Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f53c03eb-5362-3ba6-81bf-43eded59e28d.roa
File:                     f53c03eb-5362-3ba6-81bf-43eded59e28d.roa (raw, json)
Hash identifier:          JsiA4reS7ui5rTmHI+6rK/DdE5x0yzsuFDeksPs/ELk=
Subject key identifier:   23:98:18:85:59:F8:CC:1C:88:53:DC:3A:7B:D8:38:90:05:BC:07:12
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849E654F1FAC04D3DAF5BEDFFC0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f53c03eb-5362-3ba6-81bf-43eded59e28d.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     55224
IP address blocks:        216.235.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f1:fa:c0:4d:3d:af:5b:ed:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=097b63fa-b924-472e-8bc1-7a7885028f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9a:aa:f4:91:02:2d:ee:8b:bf:e6:6b:06:e1:
                    27:74:e4:53:01:21:bb:d1:f3:32:95:f7:c1:a1:02:
                    8d:66:b2:19:db:5c:26:f5:af:e4:89:e8:b9:9b:e3:
                    49:f9:dd:fd:d5:19:56:65:46:59:cb:81:a6:51:9a:
                    ef:da:70:46:87:38:9f:8e:84:9e:50:7f:7d:d1:af:
                    d8:a7:fe:a7:59:73:56:a9:13:a7:5a:f1:65:d7:d0:
                    1a:70:f1:43:a1:0d:d0:f0:1a:40:ec:e3:11:9e:f3:
                    70:38:30:87:c9:dc:1c:15:a0:bd:a9:38:e5:04:b6:
                    37:ee:c6:b4:50:63:80:f4:ab:49:13:b6:a4:fb:b3:
                    dc:9f:32:6d:b2:5c:8e:9b:a0:e2:f9:db:ab:29:a7:
                    00:81:a6:8c:4f:69:8a:1c:28:6f:76:10:63:fe:49:
                    4a:98:2a:f0:15:fb:ab:ab:dd:b1:9e:ff:46:06:ec:
                    95:49:72:cb:14:42:58:50:70:d6:17:6d:63:52:e2:
                    bd:4c:7b:31:a9:45:03:f7:ed:96:e3:3a:1f:72:b6:
                    44:6b:27:fe:87:d6:8a:cf:91:fe:6e:71:d6:3b:1a:
                    a5:bd:bd:8f:a9:fb:69:e6:d8:46:2e:d7:27:39:c7:
                    26:25:17:23:8e:6c:41:1b:07:1a:e2:95:25:a3:6a:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:98:18:85:59:F8:CC:1C:88:53:DC:3A:7B:D8:38:90:05:BC:07:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f53c03eb-5362-3ba6-81bf-43eded59e28d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.235.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c2:9c:70:3d:e5:ee:3d:e0:8e:59:e5:50:8f:2b:ef:29:95:
         69:30:6d:f5:d4:ba:5b:1a:d0:18:98:00:6a:ed:fc:b8:58:c5:
         7e:d4:40:3d:f4:ce:c2:60:e7:e5:13:c9:a8:d3:34:ae:35:82:
         47:e9:fa:04:03:2e:77:b9:1a:b7:12:17:ba:3b:1e:d8:31:75:
         34:45:eb:36:e1:31:b6:04:83:13:25:3f:2b:9b:b0:8a:45:4f:
         5f:3e:95:2d:b0:17:d9:21:3e:31:29:6c:17:98:97:0a:f9:29:
         fb:98:1c:0e:d6:22:7c:b8:a3:6f:b7:2c:34:3d:2c:36:02:0e:
         83:09:91:de:b9:37:fd:48:45:94:8c:17:e2:6a:56:b1:63:3d:
         e3:59:d5:4f:94:28:a4:af:a4:2e:bb:64:56:4d:4a:9c:d5:90:
         9a:59:93:34:1b:ef:b2:02:32:09:63:aa:8b:6d:ba:e4:9b:ad:
         5b:88:f4:a8:b5:d0:9a:11:b7:27:46:0a:99:ce:be:d4:ac:5c:
         37:74:fc:e6:37:90:e8:00:9f:19:79:3a:02:9b:47:06:9f:b4:
         3c:9b:d8:c5:81:97:46:9a:68:a1:d1:e9:ed:13:11:7b:39:50:
         6c:a1:2d:bf:11:dd:70:b3:28:b3:1a:8e:31:c6:99:a8:7d:89:
         75:c6:69:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:34:03 2025 by rpki-client