Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9d136aa7-dfb5-3618-8279-4710c4db09d1.roa
File:                     9d136aa7-dfb5-3618-8279-4710c4db09d1.roa (raw, json)
Hash identifier:          QvIV602PWwG5cN9RH/BjJhBOV37ncxIyxk0751x9dbI=
Subject key identifier:   FE:06:01:15:7C:36:E6:75:3A:CB:58:0B:34:B7:C0:D9:B9:55:44:69
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A49A695B4B7064A3E8FC82460
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9d136aa7-dfb5-3618-8279-4710c4db09d1.roa
Signing time:             Mon 23 Jun 2025 14:50:25 +0000
ROA not before:           Mon 23 Jun 2025 14:50:25 +0000
ROA not after:            Sun 21 Sep 2025 14:50:25 +0000
asID:                     15290
IP address blocks:        159.18.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:a6:95:b4:b7:06:4a:3e:8f:c8:24:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 14:50:25 2025 GMT
            Not After : Sep 21 14:50:25 2025 GMT
        Subject: CN=aa6e4ca1-b33c-4d72-b6b5-3c41f916827e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5e:61:dc:76:3c:ca:40:fe:2b:40:2e:37:37:
                    77:18:77:89:d0:d6:de:41:4b:39:18:6c:19:92:22:
                    9d:a4:53:36:55:41:0d:2b:36:f6:8c:7c:76:20:71:
                    70:bc:bc:88:7a:58:52:0f:b4:e2:e1:ca:e3:16:2a:
                    fd:c0:c2:ff:00:38:b6:af:c1:ac:1a:8a:cd:32:b7:
                    7e:59:cd:3d:04:fa:e7:73:54:63:1e:1b:d0:79:7a:
                    96:ea:72:a6:8e:33:19:01:2d:e7:94:bd:27:45:b9:
                    9d:3a:83:ac:9c:b8:66:c6:ae:18:0a:d4:d3:f2:ab:
                    5f:a2:4e:22:91:b0:04:33:5d:29:ce:ec:d3:17:7e:
                    59:18:3c:1f:e2:db:47:f0:96:c1:fe:50:ff:f5:30:
                    c8:59:10:d4:a6:a7:d7:22:6d:b8:f0:1c:90:2d:25:
                    59:b0:13:a3:c2:0f:96:49:2d:64:e7:07:16:55:bc:
                    c1:34:fd:8c:a2:d4:66:f3:cc:fb:60:f6:54:3b:cd:
                    75:77:1f:da:4e:df:d7:c3:58:7b:a7:2f:47:3d:db:
                    c8:c0:d9:1d:29:8c:71:13:7e:1c:23:ed:1f:f9:67:
                    2b:58:f0:f2:0b:e7:36:b6:14:90:69:fa:03:3b:f5:
                    d2:ee:26:ab:22:93:0b:07:52:49:f4:52:92:d4:de:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:06:01:15:7C:36:E6:75:3A:CB:58:0B:34:B7:C0:D9:B9:55:44:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9d136aa7-dfb5-3618-8279-4710c4db09d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:40:99:ba:1c:39:af:3b:79:0c:3e:db:5b:eb:18:60:fb:99:
         19:b3:d0:a1:59:f3:b6:9c:33:34:6e:ce:e2:ae:c8:c2:31:2e:
         40:80:e2:c6:39:d7:51:03:00:ac:56:27:02:1a:d4:77:d5:93:
         f7:ec:2c:5d:e3:fd:11:8a:a0:90:db:a8:fa:dd:16:02:40:a7:
         67:c4:0b:e4:10:2a:42:ef:46:dc:c4:e0:9c:93:c1:1f:dd:e4:
         41:10:3c:f0:3b:d1:d2:39:af:65:0a:77:16:89:af:cf:23:65:
         96:5a:0b:8e:e7:9e:12:a3:c9:83:3d:44:d0:64:6d:dd:ac:c3:
         49:f8:d6:59:a3:80:a8:58:24:54:41:b8:d5:e2:ca:43:69:de:
         0f:ef:15:9e:87:4e:70:c3:42:ae:07:81:90:6f:51:68:d7:f7:
         ee:b8:65:fe:6c:25:99:97:f2:13:bd:15:cb:b1:20:ef:9b:69:
         40:84:43:90:ed:ac:df:24:51:8d:ce:ad:4c:32:93:a9:82:be:
         62:a5:c6:a5:62:df:05:47:10:c6:c9:79:96:4e:80:41:2e:06:
         12:dd:6c:cd:c7:21:28:0c:a4:8d:2c:df:1c:88:44:8d:d2:91:
         12:4e:0a:55:10:e3:e2:72:c5:ab:2d:d0:16:b2:fb:ea:00:b8:
         1d:56:9b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:33:10 2025 by rpki-client