Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa
File:                     101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa (raw, json)
Hash identifier:          SP5QQAz+Gs/UotdavFCJgcz0A2sxAGcsHwKNwaRmbu4=
Subject key identifier:   12:8F:72:41:DE:16:AF:71:2B:E2:D2:57:BB:B3:BD:45:66:04:F5:ED
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584A374AD8C0D457E734885C56DC
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     109
IP address blocks:        192.135.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d8:c0:d4:57:e7:34:88:5c:56:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=ba960901-10e9-46d6-abba-42657b9ac5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:60:0e:e8:2a:94:14:38:6c:5d:f0:e0:20:0c:
                    39:96:7f:56:9a:2a:1c:a5:ba:92:d4:60:8e:bb:98:
                    e9:c0:f7:3d:0a:54:72:a5:67:1a:65:7e:71:89:d4:
                    27:9b:25:1a:2f:57:b2:7a:80:03:9d:76:b8:e1:c2:
                    05:0f:47:71:e1:b5:9d:97:51:f0:b5:4f:dc:1e:6f:
                    d5:03:60:3a:8a:8c:5d:fc:46:04:d6:3c:4d:48:51:
                    46:e8:41:24:50:4f:7a:be:c8:26:e1:af:6b:0b:f6:
                    3c:3b:6e:72:32:8f:15:2c:1e:2a:0b:a7:03:74:a4:
                    d6:b6:94:9d:58:04:6b:7d:49:22:f3:fe:df:b0:bb:
                    ca:9d:b0:fd:41:02:9b:7c:dc:f1:90:96:cb:57:59:
                    86:50:dd:53:83:73:7c:af:8f:57:cd:25:c6:01:97:
                    fe:8d:6e:a0:3f:af:47:1d:a2:b3:7c:71:85:04:b3:
                    ca:80:14:47:82:8d:c8:e4:ba:9f:80:fb:7e:6f:58:
                    29:78:12:32:88:bf:a3:0c:c8:1e:7c:46:96:46:0d:
                    61:6b:0a:25:cd:ee:e8:ef:ec:04:c5:61:1b:ab:b3:
                    c6:b1:a0:15:74:24:47:7b:bf:ef:a9:cd:05:e1:6a:
                    16:2b:8d:8d:55:cb:2d:44:55:48:5c:ab:02:f0:5d:
                    30:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8F:72:41:DE:16:AF:71:2B:E2:D2:57:BB:B3:BD:45:66:04:F5:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/101e84aa-8afc-3dd5-8fc0-0c9be6d1ae64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d1:aa:4b:c2:2f:52:25:6f:66:67:3c:98:03:67:52:c9:57:
         bd:d8:73:3a:13:b2:43:a6:c8:f1:55:3e:65:e6:25:58:b9:3b:
         3a:87:a6:45:ba:77:0c:38:fb:5d:bb:e3:47:87:00:53:bc:38:
         34:3a:75:08:5e:ce:e3:21:1a:da:48:3b:9f:94:3b:c7:b0:4f:
         7d:a3:cf:1c:2a:bd:62:8b:58:39:9a:2b:42:29:c0:b3:a9:35:
         15:a3:f1:ed:16:83:6e:38:b0:2a:5b:ef:0a:25:2c:54:80:c8:
         63:4b:c3:ad:12:cb:97:e6:bd:96:6f:55:ed:94:da:2b:98:9b:
         d4:2c:40:ed:c7:32:e8:41:ee:b8:e6:79:ae:1c:aa:bf:5c:9d:
         65:73:b7:07:2d:4a:3f:ec:a7:63:af:ca:84:40:ac:2f:b1:35:
         2b:a5:02:25:99:db:41:6c:da:80:38:c5:fc:8f:db:fe:25:62:
         f7:60:54:0b:a8:5a:05:81:4c:cb:e5:bd:b9:b4:f2:0b:1e:6b:
         a7:28:27:eb:c1:63:7c:90:c5:d6:f2:d2:a2:d2:45:1d:ec:c4:
         fa:66:66:49:6a:f9:1c:1a:e7:b4:12:1b:a5:6a:1f:56:5d:fc:
         00:bf:8c:1e:15:6e:16:7c:b4:63:1f:7d:6f:cb:2f:fc:7e:0f:
         d1:b7:4c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:52:41 2025 by rpki-client