Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/e5ea57dc-9a94-3b65-a72e-9761152b9a56.roa
File:                     e5ea57dc-9a94-3b65-a72e-9761152b9a56.roa (raw, json)
Hash identifier:          VUSOkMvx3V1uc1npu+CqT8SAbPMPxMf43XjJkNRrGXA=
Subject key identifier:   7E:C2:B0:3B:1A:9F:CD:60:AF:E7:62:82:1D:8F:DC:60:03:0C:9D:1B
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A46FE173DC1A54B150C579320
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/e5ea57dc-9a94-3b65-a72e-9761152b9a56.roa
Signing time:             Sun 22 Jun 2025 15:59:18 +0000
ROA not before:           Sun 22 Jun 2025 15:59:18 +0000
ROA not after:            Sat 20 Sep 2025 15:59:18 +0000
asID:                     15290
IP address blocks:        66.46.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:fe:17:3d:c1:a5:4b:15:0c:57:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 22 15:59:18 2025 GMT
            Not After : Sep 20 15:59:18 2025 GMT
        Subject: CN=201d199f-6174-4bf3-82f1-eb467e92e48b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d1:e8:6d:44:08:33:72:06:6e:4d:37:2f:ca:
                    6d:70:54:31:a5:be:75:12:34:5d:d1:28:9b:24:00:
                    14:bf:29:2b:c1:a6:a2:b3:e2:53:75:36:ed:18:a0:
                    9f:81:74:fc:9c:b0:b0:5b:89:f5:d7:72:12:a1:cb:
                    ca:5f:e5:5d:92:7a:75:07:c7:41:5c:d2:54:03:9a:
                    2a:e9:0a:47:33:64:0f:46:4b:98:24:69:53:0e:ef:
                    00:50:45:9c:46:2e:18:30:4d:72:24:e4:4d:ac:6d:
                    f5:81:76:2d:99:70:86:85:ea:9d:7a:cc:06:90:42:
                    5d:41:c4:e9:c4:79:56:10:eb:14:58:0e:b4:4c:c8:
                    88:7b:12:7f:ee:aa:3d:52:24:e0:a0:ea:26:4d:22:
                    02:08:87:19:ea:98:22:43:61:31:f7:80:99:ce:0f:
                    33:34:8e:89:38:2f:50:83:38:bf:e4:dd:5c:89:b2:
                    77:5e:3b:ca:c5:da:a6:34:4f:d7:b8:a3:6b:87:45:
                    da:3e:1a:bd:64:43:90:26:ca:39:e4:14:1a:95:56:
                    d4:06:23:51:92:de:d1:f3:53:41:f3:7c:90:53:8d:
                    b9:da:bc:01:82:f7:26:1b:52:d0:94:56:61:86:bb:
                    66:a2:c8:1d:0d:37:c8:3b:61:b8:c8:54:b8:0e:27:
                    91:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C2:B0:3B:1A:9F:CD:60:AF:E7:62:82:1D:8F:DC:60:03:0C:9D:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/e5ea57dc-9a94-3b65-a72e-9761152b9a56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:7d:89:96:aa:cb:ec:2a:db:cd:be:a6:f4:29:43:1e:6a:aa:
         a4:52:49:88:b9:ce:44:93:df:96:2b:f9:68:8c:c0:fb:d6:4c:
         28:6b:51:3d:57:2c:8b:3d:1b:05:41:df:be:ff:a9:a4:82:13:
         79:44:45:85:f3:1c:2c:50:1c:0f:6d:4d:fc:87:e1:83:f6:87:
         d9:14:05:f4:6a:b9:e5:68:50:20:4b:ba:fc:f7:f3:7b:5c:b5:
         14:02:05:08:35:4f:d8:04:e3:18:57:3d:7d:cf:b2:73:df:97:
         7f:ca:61:d5:c5:b2:5f:3d:a9:22:6c:c1:a6:52:2d:cd:45:a7:
         c7:c0:39:dc:91:d5:38:9b:c8:ef:83:a0:92:55:3a:01:ab:f0:
         1b:16:08:7c:36:bd:0f:95:89:83:ca:a2:d4:1f:b1:ac:17:c5:
         3c:11:47:6d:5a:26:f4:81:cc:fa:28:35:ca:8c:4e:f6:2a:b9:
         fa:f6:e4:67:65:bb:47:5b:42:43:0f:9b:70:c0:73:7c:ae:a0:
         1b:68:d8:e5:72:4b:18:bd:04:39:55:d7:6b:2d:7c:f7:2e:d8:
         dc:99:05:3b:28:e3:16:cf:8b:c3:a1:9d:89:d3:7b:8b:81:a6:
         77:64:c6:3f:87:b5:26:f1:4d:d3:8f:8c:82:35:fc:32:ba:d7:
         87:bf:d6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:48:04 2025 by rpki-client