Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/540b4125-24a3-3589-9314-18a5200c0692.roa
File:                     540b4125-24a3-3589-9314-18a5200c0692.roa (raw, json)
Hash identifier:          Ry9ZmsMcq1KHEaHDkjO3AyYc8c5i8BSwXu3pXKGsy3g=
Subject key identifier:   9C:2E:E2:BA:B1:28:4E:E5:6E:1C:9A:2A:7A:A4:29:41:4E:88:7A:95
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849F7151A93286F883ADC0EC780
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/540b4125-24a3-3589-9314-18a5200c0692.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     63147
IP address blocks:        128.177.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:1a:93:28:6f:88:3a:dc:0e:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=0c96dc5a-cf6e-4d85-8e39-ebeb4c0bea90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:36:ae:90:d2:4d:58:43:31:34:23:e2:7f:
                    31:ae:61:cc:55:c0:f4:8b:1b:b4:34:48:f9:61:a5:
                    c4:ed:25:2e:bc:58:e3:75:46:26:01:a1:66:89:ae:
                    43:e7:77:96:ec:ff:31:21:2b:36:8c:3d:f2:65:61:
                    b0:2c:30:96:d5:1e:64:37:51:cf:a4:c8:af:8e:47:
                    b2:cb:20:4a:13:09:ed:03:9d:fb:e6:84:f7:20:38:
                    94:98:15:2f:aa:f8:54:9f:0e:d8:3d:53:31:22:f0:
                    d2:25:d0:1b:3f:b1:f7:94:6d:6a:b7:7d:ec:d1:e0:
                    8a:ce:66:4f:32:be:f5:50:47:53:9e:cd:39:74:88:
                    64:b6:4d:c6:e0:7c:31:17:3d:3e:04:ba:91:69:4b:
                    44:e3:9c:55:8f:c9:89:6d:57:6a:4e:bd:5e:48:3f:
                    2a:eb:d3:74:3e:2b:95:e8:27:fa:a3:b4:1c:d3:a7:
                    95:23:fe:a9:f1:45:39:1e:73:c9:eb:01:35:d8:2c:
                    27:e7:06:b1:d0:81:cd:7e:f3:56:4e:ec:33:42:84:
                    92:4c:65:67:e5:b0:0f:15:8a:91:9e:6e:02:8e:9c:
                    c5:e5:64:07:b3:61:28:2e:b1:e3:59:9a:ae:53:09:
                    53:c2:bf:25:08:17:44:f1:17:ea:0f:96:46:57:61:
                    3a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2E:E2:BA:B1:28:4E:E5:6E:1C:9A:2A:7A:A4:29:41:4E:88:7A:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/540b4125-24a3-3589-9314-18a5200c0692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:56:fa:44:ae:be:c7:87:58:25:4f:1c:94:10:4e:ca:c9:e8:
         01:aa:95:e7:02:88:ea:61:2d:bc:96:fa:5f:88:c0:87:88:b3:
         9e:5e:89:9c:9c:ba:0b:26:fa:eb:40:4d:a0:e8:ee:a1:0c:dd:
         3e:70:9f:4e:80:98:5e:b2:e7:36:eb:33:ff:d9:93:01:6b:30:
         9d:0c:2b:3e:cb:b7:e5:af:05:24:73:f3:63:1b:3f:22:87:62:
         38:1a:1c:75:7e:cd:ab:5b:59:64:a2:54:40:e4:c8:23:42:52:
         13:7e:a3:67:0e:78:bb:f0:2f:de:b8:2e:e1:74:56:19:ba:76:
         c9:ca:73:55:00:87:7a:1f:5f:29:53:b7:02:28:f1:bb:d8:06:
         26:4b:be:8d:a4:c9:0c:7c:dd:19:70:fc:3a:0f:c1:37:e0:80:
         8a:e3:b0:b1:7a:88:af:b6:df:e0:43:a1:e6:72:08:e8:17:a4:
         f3:56:a5:a2:24:b2:b0:ea:cd:a6:68:43:36:e5:12:b7:0d:f3:
         c1:58:6f:c7:8b:68:f8:fb:23:80:8b:f7:e8:8a:2c:32:5a:10:
         f1:3b:48:d1:73:3d:c1:b5:a7:e4:fe:97:4e:75:0d:91:e7:11:
         fb:35:1f:66:91:32:ea:77:79:e2:6f:56:12:dc:cd:c3:c2:ae:
         37:bd:68:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:32:38 2025 by rpki-client