Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/678c5ead-ff4e-3c69-83c0-7ff2a34960a8.roa
File:                     678c5ead-ff4e-3c69-83c0-7ff2a34960a8.roa (raw, json)
Hash identifier:          i8xQ7t4ZVoIf97nwQ8igpk8akt/sFA/w0d97oWKCm7s=
Subject key identifier:   83:22:EE:72:AB:1A:38:AE:1C:35:34:BE:88:C4:D8:B0:DE:3C:D2:EC
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FF86DD4E40DC1C430AC80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/678c5ead-ff4e-3c69-83c0-7ff2a34960a8.roa
Signing time:             Mon 16 Jun 2025 16:03:18 +0000
ROA not before:           Mon 16 Jun 2025 16:03:18 +0000
ROA not after:            Sun 14 Sep 2025 16:03:18 +0000
asID:                     81
IP address blocks:        128.109.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:f8:6d:d4:e4:0d:c1:c4:30:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:18 2025 GMT
            Not After : Sep 14 16:03:18 2025 GMT
        Subject: CN=00d9d135-688c-4d8d-b7b6-6ced7d88a84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8d:93:32:1f:9b:a6:d2:56:43:a0:9a:a9:49:
                    78:d4:dc:b9:5a:b5:3c:43:21:5e:0d:05:ba:f8:bc:
                    0d:a2:fa:3d:91:38:f9:4f:da:62:72:7b:47:e2:dc:
                    3d:69:28:b0:f5:3c:04:5c:a3:48:52:0f:a3:80:b0:
                    d6:f9:2a:7d:f0:68:eb:1a:b4:82:1d:9b:42:a3:98:
                    3a:8a:dc:ec:e0:91:08:8a:32:b4:6d:5c:b0:de:06:
                    b0:40:a9:5e:c6:e0:f0:2f:93:62:02:da:66:88:30:
                    68:0b:19:0c:e2:54:69:62:95:f3:5b:d0:5a:72:cb:
                    2c:b6:34:f3:54:e1:fa:63:95:16:51:fb:2c:b9:d3:
                    af:c0:53:21:69:63:1b:3d:3a:c1:4b:4d:88:a3:d4:
                    52:66:f0:04:00:4a:6e:30:d7:2b:72:c8:aa:3d:83:
                    81:8f:a6:79:84:fd:87:3c:2b:0d:69:1f:9d:9e:86:
                    11:d8:de:86:fe:49:da:35:08:42:88:11:38:94:e1:
                    dc:e8:1f:e5:99:56:64:63:5b:bc:e5:a2:2f:a9:69:
                    f2:2c:72:42:56:7b:22:f6:d9:7d:c5:a4:d0:43:ca:
                    65:04:8c:a1:e8:b9:69:0c:eb:57:26:c1:fb:02:3a:
                    02:20:87:90:74:5a:a4:f8:ad:cb:3e:f6:af:5f:9a:
                    cb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:22:EE:72:AB:1A:38:AE:1C:35:34:BE:88:C4:D8:B0:DE:3C:D2:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/678c5ead-ff4e-3c69-83c0-7ff2a34960a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.109.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:1a:d9:63:3a:f6:e2:39:c1:cc:2d:09:62:c8:7d:e3:87:33:
         08:17:17:76:f0:22:2a:05:8e:9a:1d:ae:00:33:c4:16:96:4b:
         cb:27:d6:ee:6e:f6:69:02:ea:74:8c:0f:c8:cc:85:df:55:df:
         a5:7c:a4:20:8b:f7:da:38:10:64:47:ca:2e:1c:3a:7d:a7:2f:
         2c:dd:4b:be:5f:18:fe:93:5f:d1:bc:cf:55:cd:0c:37:da:9f:
         2f:b1:e6:d3:75:6b:8c:fc:8d:da:bd:0e:2a:4e:22:ec:83:f1:
         27:69:fa:9d:76:33:19:9c:ea:f9:46:9a:fc:b4:c5:8a:02:17:
         22:b4:ba:51:29:75:3d:94:3a:27:be:15:92:70:93:c0:08:d5:
         c4:13:26:39:02:62:4b:eb:c2:92:cd:6d:8a:00:4c:a9:26:5e:
         45:eb:d3:2a:69:fb:61:db:96:40:d9:f7:46:7f:73:c0:10:de:
         33:60:6a:b7:a9:fc:3b:00:f0:10:b4:71:f1:5a:23:3a:39:eb:
         a4:25:ef:a6:54:75:fe:93:a3:16:b4:1c:04:20:8e:9c:92:41:
         57:17:ff:fb:64:39:1b:5a:7b:b8:ea:2b:e4:02:38:8b:ee:d6:
         6b:2f:b2:a5:4a:d7:36:ea:6b:74:4e:db:fb:c2:8e:ed:fd:fe:
         b8:08:1c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:48:11 2025 by rpki-client