Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa
File:                     3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa (raw, json)
Hash identifier:          vF3vGqrV37RfRTCMGRm5rdTmFC6ASYQyy2ZI98pTsm4=
Subject key identifier:   34:D2:90:81:12:78:D2:CF:D9:87:59:B4:68:94:FB:BC:4D:A0:2B:A4
Certificate issuer:       /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial:       010D0C9F4328584A4DA046109BD64257C7BEB380
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     15171
IP address blocks:        158.120.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:46:10:9b:d6:42:57:c7:be:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=801f342d-80fa-428f-ad19-cceaeee65437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:3e:11:25:1d:89:8a:a9:e7:8c:81:ad:d9:
                    6e:f4:c6:13:3f:58:8c:af:18:78:42:30:0b:2e:0d:
                    91:96:62:0e:94:ec:5d:eb:42:59:06:b0:6f:ce:c3:
                    45:98:2e:b8:36:21:3d:92:55:5d:be:d4:7c:a6:27:
                    45:6a:05:93:2b:d3:5c:06:e2:e2:cf:f1:d9:e8:ec:
                    57:58:73:0e:74:57:56:42:b4:1b:7b:01:6b:f7:14:
                    4f:20:76:07:4b:f4:d9:22:69:a1:e7:87:69:b5:9c:
                    89:ac:46:98:33:f2:4e:21:41:33:18:51:57:1a:21:
                    37:76:94:0f:76:89:59:f0:55:36:75:f3:f8:73:75:
                    a5:31:1b:dd:2b:6c:64:cf:8c:d7:7f:c7:ca:61:00:
                    1b:f0:85:0c:ab:e3:b0:64:b7:84:95:52:4e:4e:5f:
                    53:33:12:2a:a5:b6:8d:fd:51:cf:3c:d1:0c:0e:b5:
                    a8:b2:d6:f7:43:53:c1:51:1b:4c:e3:94:9a:cf:c4:
                    58:03:ad:8b:25:94:5d:c9:ad:5a:cc:c2:bb:c4:6f:
                    72:29:47:56:f4:2c:f1:63:c2:0f:a7:3b:12:99:ec:
                    cd:4f:2c:c6:c2:f0:66:d5:19:09:9a:1f:b6:ea:b6:
                    23:e3:20:73:b7:ca:e5:6c:98:fd:9f:25:cc:7a:bc:
                    b9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D2:90:81:12:78:D2:CF:D9:87:59:B4:68:94:FB:BC:4D:A0:2B:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl

            X509v3 Authority Key Identifier:
                keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:36:eb:9a:23:90:b6:73:ec:49:dd:60:fc:a8:3c:84:90:a8:
         0f:98:cb:6d:91:04:8d:3f:ca:35:9f:98:fe:bc:49:ba:d2:02:
         37:4b:f9:78:7b:b0:bb:18:4e:99:66:9b:2b:f8:00:1d:7c:98:
         2e:d3:0c:92:f8:f7:6b:62:6e:dc:a5:51:16:d9:53:7e:ee:e2:
         6d:97:14:56:4c:04:e6:b5:cc:0a:29:c4:dd:77:fb:80:51:26:
         d6:87:5b:ac:49:22:37:84:26:08:cd:91:3a:09:db:cf:33:16:
         8e:e8:8a:0c:4d:47:67:76:f3:30:97:59:82:71:c8:dd:71:62:
         a2:da:fe:39:2c:f5:07:4b:38:5d:70:dd:80:22:79:26:cc:e4:
         54:e4:0f:b8:41:24:d3:60:c5:f0:fa:c7:21:7e:28:14:1f:5d:
         6d:0b:4a:52:7d:94:c7:02:cb:ec:c2:7e:28:d8:8a:bd:9b:de:
         3c:88:d5:49:8f:10:ec:7e:da:63:e7:6a:c9:00:04:92:6b:e6:
         fe:8d:17:54:5b:32:82:a1:ed:03:f7:89:6c:31:39:bc:e4:a6:
         61:3c:50:ad:ea:7b:0a:42:d3:f0:d9:ba:99:92:6d:01:2f:26:
         35:31:6e:61:7e:27:b9:08:d0:21:3a:4c:1d:cf:8c:ec:e3:3b:
         93:88:05:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:19:26 2025 by rpki-client