Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d6ee60b2-2426-33f5-ad3d-fe7c95f907d0.roa
File:                     d6ee60b2-2426-33f5-ad3d-fe7c95f907d0.roa (raw, json)
Hash identifier:          bV03y/QSPY6Plek6epbP5uwqKVYyCDel48TvLRc+AhA=
Subject key identifier:   25:C6:6A:38:59:FF:04:78:D0:EA:B0:C4:34:F5:C8:92:BD:C0:11:29
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A4A8B9100987B196628208880
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d6ee60b2-2426-33f5-ad3d-fe7c95f907d0.roa
Signing time:             Mon 23 Jun 2025 22:31:47 +0000
ROA not before:           Mon 23 Jun 2025 22:31:47 +0000
ROA not after:            Sun 21 Sep 2025 22:31:47 +0000
asID:                     21570
IP address blocks:        216.191.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:8b:91:00:98:7b:19:66:28:20:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 22:31:47 2025 GMT
            Not After : Sep 21 22:31:47 2025 GMT
        Subject: CN=9a5f46e7-b2cd-4cc3-ab10-b94c9402a5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:97:0f:26:a9:43:37:27:ac:7b:0a:95:6c:
                    41:90:d2:b1:62:6a:8c:14:e9:e3:88:81:3a:b1:3d:
                    96:17:b8:f5:9d:3f:f9:58:ee:8f:92:4e:6e:fe:db:
                    44:e6:36:e5:ae:83:36:04:96:79:55:76:0e:26:69:
                    98:ff:b9:3a:6b:92:f4:c0:87:34:ef:76:94:b7:96:
                    6a:f4:a8:67:c2:76:1a:65:24:89:c2:a2:34:ae:3f:
                    19:2d:f9:ba:56:21:cc:39:1c:ee:5b:94:4f:dd:6f:
                    3d:5f:38:2b:fc:73:24:cc:ba:bc:0a:6d:e8:86:8a:
                    ea:9f:74:92:4f:5c:1a:0b:2f:3e:77:d2:74:f6:d4:
                    a4:84:34:e6:b7:4d:9d:e5:7c:cf:fd:e0:b6:4e:71:
                    21:e2:53:99:c2:89:9e:7c:16:3a:c5:b6:4f:a9:c4:
                    d6:95:81:c4:93:4b:e2:08:bc:7c:fa:51:81:c4:d1:
                    ea:8c:fc:95:f2:46:4c:3b:c0:8d:06:cb:e9:f4:17:
                    2e:a8:d8:f5:12:7c:b0:cd:d0:04:14:c8:6d:06:e0:
                    7b:80:cb:1c:de:a9:bf:c3:d7:af:a0:bd:b4:52:55:
                    e7:33:1d:84:c7:a6:9e:03:ca:a6:d3:b3:cb:00:5d:
                    bb:40:fc:a5:74:4e:5b:2d:a9:12:87:be:9f:49:84:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C6:6A:38:59:FF:04:78:D0:EA:B0:C4:34:F5:C8:92:BD:C0:11:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d6ee60b2-2426-33f5-ad3d-fe7c95f907d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:74:fb:b9:99:4a:ce:92:64:20:98:87:06:12:0f:79:e1:
         12:23:2f:2f:d5:f7:cd:7b:8d:df:86:4b:59:7e:3f:6a:9a:9c:
         4d:f7:a0:31:de:5a:66:8e:8b:0c:91:9d:96:85:4f:de:70:f0:
         11:f6:67:54:a5:d9:66:49:f2:14:53:17:6d:9f:66:25:b0:5a:
         3d:b6:fa:8f:09:57:28:31:15:2b:1c:70:2d:8d:51:a9:0f:8e:
         2e:24:9b:b4:12:0d:99:4f:1c:30:66:15:9b:a1:9f:c7:15:8a:
         8a:31:48:06:63:df:1c:49:fd:e6:0d:88:a5:50:e5:bb:9e:13:
         0b:c2:60:ab:4b:63:6d:dd:db:99:c4:d3:16:41:a8:bd:19:23:
         a6:5f:03:65:a7:b9:21:45:80:1f:89:3b:9e:6b:89:e5:a2:07:
         be:a1:f3:c9:0f:17:8b:4c:67:87:c9:83:e2:c4:29:e0:bf:c9:
         43:6e:7e:19:c0:7e:fe:f0:7d:05:65:13:49:81:f1:d3:df:91:
         5e:3e:56:2f:54:48:39:5f:78:1a:c2:d7:75:78:60:ff:e9:dc:
         d7:8c:c4:26:2a:f2:8a:5f:92:f7:1f:33:e8:ff:5e:40:75:3f:
         94:06:17:12:cc:5a:04:77:4f:3b:23:a9:0b:69:cc:53:2e:46:
         b2:be:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:05:53 2025 by rpki-client