Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/cc6c4896-ee3e-3786-ab05-14a6b8a7c810.roa
File:                     cc6c4896-ee3e-3786-ab05-14a6b8a7c810.roa (raw, json)
Hash identifier:          EmC+F/qmZx7xznSahhHcsWrgYax/kbRLMPAshLx3WMw=
Subject key identifier:   68:E9:EF:98:C8:84:99:CB:4E:52:B0:31:B4:51:5B:4F:30:E4:43:9D
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584A4970725A954F2537F8959A80
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/cc6c4896-ee3e-3786-ab05-14a6b8a7c810.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     109
IP address blocks:        198.133.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:72:5a:95:4f:25:37:f8:95:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=3deb4d7b-5224-4a98-8095-f9f1bb65849d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c1:51:c5:31:f0:e3:de:3d:8f:bf:3a:ae:51:
                    3f:55:e2:91:ac:3a:ff:cb:c1:20:93:38:0a:e2:43:
                    6e:ac:d6:bd:05:1c:e3:46:7f:ea:9e:de:b8:d4:ca:
                    9b:98:f9:94:d3:52:4d:b6:c6:c4:88:d8:4a:d9:d3:
                    b0:80:3f:f2:c0:7e:d7:dc:b9:34:79:1f:15:bf:39:
                    96:be:9b:84:cc:1f:c1:41:29:63:e0:6a:72:1a:d9:
                    66:3f:07:77:5a:dc:78:15:68:7b:04:3a:f0:b9:f8:
                    7d:14:f8:fe:4c:b8:7a:de:8b:75:fe:96:ba:87:78:
                    7f:15:fd:f1:e3:14:db:55:e6:be:a2:53:cb:10:da:
                    eb:7d:8d:ac:fe:37:ea:10:a9:db:00:fd:cb:c3:64:
                    75:85:18:1e:58:a6:f5:62:de:69:fa:bb:d5:d8:80:
                    d5:ba:7d:1b:11:d3:9c:a2:03:3d:b1:0c:a0:29:b1:
                    7d:19:84:57:22:f4:29:9b:41:37:86:4b:2f:a6:4d:
                    3a:49:3b:40:e3:35:67:f0:2b:72:14:37:43:2c:ba:
                    7e:30:63:78:c3:af:01:3e:73:97:eb:80:16:b2:6a:
                    1e:63:15:ab:ae:37:dc:70:03:5a:2c:e6:1c:f5:ab:
                    5d:8f:88:d8:e7:b5:f6:61:d1:0c:60:07:77:60:5f:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E9:EF:98:C8:84:99:CB:4E:52:B0:31:B4:51:5B:4F:30:E4:43:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/cc6c4896-ee3e-3786-ab05-14a6b8a7c810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:a1:e2:bf:37:ff:74:18:6d:84:ca:54:4d:b2:57:14:a3:3f:
         be:35:c9:27:54:c5:43:28:df:b2:25:83:fe:82:23:d0:a1:c7:
         5c:7d:bc:7a:a5:5a:d4:35:10:64:84:1c:ca:e8:10:f1:79:45:
         4e:c9:12:f2:07:70:fc:80:b3:44:18:de:b6:9f:3e:6c:a2:da:
         29:f1:78:b6:40:d8:0e:38:8d:c6:79:87:cc:49:0a:39:ec:64:
         3f:ed:de:67:18:09:8f:66:62:e1:9c:f6:9b:97:82:0b:86:c0:
         00:86:e3:aa:43:ff:f1:e2:b5:5c:4e:9a:07:bb:54:dc:63:4c:
         11:a3:dd:e0:90:09:13:59:10:7b:31:5d:fc:29:08:0e:1a:cb:
         97:e4:4b:2f:52:db:a1:68:e4:37:f0:22:dc:51:d4:51:5f:21:
         d8:e2:c6:d6:38:ed:a6:c8:64:6f:2a:6c:8b:ce:0c:e3:91:30:
         29:fd:d2:c5:46:1d:8f:59:71:1f:77:c7:a2:d6:63:c2:54:3b:
         52:6d:c7:3c:00:8f:db:c4:ba:8a:a8:8d:b1:21:ad:19:72:d8:
         8c:2e:6c:aa:05:2e:d4:2a:81:39:ae:48:d8:3f:6a:50:cf:5c:
         e8:51:43:58:25:c8:0b:f3:0b:21:98:4e:88:d1:b5:53:54:78:
         72:09:89:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:27:13 2025 by rpki-client