Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6d3ba96d-1354-3677-8182-c0b924bc70be.roa
File:                     6d3ba96d-1354-3677-8182-c0b924bc70be.roa (raw, json)
Hash identifier:          iKi9lPLf2/venSxnmV1K6vqFyv+3jJYVSdPDFBjr1uU=
Subject key identifier:   0A:F3:89:7C:35:95:BD:77:6A:9C:99:A1:26:8D:88:F5:1B:C1:C1:32
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584A5A306A99B7F048827EB80D00
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6d3ba96d-1354-3677-8182-c0b924bc70be.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     15169
IP address blocks:        192.104.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:6a:99:b7:f0:48:82:7e:b8:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=b33127e7-8fb9-4a9c-be3f-7a6b0d839688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5a:f9:0f:61:43:f7:02:5f:f1:63:99:af:42:
                    b9:39:ee:4a:73:90:01:63:9e:62:48:76:72:49:e8:
                    59:ab:e5:ba:f5:77:a7:6c:f0:61:8b:61:cb:65:32:
                    e2:af:2b:60:3f:63:0f:b2:63:0e:7d:fa:a4:e7:bb:
                    53:f9:3e:b7:99:29:18:86:23:2b:af:b1:eb:68:dd:
                    c6:0b:5b:48:d8:2d:18:be:51:f2:4b:38:9d:f8:d7:
                    a1:c7:e9:1e:dc:8d:77:5b:0d:3b:ab:af:aa:8d:31:
                    34:38:a5:d3:cb:d9:76:21:e7:e9:0c:ee:b0:f6:66:
                    ba:69:49:2d:82:90:9c:81:95:cf:65:57:f4:bf:73:
                    4a:d4:c3:10:43:65:8b:b7:1d:a9:e2:70:70:1b:a2:
                    93:31:a0:31:6e:aa:e1:f5:5d:92:05:30:6a:b2:7b:
                    2f:28:20:cb:8d:30:f9:9e:ef:d4:fc:61:b3:9c:7b:
                    e9:b9:0c:b3:76:4d:32:08:c1:34:7d:60:e4:4c:76:
                    2c:60:11:6c:91:ad:a5:f4:79:52:68:91:6a:d2:bb:
                    bb:c8:92:d4:2d:5e:7e:24:56:32:ee:f0:4d:61:d7:
                    b9:77:b7:ba:bb:fa:c9:69:38:a5:43:c0:d2:1e:c7:
                    6e:cc:02:69:ec:c7:c4:4d:fe:b1:b5:1a:08:95:32:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F3:89:7C:35:95:BD:77:6A:9C:99:A1:26:8D:88:F5:1B:C1:C1:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6d3ba96d-1354-3677-8182-c0b924bc70be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:70:50:50:b6:24:9c:a9:66:53:0c:70:8b:07:05:65:f9:58:
         65:fd:16:58:15:17:3d:f2:57:69:86:3d:5d:40:49:4c:da:8e:
         dc:00:65:a9:d1:67:33:e7:ae:78:11:9c:25:94:f3:3e:b2:78:
         4b:e7:e7:dd:05:97:86:76:7f:5e:09:08:1d:df:e5:25:98:4f:
         2d:95:0d:c5:79:e0:af:97:d2:2e:50:44:6e:7c:81:c1:f1:c4:
         d2:bd:96:e6:75:bc:60:8d:9a:16:c4:e1:c7:62:9b:b1:57:07:
         43:8e:86:64:7a:ad:7c:5a:29:b5:90:e7:53:79:92:46:4a:95:
         1f:cb:9e:a7:8f:31:3c:83:60:84:d4:56:0c:42:12:39:71:cf:
         d0:33:1f:24:a8:d6:56:73:47:b5:ff:da:f2:90:6b:51:56:91:
         2c:de:65:9a:49:90:ff:77:55:45:0f:fa:4c:a0:d2:f2:6c:e5:
         a5:16:91:ef:af:85:f2:10:b2:02:c1:ae:95:bb:68:0b:7f:72:
         5b:30:04:57:df:0e:6d:58:7f:28:95:45:99:cb:19:e5:10:01:
         02:ea:ba:35:bc:ea:b7:1f:b2:33:58:ef:eb:05:6f:70:e8:d6:
         03:c4:e5:46:34:ed:24:91:fe:39:35:f3:af:1d:a2:b5:58:a5:
         f5:f4:62:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:42:34 2025 by rpki-client