Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d3380c3e-bfda-3990-ad4b-f9938b949982.roa
File:                     d3380c3e-bfda-3990-ad4b-f9938b949982.roa (raw, json)
Hash identifier:          ukmLfXjOuE6vUuDzmJ8vpFVAOO/quEDf7qWFLz4r3RQ=
Subject key identifier:   55:0E:DD:E6:0F:41:A0:DE:71:A5:F4:0E:C0:8B:A8:BB:DD:FE:C2:F6
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A4A8032F95780E2408A072E40
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d3380c3e-bfda-3990-ad4b-f9938b949982.roa
Signing time:             Mon 23 Jun 2025 22:08:53 +0000
ROA not before:           Mon 23 Jun 2025 22:08:53 +0000
ROA not after:            Sun 21 Sep 2025 22:08:53 +0000
asID:                     15290
IP address blocks:        216.123.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:80:32:f9:57:80:e2:40:8a:07:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 22:08:53 2025 GMT
            Not After : Sep 21 22:08:53 2025 GMT
        Subject: CN=f9cc1627-a4c0-4373-bb4e-b1850e9b3326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a2:41:14:6f:e7:67:31:bb:a7:ba:69:4f:da:
                    3f:ec:85:27:86:4e:08:84:ae:b3:19:52:d0:15:ae:
                    bb:ff:bb:c9:7c:6f:41:40:47:77:f3:8f:02:ac:7c:
                    ca:56:98:93:c8:a6:2e:b4:07:60:fe:de:f4:e4:f2:
                    b2:c2:3a:53:ed:69:f6:e2:2b:37:30:b2:e1:ae:e9:
                    47:c4:c1:38:a6:85:01:e6:a9:2e:9d:8f:aa:79:f3:
                    64:84:8e:0b:1e:2c:d8:93:ec:ac:20:26:c1:8b:47:
                    18:2b:20:1f:66:e9:4f:36:d3:28:b2:cc:7a:16:c1:
                    26:e2:e2:47:7a:97:2b:5f:34:ea:8b:1a:e0:24:5a:
                    64:5d:da:76:1c:ad:ec:66:e0:11:00:61:c5:d4:c5:
                    ee:7c:6d:1e:35:38:75:82:86:c4:79:99:b1:54:fc:
                    ec:fa:66:c7:ce:f4:0b:c7:65:e5:c2:76:bd:69:6c:
                    a1:44:68:64:3a:fc:4a:34:63:50:3c:4e:85:89:9a:
                    9d:59:1d:18:4a:76:bf:c2:83:91:c8:f7:91:8c:dd:
                    20:88:d0:ba:8a:5f:98:d7:d9:6a:91:b2:a8:38:8e:
                    34:54:d3:51:b8:12:5b:cb:4c:11:c8:77:31:10:09:
                    f3:40:8c:18:37:f3:7a:3e:7d:1c:6b:be:01:1e:e3:
                    9e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0E:DD:E6:0F:41:A0:DE:71:A5:F4:0E:C0:8B:A8:BB:DD:FE:C2:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d3380c3e-bfda-3990-ad4b-f9938b949982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:82:5d:c7:8d:12:13:aa:f0:28:f2:7d:97:e1:04:3b:48:4a:
         80:a6:fc:35:7e:95:21:e8:f4:6d:05:3f:67:6b:32:7b:7c:09:
         4c:5e:4d:5a:36:8f:ca:0d:1c:75:97:cd:c8:79:f4:6f:8d:0d:
         7f:5d:70:43:7d:5f:5a:18:1d:1d:70:a0:9f:fc:fe:9c:82:a0:
         b4:b7:62:5f:f9:2d:80:a3:82:87:36:54:5e:73:34:e7:56:47:
         6c:b2:8f:44:8a:d7:8d:4d:9a:3d:37:d9:9b:37:74:ee:ce:69:
         36:45:8a:44:4f:f8:16:1c:42:d1:00:e7:a8:01:65:39:b6:c4:
         e3:d8:97:24:ad:59:6d:e9:c4:fe:2a:a9:b2:8d:c2:01:8e:79:
         e4:87:cd:f8:fc:0e:6b:f9:18:57:0a:47:da:f4:a4:df:f1:c0:
         a4:a2:5e:5b:a0:56:fb:25:c2:00:cd:9f:84:f2:75:d1:b4:df:
         cf:0c:5a:54:91:7c:bb:44:34:cf:cf:3e:a3:ff:03:04:68:ba:
         1c:cb:c0:8d:b9:d4:db:6e:fa:a9:58:88:a5:a1:5e:e8:df:53:
         46:6c:a1:be:30:65:9f:6b:d3:77:44:6d:64:79:2e:bd:7b:c7:
         b7:ed:3b:bc:99:ca:8d:f4:3f:9d:ac:b3:ff:46:1e:54:12:2b:
         af:ef:92:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:08:16 2025 by rpki-client