Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1f55fb2b-b0b5-364e-86f2-dcdfb86bfa00.roa
File:                     1f55fb2b-b0b5-364e-86f2-dcdfb86bfa00.roa (raw, json)
Hash identifier:          U5C/HBJKO8pwzT5WBswYDnKF+sC0fxq/3JN73MQLjno=
Subject key identifier:   4C:9B:D1:B4:29:31:87:03:F0:F2:31:B3:DC:FE:9E:BC:44:C7:A0:95
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A4A93BAC27815EF48EBFB5780
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1f55fb2b-b0b5-364e-86f2-dcdfb86bfa00.roa
Signing time:             Mon 23 Jun 2025 22:48:14 +0000
ROA not before:           Mon 23 Jun 2025 22:48:14 +0000
ROA not after:            Sun 21 Sep 2025 22:48:14 +0000
asID:                     46129
IP address blocks:        159.18.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:93:ba:c2:78:15:ef:48:eb:fb:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 22:48:14 2025 GMT
            Not After : Sep 21 22:48:14 2025 GMT
        Subject: CN=1490db09-37af-466e-b21b-1b216b0e9f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:68:52:34:ac:19:60:f4:92:8f:1e:a4:04:bd:
                    6d:6e:69:9a:3a:25:6a:43:29:97:2b:82:89:bb:9d:
                    f5:f8:21:58:5d:59:ad:5f:a0:ce:71:f2:f0:69:ed:
                    8d:94:9e:c1:9e:b5:6a:de:0f:d0:d7:d3:da:46:66:
                    e1:44:d8:e4:b5:6b:ad:1a:c9:2c:0b:ca:d7:c6:d5:
                    71:e6:fb:ed:7a:bc:fe:d5:d2:82:c8:34:68:d5:33:
                    2f:8f:f3:de:31:17:33:70:51:5b:b5:55:9e:da:4f:
                    98:3a:61:8d:aa:cb:94:84:00:96:6c:43:eb:e2:63:
                    9f:36:02:ce:71:c3:d8:99:c8:06:91:48:5e:f1:1c:
                    ca:12:13:7b:e8:96:ea:5a:89:bc:69:34:e2:89:e1:
                    7b:70:d0:f3:18:de:1a:0a:e5:78:53:22:81:a8:b8:
                    34:33:1e:70:e0:1c:80:2c:6c:15:6d:74:ec:e0:a9:
                    3b:21:3d:25:42:fc:ca:cb:04:27:f6:a8:a2:ab:70:
                    8d:6c:d6:de:a0:69:53:1e:08:78:5e:ec:f5:cb:78:
                    6e:ac:82:35:d1:75:02:0e:b0:48:be:39:2b:88:d3:
                    f7:3b:e5:97:0e:31:fb:08:12:85:e3:99:e5:32:fb:
                    52:7f:74:79:83:87:a1:f7:72:b1:a4:fe:0d:7b:f9:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9B:D1:B4:29:31:87:03:F0:F2:31:B3:DC:FE:9E:BC:44:C7:A0:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1f55fb2b-b0b5-364e-86f2-dcdfb86bfa00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:0d:6a:19:52:ee:36:cd:56:a2:82:21:0e:58:34:00:14:89:
         43:8c:88:28:56:24:1d:2a:6a:ec:af:f5:5b:d4:de:18:24:e6:
         73:98:28:e7:af:90:d5:64:4e:6a:c7:38:f0:e4:be:17:17:77:
         7f:63:80:7c:03:46:71:f6:b7:e4:28:15:06:2f:e0:dd:d8:a6:
         32:09:45:3c:d0:ce:a2:97:cb:5c:ac:46:d6:9d:29:f6:b0:e6:
         ca:54:f8:34:df:69:30:89:24:9c:7d:24:be:51:8d:ac:0d:a3:
         8b:03:b6:52:63:c0:92:d0:6f:8f:fb:fc:41:ce:25:1d:3a:cd:
         be:40:9f:36:57:ee:bc:ca:21:52:cc:08:0c:58:68:ac:17:1d:
         a7:89:13:c1:90:a4:4c:ff:74:c2:04:2c:d0:96:ba:9f:80:d6:
         d0:f3:e3:55:00:bb:56:d0:69:62:90:f4:0a:98:3d:8f:8c:db:
         ec:c5:cd:7e:dd:a0:dd:ce:47:f2:d0:32:14:fc:33:99:0c:1b:
         45:cf:64:04:8a:1e:5b:90:16:94:5f:90:c8:ae:14:84:8e:08:
         88:3c:69:92:df:ae:ca:9c:d0:3a:b3:10:2d:3f:08:a3:b8:48:
         bb:8f:9c:84:5f:4d:5e:be:1b:e8:d6:c6:4b:c9:99:d5:4d:28:
         fa:ed:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:25:17 2025 by rpki-client