Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3cf07f19-636c-3ea5-a053-127861611f6e.roa
File:                     3cf07f19-636c-3ea5-a053-127861611f6e.roa (raw, json)
Hash identifier:          VHHPlLbza84J7ZmsXmyxzj/CaoKzabNLFLEExhZDKDU=
Subject key identifier:   96:1F:F2:C1:62:1E:10:C9:8A:A4:E2:9D:D0:7E:93:B0:00:72:4D:DF
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A4A8B09435C1B91EB41D43A80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3cf07f19-636c-3ea5-a053-127861611f6e.roa
Signing time:             Mon 23 Jun 2025 22:30:43 +0000
ROA not before:           Mon 23 Jun 2025 22:30:43 +0000
ROA not after:            Sun 21 Sep 2025 22:30:43 +0000
asID:                     21570
IP address blocks:        216.123.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:8b:09:43:5c:1b:91:eb:41:d4:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 22:30:43 2025 GMT
            Not After : Sep 21 22:30:43 2025 GMT
        Subject: CN=d5a6ae2f-3231-4317-94b7-e39477ac7ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4a:d6:6a:60:22:6e:9e:55:93:08:2f:90:5f:
                    2d:bc:9e:a6:c2:a6:06:38:2a:10:65:4b:a1:58:62:
                    34:54:bb:b1:4e:b6:12:38:a4:a8:f8:82:dc:c4:3c:
                    cf:77:b7:e9:7e:b0:64:8a:69:4e:c6:a5:b2:be:06:
                    59:a3:00:f0:f2:ff:6f:32:2e:1f:0f:49:a9:a7:8d:
                    cc:5a:8d:a8:80:de:bf:d0:32:30:c3:0a:a1:af:31:
                    30:73:7c:74:a6:da:0d:ef:52:27:df:bb:2e:fd:79:
                    d8:e4:cb:7e:6e:68:e1:91:1d:86:c6:67:49:15:72:
                    e3:8d:10:8f:08:3c:75:dd:87:d3:85:aa:e7:26:59:
                    6b:73:70:43:1b:91:2b:93:a0:2e:23:a1:a7:92:20:
                    e0:02:9b:c8:ae:42:48:16:e1:9d:fc:c9:84:8d:90:
                    bd:af:3e:13:55:a5:84:f0:25:23:6b:9e:4a:ad:ef:
                    dc:56:7c:ff:b9:33:25:40:eb:73:c3:03:3e:1a:6e:
                    f5:01:cb:ce:bb:8b:e4:0d:21:cf:b9:c1:1b:df:21:
                    0a:d2:c3:a2:33:93:c4:7d:b0:d0:59:8d:1d:7b:64:
                    f9:d1:e1:79:ae:17:3b:c4:27:6a:d6:43:a6:89:3a:
                    ca:8e:2a:87:be:f8:d9:95:18:a2:a2:b9:ec:6e:2d:
                    21:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1F:F2:C1:62:1E:10:C9:8A:A4:E2:9D:D0:7E:93:B0:00:72:4D:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3cf07f19-636c-3ea5-a053-127861611f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:37:45:8e:68:89:5a:9d:db:99:b8:af:58:ff:7f:74:cb:2b:
         eb:87:ce:a6:42:09:01:d9:83:ef:f7:c3:d8:87:e8:4f:b5:5b:
         b9:61:bc:6a:04:83:62:7d:86:ca:9f:35:6a:3a:9d:40:88:4a:
         ad:a5:5a:f0:af:57:66:bb:17:47:b2:b1:df:f7:56:9f:62:b0:
         2f:08:0e:a6:6a:c2:76:d9:33:20:96:02:30:b2:f2:20:fd:7d:
         29:73:0d:62:61:41:37:80:de:6e:20:3a:a4:e3:d0:c9:00:da:
         50:e1:6c:2c:0a:de:6f:c7:48:58:a8:44:66:91:c6:d5:9c:aa:
         76:b1:55:c3:97:3c:0a:37:c0:03:e8:6b:24:d2:23:6e:1a:25:
         ad:71:ae:8f:11:9d:56:c7:42:db:9a:76:e5:ac:4f:55:a5:26:
         16:60:2c:6a:6a:e1:f6:cd:65:d9:f2:39:d3:a9:d4:3f:b2:d4:
         ac:a0:cb:0d:09:e1:7a:92:0a:6e:99:be:b7:04:89:db:ca:0e:
         76:f3:e1:2a:cb:4e:85:24:be:f5:ee:15:2f:69:45:b0:44:f5:
         c1:dd:95:44:ad:df:da:89:a8:37:7f:22:59:ee:96:2e:df:90:
         a6:d9:37:24:0f:9c:00:26:d9:fe:a6:57:6d:53:ab:8b:ba:eb:
         53:ef:b8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:40:44 2025 by rpki-client