5e5e7-4aba-34d8-b602-e35d9650a51e.roa (raw, json)
Hash identifier:          egJcblGb4IXPdnxd2LfZNzz7Hb7hOF5h66hLJWAcmGE=
Subject key identifier:   37:7E:34:2E:FF:38:4C:F2:CA:F6:BD:ED:7A:32:8E:26:90:34:79:26
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A49A5D9B58FFC25C83AD8E580
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0aa5e5e7-4aba-34d8-b602-e35d9650a51e.roa
Signing time:             Mon 23 Jun 2025 14:48:56 +0000
ROA not before:           Mon 23 Jun 2025 14:48:56 +0000
ROA not after:            Sun 21 Sep 2025 14:48:56 +0000
asID:                     15290
IP address blocks:        159.18.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:a5:d9:b5:8f:fc:25:c8:3a:d8:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 14:48:56 2025 GMT
            Not After : Sep 21 14:48:56 2025 GMT
        Subject: CN=84644026-44cf-4025-b74e-4f33325db32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:14:cc:c5:83:0b:3a:fe:67:33:ac:ce:2f:
                    f0:ca:46:7f:85:b7:f7:6c:ab:21:b5:5e:2f:e8:c1:
                    cf:43:d3:99:8b:93:0e:f7:fe:a4:94:0b:82:70:ac:
                    bd:93:7f:d8:3d:6c:5e:9d:d2:37:1b:49:b7:e9:82:
                    92:a8:b2:bc:7c:e3:6e:28:04:6c:a6:4c:bb:50:ac:
                    b0:39:50:29:15:5c:d2:f0:fa:72:92:18:41:cc:b7:
                    c6:12:c5:10:65:c2:f5:76:1a:bb:c5:12:82:49:34:
                    b0:07:4e:d6:ac:29:38:f0:e3:5e:07:65:90:81:83:
                    15:60:73:cb:04:4a:52:3c:e3:5c:fe:06:be:e2:9e:
                    00:fe:29:08:68:19:fe:9a:d5:df:58:85:aa:80:50:
                    5d:d7:55:f5:29:b7:d1:d1:df:37:05:3f:10:84:9b:
                    88:2f:c6:35:f8:b3:fe:6b:39:87:df:f3:fd:4f:67:
                    47:d2:27:9b:20:b2:90:06:3d:3b:af:4b:93:f0:26:
                    f9:6f:04:dd:b3:d0:2d:4d:d4:f9:4a:bb:f5:80:9e:
                    cf:e8:30:40:6a:99:f7:1b:a5:d9:79:24:d4:78:e3:
                    0e:da:5f:10:ab:e0:77:1a:1e:34:56:de:36:ee:6a:
                    2c:51:ca:e6:bd:55:2c:03:7a:2e:75:44:4a:a9:a2:
                    b2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7E:34:2E:FF:38:4C:F2:CA:F6:BD:ED:7A:32:8E:26:90:34:79:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0aa5e5e7-4aba-34d8-b602-e35d9650a51e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:6f:c7:c0:30:47:ec:48:47:cb:aa:12:9a:99:42:20:e7:b0:
         a0:7f:bc:4d:3f:5a:05:01:11:5b:6a:29:5a:8c:ff:e9:a8:d7:
         90:e9:7e:06:dd:f3:49:14:f6:d5:5f:6c:0b:00:8c:c2:ea:c6:
         96:f0:5d:fc:23:2e:be:67:d8:25:b4:af:04:e4:13:54:7d:53:
         14:ec:45:54:49:fc:76:ad:8e:b8:ca:56:1e:57:53:e5:7b:41:
         20:b6:ce:35:80:5c:09:7f:87:b9:63:47:2d:c1:61:af:fd:95:
         6f:31:d4:94:33:eb:b4:fe:7c:80:26:5d:1d:25:5a:35:2d:c0:
         60:ef:af:d9:15:1d:be:c4:22:d3:93:c3:22:1f:11:0c:e7:99:
         f5:4c:81:40:26:5d:bc:c9:cb:0c:4a:a5:b6:14:75:00:71:4d:
         f0:0e:00:7c:b5:b7:b7:25:86:5c:c8:db:db:59:d4:e5:23:f1:
         d0:9c:8b:a3:d3:bc:45:be:63:7a:df:09:f1:97:17:ae:af:0a:
         59:f8:13:ef:64:78:e3:e3:0a:48:32:89:34:ae:da:39:61:72:
         ff:d3:0d:dc:b4:bc:03:5e:6a:e4:11:54:69:59:a6:d8:79:5f:
         c5:f5:e5:ab:74:33:b1:2b:1d:6f:5d:1e:03:19:bc:94:61:4f:
         27:77:be:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:44:55 2025 by rpki-client