Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa
File:                     f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa (raw, json)
Hash identifier:          xo/f7L3x81E1pPNovRlRBbpOJKG33B2G1uliaclppVg=
Subject key identifier:   1C:B6:4B:D5:BB:13:93:B8:2F:1E:BD:DF:5D:9B:C4:5E:0E:9E:C2:9A
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F4328584A4C3B0C856CFAC8D7DFC52B80
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     53768
IP address blocks:        162.134.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:0c:85:6c:fa:c8:d7:df:c5:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=d777874f-c04d-4ebb-9584-c16fa40071dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ea:8b:eb:39:26:64:cc:4a:15:b1:28:d7:22:
                    bb:5b:f9:0f:cc:7e:01:c7:ce:7c:bf:53:5f:f2:1d:
                    f9:78:8a:63:15:b8:31:a0:2e:ad:a9:e8:ef:e7:1a:
                    25:16:57:70:73:68:fa:df:cc:be:ea:c9:e9:ad:05:
                    a4:8a:2c:43:c2:2a:29:46:7b:99:55:05:fe:e8:fc:
                    f7:07:37:25:15:3e:c8:19:c6:21:25:19:79:b1:b0:
                    17:46:2c:82:65:17:68:bf:6c:fa:f1:78:05:1d:ee:
                    75:a3:ff:5f:53:11:22:a5:28:b1:ed:01:1f:ab:9e:
                    c7:dd:b8:d2:37:4f:f4:4a:78:cc:cd:9e:70:98:e1:
                    db:e0:d7:94:85:c0:8e:f3:96:d8:87:b0:3f:a2:78:
                    6a:20:ce:f3:21:a4:f6:fa:ab:9b:8c:cf:57:e9:11:
                    e0:e2:aa:37:e0:d9:61:ac:52:68:4b:a3:61:7e:dd:
                    32:f9:5c:4b:1d:63:6b:3c:f3:12:fa:ac:d1:28:3b:
                    8f:eb:bc:47:df:e0:a7:1d:2f:46:17:7b:0a:d3:d8:
                    5e:cc:7f:5e:b6:61:4e:b2:c4:c1:40:0a:e2:f2:0a:
                    2a:6f:d7:b0:0e:16:01:ce:d1:67:c7:c1:8a:df:dc:
                    6e:6e:03:ac:80:fb:f4:9d:dd:d1:39:bf:fa:40:62:
                    59:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B6:4B:D5:BB:13:93:B8:2F:1E:BD:DF:5D:9B:C4:5E:0E:9E:C2:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a5:52:5a:ef:5a:73:ee:9d:a1:95:0c:95:f4:ae:46:ae:ce:
         dd:57:f8:c3:8d:f2:4c:68:ea:d0:c4:78:0b:a6:4b:87:02:3d:
         05:32:d4:2d:dd:3a:9b:12:2e:7f:9d:47:d0:4f:ba:f9:73:f2:
         96:09:b9:b2:9c:86:df:02:b8:bf:63:7c:29:6b:12:e4:62:c9:
         23:66:4f:c0:4e:52:42:8d:c2:a8:7a:30:71:26:41:27:3d:21:
         66:e9:c2:1f:00:a1:86:68:be:75:c3:a8:f2:56:fb:a1:f9:2c:
         aa:ab:cf:5b:b5:dc:3d:2d:f0:c0:06:8f:a8:05:51:fa:5a:46:
         30:d8:09:93:7b:26:12:07:03:c5:c2:e4:cf:85:31:7d:30:bf:
         67:d4:1c:a0:ee:e8:ac:fa:e2:72:65:ad:a6:54:7a:47:71:5d:
         b0:ac:c6:a1:a3:dd:bc:10:71:49:3b:19:48:26:99:a0:8f:3f:
         42:e0:cd:15:2a:f0:18:48:7e:7d:ed:7a:1c:97:ee:36:89:59:
         98:e2:65:9f:35:18:ee:33:72:48:db:bb:da:ca:e4:da:44:0c:
         ca:48:f2:01:06:25:2b:b6:a6:7a:b1:d3:dc:04:c6:66:c0:2b:
         d9:c5:5c:2e:d6:f7:8a:e7:4f:70:57:df:3f:30:f7:ac:61:ef:
         d7:1c:36:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:20:46 2025 by rpki-client