Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/0a68cf21-b555-3e8e-a973-84a7888c300f.roa
File:                     0a68cf21-b555-3e8e-a973-84a7888c300f.roa (raw, json)
Hash identifier:          JwMtuuxwNRPCm1uGAHw1SgiZTgBE/Vvul+WkUVZ5gPs=
Subject key identifier:   2E:25:D9:30:38:CF:EC:14:84:30:EF:30:7E:15:AE:B3:7E:C9:84:5E
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F43285849D594D11942B12959A6222CC0
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/0a68cf21-b555-3e8e-a973-84a7888c300f.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     2639
IP address blocks:        135.84.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d1:19:42:b1:29:59:a6:22:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=8a80cd0f-bdd3-4f45-b4eb-c99837e3158d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:53:0b:97:9f:da:74:50:73:91:ca:67:59:c7:
                    21:24:4f:8b:0f:58:6c:b3:9f:58:60:16:da:6c:c6:
                    c4:9d:5a:f9:55:d7:5e:19:c0:fc:b9:e7:28:05:f8:
                    10:fa:45:8a:c0:e4:a7:0e:61:cd:1b:a8:55:80:24:
                    3f:19:63:49:85:05:ea:d4:5a:4f:59:d3:8c:c4:d7:
                    3d:37:41:b5:b1:bf:e5:77:03:88:54:a7:d8:66:30:
                    c4:41:db:88:a4:0e:5c:92:6a:d5:29:7d:ea:39:55:
                    a6:b8:49:51:ee:48:ad:04:87:ef:66:3d:5f:46:93:
                    67:98:bf:2a:06:e1:45:ef:46:31:50:e2:dd:f6:15:
                    1a:3c:5e:35:02:b4:8a:09:7d:1f:b9:ce:91:69:1a:
                    43:bf:68:c1:d7:f6:0c:62:b1:1c:1f:da:31:f6:1f:
                    e4:b3:48:39:02:88:ca:cd:23:8c:10:4d:c4:e2:13:
                    1e:ea:6a:42:8f:30:ed:85:f3:5b:f2:b3:6d:53:dd:
                    7c:5f:7d:52:c5:22:e1:59:a4:e2:8a:cd:c0:d0:6d:
                    6a:14:dd:d1:d4:f7:88:a9:6e:1c:87:c9:61:b6:9c:
                    88:c4:b0:99:85:2a:bc:47:3d:3b:67:d6:7d:a1:58:
                    3a:7c:85:a4:fe:ec:10:42:4c:df:06:7d:ca:32:a2:
                    45:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:25:D9:30:38:CF:EC:14:84:30:EF:30:7E:15:AE:B3:7E:C9:84:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/0a68cf21-b555-3e8e-a973-84a7888c300f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:d2:25:bf:1a:10:72:e8:d8:b5:fe:de:95:0f:04:5f:a3:63:
         fd:98:04:f1:28:7e:04:c0:97:79:39:6d:f4:59:06:65:a7:03:
         36:dc:9f:2d:39:36:19:b4:47:2f:87:e6:b8:97:d0:c1:3e:59:
         48:12:9d:f9:cb:2c:97:40:8a:36:bb:8e:d4:a9:2a:24:bd:ef:
         44:94:28:85:6b:47:12:98:64:1b:83:ab:2a:92:f4:2c:ce:66:
         0d:5d:f5:b0:a9:3f:97:98:ed:ce:b6:6f:ea:26:06:41:06:7f:
         7f:79:e6:b6:b3:ae:cf:97:92:ac:71:f2:70:ec:d1:bf:6f:b3:
         d7:ce:64:fd:0a:ef:a7:a3:71:79:b2:4e:95:9c:65:08:e8:bf:
         15:11:96:da:2d:9e:e8:ed:fd:71:9a:4b:8f:4c:0b:71:9c:20:
         05:d6:4e:d1:7e:2f:20:ee:f5:12:85:3e:01:27:f6:85:ab:48:
         01:9a:0b:ed:7b:61:b4:f5:7f:ff:cb:08:3b:a3:54:18:30:23:
         79:17:26:d6:73:d7:cc:2e:47:77:96:33:63:27:5b:d3:1e:a3:
         ef:20:b3:3a:10:5b:b0:f3:6f:aa:a5:28:3b:3b:74:88:d6:dc:
         3a:f1:f3:5d:a3:10:c4:f7:7c:21:cb:c7:fd:81:a0:1c:57:97:
         cd:4e:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:40:29 2025 by rpki-client