Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9b514c6d-e51d-3aef-ae87-589d1359f8a2.roa
File:                     9b514c6d-e51d-3aef-ae87-589d1359f8a2.roa (raw, json)
Hash identifier:          hltX/Vx2imiUxKFPlET5ciFwyAvZb+elf7jQLguGEG0=
Subject key identifier:   C7:7A:C7:37:3C:63:11:0E:C1:75:23:6D:40:31:44:D6:0E:69:82:32
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A1F901D1DB9EE0D7F6F74ADC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9b514c6d-e51d-3aef-ae87-589d1359f8a2.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     852
IP address blocks:        161.184.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:1d:1d:b9:ee:0d:7f:6f:74:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=b84682a5-d027-4104-9ef1-1bf541010bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:55:b1:67:c2:6c:f8:be:f8:17:32:b8:19:05:
                    07:d2:65:b5:ff:35:95:99:95:6a:5d:00:84:f0:4b:
                    43:5d:4d:2d:49:7d:c6:24:77:b6:8d:3e:18:58:9e:
                    ed:c0:80:7f:0a:f9:05:28:21:c6:77:2f:0b:8c:3f:
                    65:b1:85:0c:70:36:47:21:95:1e:c4:16:1d:ef:dc:
                    e8:b9:7f:b0:89:e8:6a:f6:17:21:0d:e2:61:d3:47:
                    e8:b9:ad:a0:a2:ce:ce:37:f5:6a:fb:7d:79:bd:5a:
                    b7:f9:41:4c:ab:4c:98:d4:fe:28:26:d4:89:b7:29:
                    02:a2:57:41:8a:02:84:f8:52:35:c4:98:86:83:28:
                    1c:7c:d0:0f:f6:92:af:17:62:70:0f:bf:9f:f6:57:
                    64:19:64:58:da:a4:68:73:aa:36:c9:df:8d:e1:90:
                    82:e3:ce:41:90:30:01:4e:21:5e:09:d6:46:ac:ae:
                    f4:bd:70:df:4e:86:95:e5:e0:eb:e5:a2:e4:d6:7c:
                    ab:8d:e0:84:01:93:6c:0d:1c:32:0d:fb:f0:ff:52:
                    ac:55:43:22:e3:02:fb:8d:b1:44:f5:49:9e:e9:b0:
                    71:ed:1f:50:78:f3:d5:3a:f6:0c:c2:0e:eb:1d:a9:
                    ca:b0:6b:2b:86:b7:f9:7a:6b:79:98:aa:95:4a:d0:
                    28:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7A:C7:37:3C:63:11:0E:C1:75:23:6D:40:31:44:D6:0E:69:82:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9b514c6d-e51d-3aef-ae87-589d1359f8a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.184.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:3c:dc:48:90:46:7f:be:d4:56:d5:bf:4b:03:32:53:0c:dd:
         59:bd:51:6a:1d:1c:5b:f1:2e:63:5e:e8:bf:2f:4b:5a:08:6c:
         48:1a:11:44:b8:41:7f:dc:fa:ed:ce:2e:b1:96:c2:cd:04:4c:
         fc:57:f5:3d:45:18:29:4b:0e:da:79:0f:99:6b:9d:de:31:90:
         60:0b:4d:55:9e:28:0c:86:97:4f:d8:7c:ad:b2:18:fc:2b:cd:
         56:01:73:1f:57:83:2f:2d:94:77:71:7b:79:0d:3d:7e:48:3e:
         e2:02:79:3e:6a:04:d3:a6:6b:09:72:dc:e3:cb:a6:7b:b6:1f:
         58:12:39:c2:a7:7a:fe:ee:f4:db:36:c6:e5:89:b1:c9:8a:a5:
         c6:c8:5d:1b:6d:0d:32:a0:03:c0:c0:52:60:1c:aa:06:71:8b:
         83:9b:da:3d:96:42:c7:cd:55:6c:57:a0:fd:8e:67:5a:d4:82:
         1e:d2:eb:5d:bf:d7:b9:cd:11:e7:1b:32:87:8a:a2:26:95:94:
         64:98:a8:e4:2b:5a:11:52:04:d0:ce:c4:e3:75:f8:42:db:a6:
         fb:05:18:72:9f:10:f7:35:14:f8:00:93:62:c2:6d:94:b3:4a:
         15:9d:52:eb:ee:7a:96:63:ee:d8:3a:ff:48:07:05:b9:30:59:
         2c:28:5e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:32:49 2025 by rpki-client