Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/643d361b-c7bb-38de-aa52-f1c332bae5b9.roa
File:                     643d361b-c7bb-38de-aa52-f1c332bae5b9.roa (raw, json)
Hash identifier:          FeXYl/oyHB/pxLdn9Y/ZbtWmodcF+VFIgodZCiny6bo=
Subject key identifier:   23:D7:BC:12:C8:25:13:D3:4B:1C:18:CC:89:13:74:A1:45:19:1A:C7
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584A497072682365C4C1D07A2780
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/643d361b-c7bb-38de-aa52-f1c332bae5b9.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     109
IP address blocks:        198.135.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:72:68:23:65:c4:c1:d0:7a:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=234dadab-850c-4fa3-8a9e-4a62e43d4268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:31:0a:27:7a:7a:b7:5c:a7:89:fb:26:2b:07:
                    34:3f:1e:fe:3b:8c:ac:60:1c:ee:74:51:f5:e2:07:
                    96:53:2e:ff:a7:49:c5:27:01:2b:f8:31:c4:a5:cb:
                    4f:c9:36:d9:76:44:b3:d4:b0:68:58:4e:86:ff:0e:
                    d8:6f:19:f7:ae:fc:db:41:d1:b7:44:37:02:30:1d:
                    e7:32:9b:b6:93:82:ba:3d:2b:e1:09:3d:8c:c8:44:
                    62:ec:08:14:70:77:cf:58:2a:d5:15:0f:63:61:73:
                    35:34:07:a5:02:b1:9a:d1:c7:9c:40:44:95:a4:b9:
                    e7:db:96:e1:72:e1:ba:dc:04:74:f9:16:b7:1f:e1:
                    87:f8:0e:2e:8e:d4:19:e2:d4:86:13:8e:db:e4:c2:
                    28:47:44:b2:a4:66:de:4f:97:93:09:8b:0b:f2:80:
                    fd:2f:e1:07:5c:d9:e3:ec:df:70:83:4d:e9:fc:ec:
                    26:9e:2c:2e:fb:9c:34:d7:b0:6d:a2:ef:8a:e2:4c:
                    d4:b7:6f:69:45:04:2c:d0:49:8b:f2:f9:fa:9f:d7:
                    cf:0f:cd:9b:7f:ce:1a:f8:de:d7:09:68:02:86:eb:
                    e8:40:4e:c1:c9:f3:b3:ba:3e:54:9a:0d:72:19:22:
                    5c:8c:de:68:ee:84:01:f6:90:28:4e:66:70:44:6f:
                    d8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D7:BC:12:C8:25:13:D3:4B:1C:18:CC:89:13:74:A1:45:19:1A:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/643d361b-c7bb-38de-aa52-f1c332bae5b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b5:a7:64:d1:b0:5d:d4:e9:df:7f:aa:b2:92:61:06:df:79:
         14:7f:75:48:90:93:86:ae:ee:a3:63:e6:73:07:6a:1f:ec:70:
         ab:b7:2e:f5:1a:5e:e0:97:7c:42:df:81:40:68:81:e7:56:b7:
         00:61:27:0e:6d:d7:1e:52:31:51:69:42:c8:1c:e0:67:c5:24:
         40:59:9e:62:3a:3f:96:d5:53:62:04:12:0b:2f:52:4b:90:67:
         2d:0c:a0:de:2e:b0:b3:0f:ec:f4:a3:83:76:e6:e2:d9:f1:05:
         2f:cc:1c:e5:82:9f:59:65:c1:54:a4:a1:bb:cc:af:2b:50:d6:
         c6:24:4d:e5:5b:4d:72:ed:09:2b:62:d3:1e:a8:dd:87:0d:7c:
         ad:b8:cd:7b:e4:e3:14:c3:d9:b2:eb:9d:91:fc:5c:bb:95:a5:
         08:71:ae:9f:ac:53:53:ff:5c:ea:c6:1a:ee:36:1b:2c:03:08:
         0d:2b:d2:80:cf:db:7f:52:03:54:f1:9c:e2:1a:b9:3e:d4:e5:
         2c:97:95:26:d3:ed:02:43:28:a2:5e:ff:dd:e4:93:c3:fb:ff:
         ca:f0:e0:0d:65:a0:e9:31:fe:31:72:c0:a3:f4:46:37:1d:87:
         e8:be:3a:9a:1b:ba:7c:5b:bd:ab:72:0d:c6:9b:60:bb:68:ac:
         09:21:06:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:13:30 2025 by rpki-client