Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/abb33762-99e5-3a8a-be57-c836296c219e.roa
File:                     abb33762-99e5-3a8a-be57-c836296c219e.roa (raw, json)
Hash identifier:          tbTwjQCGDARpobEIfcZAnF8LiXx7j1eGoWQ3UlpPDdQ=
Subject key identifier:   1E:1F:6D:66:16:C9:F5:E2:3D:B8:C4:E9:20:6A:70:C1:FF:8F:62:DB
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849F87A892597B95C152FFDA910
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/abb33762-99e5-3a8a-be57-c836296c219e.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     4997
IP address blocks:        208.39.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:89:25:97:b9:5c:15:2f:fd:a9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=961ede1f-e82c-4419-accd-7175e1f924b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:52:bb:ef:be:a6:99:18:99:ea:23:d7:ca:
                    f5:95:6b:1d:9f:cb:ee:21:e3:8c:6a:80:a1:12:85:
                    e5:b4:4d:47:18:cd:ab:11:7f:3a:36:7c:5b:f1:21:
                    e3:0d:ce:f2:8f:97:6d:d7:68:82:ad:21:af:3b:93:
                    18:1c:c6:54:9b:fb:18:7e:c2:f5:c8:61:ea:02:f6:
                    36:9b:05:38:aa:2d:1a:9e:c1:ce:2d:80:36:79:e5:
                    59:8e:02:f7:3d:58:69:93:3b:2c:e5:e5:b6:d3:e0:
                    c7:f4:2b:d8:9d:70:c7:67:a0:4c:d6:88:ba:80:a0:
                    38:5f:fa:ba:3f:91:94:1a:e4:06:4a:0b:d6:14:00:
                    17:6f:73:8c:26:5c:96:69:5f:25:a7:8a:9f:12:63:
                    b5:df:16:85:2e:1b:8b:e7:d0:a7:17:7a:c0:28:71:
                    14:7a:8c:b4:ba:7a:98:a1:be:30:b1:e7:6f:58:0e:
                    96:83:b3:15:9b:ed:be:74:00:37:35:d6:2b:12:d8:
                    90:d3:a7:d6:20:59:0b:3a:31:73:fe:5c:53:c2:cb:
                    28:b7:aa:03:9b:d1:2f:e0:39:af:83:e8:a1:fd:1f:
                    b6:1a:08:c2:26:0e:60:8c:4b:bf:42:ff:dd:57:52:
                    9d:02:0c:65:e2:3d:3e:21:d1:c5:90:b2:e1:13:de:
                    69:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1F:6D:66:16:C9:F5:E2:3D:B8:C4:E9:20:6A:70:C1:FF:8F:62:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/abb33762-99e5-3a8a-be57-c836296c219e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:e1:f4:c1:59:3c:e3:15:02:24:85:27:32:22:92:0a:e9:30:
         1f:e7:a7:cc:73:12:cc:fe:dc:0d:f8:de:5b:b5:8a:25:40:9e:
         89:84:47:33:c3:73:39:e4:23:92:d9:16:99:b0:0d:ba:2d:d7:
         e6:85:09:7d:dc:f8:b8:32:6f:41:0d:3b:8d:e8:2e:fd:9a:16:
         70:1f:57:04:3c:b5:6c:58:ac:8f:3d:36:78:2e:39:ab:7c:2e:
         f1:16:38:3a:a7:b5:a1:10:4b:db:ca:d2:d9:8e:4e:10:74:c1:
         52:ce:e5:80:01:19:eb:61:ab:74:66:38:90:02:70:a9:b6:00:
         1e:d3:6d:e6:c3:a3:73:3e:22:73:ae:9d:c8:53:6b:d1:11:c4:
         87:9d:aa:1a:30:f1:5c:c2:da:bd:2f:15:29:f1:7e:39:c0:fd:
         18:d0:a5:8f:53:c7:4a:02:03:d1:6d:73:46:26:db:b5:60:e4:
         dc:0b:bd:46:b4:b7:18:ad:cd:b9:2a:6f:40:2c:d3:f2:85:30:
         76:10:48:bd:e9:ee:bc:4c:73:f3:8a:66:6d:77:66:eb:7d:48:
         f9:70:28:b2:49:b9:d8:df:cc:b3:e9:41:f1:1f:ff:7a:5e:6a:
         53:42:71:6a:d8:77:7e:f9:ce:34:65:93:ed:f3:12:97:98:c7:
         3e:45:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:33:36 2025 by rpki-client