Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1841c425-1f5a-3b02-8b09-d0d603e98725.roa
File:                     1841c425-1f5a-3b02-8b09-d0d603e98725.roa (raw, json)
Hash identifier:          fYEEdl18Su5SpSoKebUioWAFQ17sCK4zHQWggJzs5AI=
Subject key identifier:   74:E9:15:13:44:D6:9A:F2:90:06:30:82:5F:FC:03:71:DF:75:56:C2
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A5214AA1938A82DD707F97D80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1841c425-1f5a-3b02-8b09-d0d603e98725.roa
Signing time:             Thu 26 Jun 2025 15:18:41 +0000
ROA not before:           Thu 26 Jun 2025 15:18:41 +0000
ROA not after:            Wed 24 Sep 2025 15:18:41 +0000
asID:                     6461
IP address blocks:        216.123.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:52:14:aa:19:38:a8:2d:d7:07:f9:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 26 15:18:41 2025 GMT
            Not After : Sep 24 15:18:41 2025 GMT
        Subject: CN=27a0ce7b-45a1-4fb5-8621-2b1e8feaa64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8a:b0:a6:1a:5d:10:32:b1:12:58:78:47:30:
                    f6:01:0c:08:44:8e:62:ee:88:64:62:14:04:f4:04:
                    ef:11:b1:98:09:5d:10:4b:af:76:a4:d8:3f:75:5c:
                    37:fc:18:f9:ed:e5:51:97:81:76:be:a1:55:0c:cc:
                    b6:ad:ff:b8:da:f6:21:25:99:17:df:4a:2c:87:28:
                    90:9b:1d:a0:5a:34:77:f2:81:27:7f:5c:94:06:ee:
                    ee:0c:fc:a3:4a:74:3c:31:21:c0:4a:12:23:a5:06:
                    de:73:ac:86:0d:a1:33:e7:0f:98:ed:ca:e8:b9:89:
                    01:dc:bc:5c:2a:0f:f1:72:bf:88:95:92:88:49:2d:
                    46:20:32:ce:b4:de:20:79:c8:9c:c0:7b:80:b1:07:
                    53:1a:fc:74:e9:03:ea:1a:ae:d6:fa:00:7e:eb:58:
                    97:bf:ef:91:0e:5d:b8:52:72:ce:98:c1:e1:8e:2c:
                    3a:d6:a1:4a:16:5b:bd:09:72:9d:aa:76:db:e5:23:
                    ae:c2:cb:a7:d4:d7:4d:23:6f:7c:b9:63:7e:9d:03:
                    ad:f3:d9:3c:1a:d9:55:a1:a8:00:76:b2:46:32:ee:
                    7e:dc:2e:22:3f:52:0f:55:9e:d2:be:74:b3:02:5e:
                    4d:46:3b:76:2a:ed:e7:71:59:b1:16:83:10:9e:75:
                    6a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E9:15:13:44:D6:9A:F2:90:06:30:82:5F:FC:03:71:DF:75:56:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1841c425-1f5a-3b02-8b09-d0d603e98725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4e:83:17:18:c4:c2:5e:87:a5:14:f2:ef:66:ab:34:65:f4:
         46:c8:f8:0a:4d:ce:95:cf:64:98:ef:f1:de:35:89:94:f5:c0:
         3c:74:ad:58:95:21:f8:4b:de:b0:cb:7b:dd:c4:a8:38:2a:2e:
         95:25:84:d7:e5:05:b3:06:bf:3b:bc:b6:3d:3c:b1:98:99:f6:
         4f:c7:79:7c:e2:46:b1:52:26:51:3c:68:5f:ef:79:3e:03:c7:
         2c:fc:86:b8:d0:e6:66:90:4e:3c:cb:2a:ff:da:a1:17:fd:5d:
         2e:cd:65:69:df:85:3c:96:5f:f4:a0:00:71:ce:fa:92:a4:d6:
         a5:56:f5:c2:dd:6b:1d:13:af:f0:5d:99:7c:9d:3f:64:a0:d2:
         43:f4:26:40:b4:1b:91:be:9b:de:31:3d:15:4c:f9:e3:66:c6:
         a1:b8:0c:4d:33:82:aa:6b:e2:10:e9:3e:aa:81:47:1d:14:71:
         ef:6b:77:e5:8b:9c:5f:a3:e2:50:1a:4d:de:de:a3:07:37:4f:
         4a:5d:1b:26:65:75:40:83:d3:78:4c:61:b6:73:c4:6d:a6:62:
         94:97:01:a5:75:35:a5:88:99:dc:ea:59:1c:ab:c1:a2:b0:98:
         e5:d1:eb:34:37:57:01:0e:b4:f3:72:b5:95:60:61:8b:0c:6d:
         8f:a3:8a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:45:58 2025 by rpki-client