Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/332e421a-fbfb-3d5f-baca-dd32af9a852f.roa
File:                     332e421a-fbfb-3d5f-baca-dd32af9a852f.roa (raw, json)
Hash identifier:          gQyMS+/A1T3m6y3FIBu+EiAGPmIulOBqoRDp9vMuRQ8=
Subject key identifier:   68:71:8F:32:68:A6:C2:56:A2:67:57:2A:88:13:9C:4F:E0:D7:71:83
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A520E206BBCE4979EFAB2ED00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/332e421a-fbfb-3d5f-baca-dd32af9a852f.roa
Signing time:             Thu 26 Jun 2025 15:05:31 +0000
ROA not before:           Thu 26 Jun 2025 15:05:31 +0000
ROA not after:            Wed 24 Sep 2025 15:05:31 +0000
asID:                     6461
IP address blocks:        199.212.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:52:0e:20:6b:bc:e4:97:9e:fa:b2:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 26 15:05:31 2025 GMT
            Not After : Sep 24 15:05:31 2025 GMT
        Subject: CN=c3ac43cd-4b17-415e-8172-58c19a7ca955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5f:c9:11:28:43:23:ce:2c:97:aa:37:a4:db:
                    98:e5:99:bc:ed:ab:b3:eb:02:07:41:f1:2e:83:9d:
                    3b:5e:aa:44:c7:ea:c2:e1:34:b8:4f:78:7a:47:89:
                    93:e8:07:c1:c2:ed:8e:4b:32:35:a4:b1:8d:c5:31:
                    f7:fc:c2:b9:ed:6b:46:a8:71:0a:7b:b5:43:f5:74:
                    a3:99:74:ee:f3:1c:59:80:58:d3:51:ed:38:64:11:
                    d3:42:60:bf:f1:36:71:0c:a9:ff:91:cc:73:c5:e6:
                    71:68:ba:52:68:c3:d1:a7:74:14:f7:9f:8d:04:05:
                    cc:ba:a6:70:10:bd:53:a7:da:a4:44:fd:e6:5f:39:
                    36:20:9e:ea:04:bc:07:d2:79:e2:cb:f7:70:8e:e5:
                    16:d8:67:20:26:42:cb:2d:17:4d:6c:22:a7:ea:e5:
                    2c:12:f2:ba:af:38:7d:48:40:18:94:c7:56:70:dc:
                    f7:42:c7:8a:27:ca:32:f0:29:29:3f:d3:d3:59:32:
                    7f:f7:78:94:86:00:9b:b0:c9:0f:bf:7e:4a:37:51:
                    d9:af:4c:3b:aa:11:1d:e4:00:f3:43:27:4a:36:cc:
                    81:eb:71:b4:81:76:70:c2:19:5f:f5:94:39:c7:2b:
                    3f:8a:55:f3:ed:ec:3d:67:92:82:04:c7:e0:23:1c:
                    e0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:71:8F:32:68:A6:C2:56:A2:67:57:2A:88:13:9C:4F:E0:D7:71:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/332e421a-fbfb-3d5f-baca-dd32af9a852f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:bf:b9:13:ee:60:b6:27:42:8d:17:70:0f:69:c6:34:3d:80:
         6d:71:d0:63:0c:b5:0b:e2:e3:67:96:46:02:3d:84:62:41:95:
         76:7f:10:1c:a3:e1:2a:1f:c4:e6:3e:14:8b:c8:20:a4:3c:60:
         68:a9:50:4a:db:c9:50:8c:c9:cf:3a:7b:e3:79:94:4d:fe:8b:
         db:71:52:7d:e4:66:58:86:3a:1b:d3:2b:d4:57:23:78:7e:82:
         00:01:34:3e:b6:aa:3f:45:00:ef:89:a9:da:8b:ca:2b:0a:65:
         7a:4a:62:b9:d0:36:67:e0:3e:fe:66:3c:5e:5f:11:de:01:60:
         2a:b0:49:35:5e:04:30:06:ff:88:98:34:8d:98:f5:2e:95:d5:
         c9:c8:97:ba:82:dd:86:0b:af:da:ba:85:4b:ef:94:6a:29:1c:
         e1:2d:d8:7b:b3:2c:e5:67:a2:09:55:2a:db:52:38:09:f6:89:
         62:f2:dc:be:c9:d7:63:00:c0:63:83:3d:ce:20:d2:5d:35:4d:
         a2:21:61:9b:17:4f:0b:b8:bd:d3:b8:7a:82:f6:8b:00:49:42:
         a2:ed:d6:d2:1d:45:2d:26:d5:05:d8:3f:9d:cd:b9:91:76:01:
         97:4f:fa:75:35:8e:22:d9:3a:a3:79:5a:06:2c:14:d0:53:05:
         21:c8:62:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:59:51 2025 by rpki-client