Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7fc52493-c95c-3ab5-a74a-bb95c3a4743e.roa
File:                     7fc52493-c95c-3ab5-a74a-bb95c3a4743e.roa (raw, json)
Hash identifier:          vq+Sbb8j0zAkDphuy3nI38cdNaBkk+Nb/SwsdOpU6Po=
Subject key identifier:   E6:E2:45:CC:F9:DC:93:9B:EB:1D:EE:6E:48:F1:98:EE:37:B1:3E:47
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849E654F50906258792122A8100
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7fc52493-c95c-3ab5-a74a-bb95c3a4743e.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     33321
IP address blocks:        209.124.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f5:09:06:25:87:92:12:2a:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=83a0ff6b-493a-452b-bbfd-b0093d0e13c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:2e:a4:dc:14:3c:c3:ea:dd:b9:87:f7:40:
                    5b:5a:28:4a:72:b3:53:20:e4:9d:54:48:a0:51:50:
                    53:62:5b:04:6b:72:38:ca:0c:a8:ba:27:1b:42:82:
                    de:24:0d:03:7d:a2:37:05:95:a0:82:40:05:6e:27:
                    e8:c3:c6:49:04:8d:e6:77:ef:3a:ef:58:2b:91:d9:
                    c8:da:bc:5c:de:56:36:12:85:66:31:a4:19:de:10:
                    3a:a7:5a:00:39:93:b3:72:ce:49:b8:31:f7:fd:e0:
                    de:76:68:03:1b:4d:ba:2e:68:1b:e5:c6:ac:a7:87:
                    9a:46:3d:b5:3d:55:bf:44:a3:d6:00:e9:21:cb:54:
                    16:5c:cd:b3:af:1b:fa:99:62:5b:03:1e:10:d7:42:
                    bb:5d:32:dc:94:2a:2e:4f:d5:be:b2:b2:6b:22:ec:
                    b8:7c:41:7b:f7:fe:e2:c1:0a:c7:98:80:5f:08:94:
                    99:fa:88:42:05:d3:dd:01:69:0f:c2:64:27:b1:c3:
                    78:8f:b5:7e:9a:04:f7:8f:fb:bc:82:8e:f9:be:98:
                    75:e6:64:9f:c1:7e:ef:7b:c4:51:73:c0:85:49:6c:
                    20:16:25:05:5c:81:dc:7d:f3:34:81:cd:f4:7b:22:
                    c1:ef:c8:cf:81:70:c4:fd:c8:73:f8:c0:81:62:4b:
                    70:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E2:45:CC:F9:DC:93:9B:EB:1D:EE:6E:48:F1:98:EE:37:B1:3E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7fc52493-c95c-3ab5-a74a-bb95c3a4743e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:b5:80:fc:9b:0d:90:31:5e:8c:d0:c8:0e:05:b8:30:9a:7e:
         21:ae:63:0e:95:b5:95:9c:3c:dc:d2:4b:75:9c:36:56:30:60:
         89:25:38:93:f3:c8:93:7c:6c:c8:68:3c:35:f5:e7:4e:c8:a3:
         38:1c:ff:84:c7:e3:48:7f:d8:f8:a4:84:b9:ea:3e:f1:17:28:
         d8:01:4e:49:8c:bd:50:9f:d2:c7:9e:8e:e7:3f:4a:f1:4a:f5:
         88:d8:c7:8c:36:9b:c6:9c:1d:6b:0a:02:56:f4:10:7f:b5:ad:
         52:1d:6b:f0:e1:f1:29:86:eb:db:47:c1:aa:cd:86:83:87:b2:
         35:2b:a1:06:19:53:41:bf:1b:4a:df:46:74:ee:79:c2:de:ae:
         8c:0f:7f:d8:39:02:26:3c:16:23:8f:0b:20:47:9b:5f:37:45:
         72:5b:e2:a6:45:c2:b2:8b:87:6b:77:d4:57:0c:41:e3:1a:63:
         a7:86:f2:6e:36:35:8a:75:9f:65:b7:ba:c4:ea:68:be:be:c5:
         7a:38:94:32:2f:6d:5e:f0:49:c5:60:b1:da:c6:fe:06:1a:78:
         fe:1b:83:b8:6c:91:e4:31:5d:63:bf:4c:36:be:d3:34:1f:75:
         bc:74:e6:29:0c:dc:a8:bb:28:64:37:1a:44:bc:d4:69:9d:41:
         55:0f:a0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:21:25 2025 by rpki-client