Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8aa2d08d-936f-3652-bc22-c57dee6b36e9.roa
File:                     8aa2d08d-936f-3652-bc22-c57dee6b36e9.roa (raw, json)
Hash identifier:          hqDLHvPktK9RwFwJs+FUBAi65KYIcA+dlUAfUZb7V4s=
Subject key identifier:   6A:8F:FF:A6:B8:86:CD:32:0A:DC:07:71:60:BF:41:9C:EB:9A:D3:CF
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A4A01BF3935AD74F4A8C32B00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8aa2d08d-936f-3652-bc22-c57dee6b36e9.roa
Signing time:             Mon 23 Jun 2025 17:54:06 +0000
ROA not before:           Mon 23 Jun 2025 17:54:06 +0000
ROA not after:            Sun 21 Sep 2025 17:54:06 +0000
asID:                     15290
IP address blocks:        207.230.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:01:bf:39:35:ad:74:f4:a8:c3:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 17:54:06 2025 GMT
            Not After : Sep 21 17:54:06 2025 GMT
        Subject: CN=b02bb172-18df-4da6-82ca-5751be2aae29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:f5:99:94:0e:cf:c3:1e:55:11:59:29:9c:
                    2c:97:bb:2d:f6:29:49:22:80:e4:3e:8c:e2:7c:b9:
                    d5:31:cb:17:c5:b0:da:ea:5d:fc:ce:2d:ea:12:83:
                    21:5d:18:de:4e:54:7e:d4:bf:fd:01:0a:c3:b1:43:
                    f3:27:28:45:fd:02:b3:21:21:90:47:a7:f4:4a:db:
                    28:ce:1f:a9:05:d2:c2:64:1a:63:91:6e:f0:30:30:
                    c6:69:4c:c2:cd:63:8c:50:e6:b8:3c:38:6d:34:ce:
                    cd:e3:3a:53:31:a9:55:bb:ea:a1:61:77:0f:c9:7f:
                    b4:1d:d1:04:94:d9:ae:a3:64:18:2e:c3:98:b1:45:
                    32:af:96:6d:64:a7:ad:b4:a5:9c:b1:16:b9:0e:8a:
                    df:0f:5f:14:2c:71:3d:a0:7a:fb:d6:fb:03:74:b1:
                    ce:61:e1:a3:ce:28:46:b8:a7:a0:b8:4e:05:ac:15:
                    7f:a8:6f:41:d6:70:53:96:c9:2a:90:75:a5:4c:fc:
                    f4:dc:94:48:ef:68:ec:6f:7d:c2:e4:36:51:09:a0:
                    77:e0:ff:e5:5f:31:b1:f2:06:e4:71:ed:6d:ed:75:
                    56:b7:57:4b:b7:2c:c5:4c:50:12:16:d1:75:8e:07:
                    ad:f9:7b:6d:c5:22:ff:a6:ec:e5:2c:23:7a:cc:30:
                    05:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8F:FF:A6:B8:86:CD:32:0A:DC:07:71:60:BF:41:9C:EB:9A:D3:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8aa2d08d-936f-3652-bc22-c57dee6b36e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f3:d4:86:bf:e6:61:57:4b:53:6d:d4:6a:42:a3:73:fb:f7:
         63:f7:24:51:4f:ba:9a:4e:31:48:59:41:80:40:67:df:27:c3:
         24:cb:ff:a4:de:50:3e:d7:e5:e6:5f:f2:ac:8c:1f:a7:6e:23:
         f1:e8:e4:75:72:8d:b7:11:30:f8:6f:19:e3:09:a7:25:ab:93:
         2f:23:bf:50:ae:8d:64:a0:b5:99:01:58:5c:a8:6f:a9:19:ca:
         69:8b:66:bb:a7:75:1c:64:9c:f7:2b:8e:24:91:98:af:8f:de:
         d8:0b:c3:2d:12:76:63:04:7f:ec:45:93:a8:71:45:2b:05:b0:
         42:85:67:7b:35:a6:f2:78:e4:8e:c0:6b:41:4b:23:1c:1d:b0:
         d2:28:c8:d0:93:de:db:fe:d0:66:6f:14:3f:05:98:1a:5d:c7:
         cd:53:9d:f4:72:31:59:6e:45:89:10:07:2a:89:22:e4:d3:ca:
         cb:c3:fe:aa:a6:6f:57:8d:61:6d:39:ae:0e:78:9a:10:7a:f8:
         4c:1f:d0:7b:0e:f4:bf:6b:c1:0a:60:83:7e:f7:f5:a2:9f:c3:
         1f:ee:3b:64:8a:b0:1d:1a:00:7c:64:97:3d:90:9d:41:82:8e:
         39:a8:ea:7d:6b:10:f8:fe:9e:aa:b6:41:21:7e:6e:78:b1:9d:
         77:d5:66:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:10:39 2025 by rpki-client