Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/c3d6db81-42ef-35f3-85d6-505ba44b7ac6.roa
File:                     c3d6db81-42ef-35f3-85d6-505ba44b7ac6.roa (raw, json)
Hash identifier:          wWiEzJ+lsOPw96xJfQb0ser9crkHAGfQMS11gfljIFs=
Subject key identifier:   3F:0D:0F:84:91:40:18:85:6B:8A:3C:E4:4C:D5:1A:0C:A6:48:52:38
Certificate issuer:       /CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
Certificate serial:       010D0C9F4328584A1D1E9CA33B94028D994B5D80
Authority key identifier: EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/c3d6db81-42ef-35f3-85d6-505ba44b7ac6.roa
Signing time:             Sat 07 Jun 2025 15:30:02 +0000
ROA not before:           Sat 07 Jun 2025 15:30:02 +0000
ROA not after:            Fri 05 Sep 2025 15:30:02 +0000
asID:                     36858
IP address blocks:        192.188.135.0/24 maxlen: 24
                          192.188.137.0/24 maxlen: 24
                          192.188.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1d:1e:9c:a3:3b:94:02:8d:99:4b:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
        Validity
            Not Before: Jun  7 15:30:02 2025 GMT
            Not After : Sep  5 15:30:02 2025 GMT
        Subject: CN=90a06673-a663-4323-8e86-17dd844cbb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:31:7e:9a:66:00:d3:1d:19:1b:35:ca:08:
                    d1:4b:fe:e9:76:2d:64:29:22:e4:b9:ff:df:aa:a3:
                    d5:b2:67:50:05:ff:bf:09:09:a2:9a:f7:ac:1e:43:
                    43:78:13:ff:03:f7:70:c0:5b:cc:f7:44:98:00:da:
                    e8:d4:14:c4:6d:a9:6f:ef:78:c8:13:14:16:4c:33:
                    d8:e0:b6:dd:3d:f6:62:c3:84:61:82:e8:c4:a8:1f:
                    32:a3:8b:4b:b5:cd:4d:ec:bc:92:f6:18:50:b5:a7:
                    42:53:fb:c1:92:8b:38:47:fb:bd:ab:55:cb:7d:fc:
                    49:41:45:ca:4a:e7:28:fe:3c:c8:c8:41:7a:f5:f4:
                    e8:ec:ff:26:ca:53:62:fa:ec:7a:a3:bd:c9:c3:a1:
                    3d:33:46:ff:f4:e6:7d:e6:b8:e2:98:08:8d:40:21:
                    68:82:df:9b:72:a1:9c:ac:41:a6:1b:a5:1b:51:c5:
                    c1:fb:b2:e6:30:61:45:cd:f6:01:1a:62:93:62:b0:
                    64:01:9e:de:68:83:1a:a4:60:60:ed:31:e1:74:d6:
                    ca:6e:7f:07:8f:2d:57:d8:e9:fa:fc:fa:2a:74:98:
                    dc:85:22:6e:f0:54:72:c6:ef:94:34:cf:f9:d4:65:
                    30:c4:7f:f3:2c:7a:8a:be:ac:66:c0:6e:ff:99:a1:
                    2e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0D:0F:84:91:40:18:85:6B:8A:3C:E4:4C:D5:1A:0C:A6:48:52:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/c3d6db81-42ef-35f3-85d6-505ba44b7ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl

            X509v3 Authority Key Identifier:
                keyid:EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.135.0/24
                  192.188.137.0/24
                  192.188.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:4e:9d:c2:27:49:07:b2:ef:c7:24:7c:0d:d5:25:b3:e8:74:
         4c:77:55:af:5e:af:6c:3b:3d:f0:ad:cc:0f:46:d2:bd:e7:a4:
         24:ee:7d:6c:62:01:bc:9b:56:a1:72:4e:fb:a7:7c:ba:f4:19:
         f9:1a:28:97:44:4d:d5:3b:b7:a0:d2:0c:67:00:be:b3:ed:42:
         bf:e0:a0:2c:01:77:e8:e6:94:96:b8:f6:e7:b6:88:be:8c:2a:
         8b:18:68:a6:f3:c1:77:e8:53:62:1e:65:56:a8:e9:7c:d0:03:
         4d:93:4c:73:54:b6:f6:6e:b0:67:62:2a:e7:9e:16:74:20:c0:
         3b:9f:3c:a1:b1:38:7e:2f:c0:12:f8:fe:df:7a:d5:87:35:53:
         82:21:a1:fa:6b:fd:24:0a:28:78:0c:08:d0:7f:5f:b8:7c:c9:
         d3:13:e3:68:81:83:1f:b3:09:07:f6:c4:d7:31:db:ab:61:d7:
         72:37:5d:54:b0:ee:dd:d9:78:d5:bf:fd:5d:7e:34:96:7f:0f:
         27:02:12:c6:c6:80:7b:97:7b:65:bb:21:f9:b3:b3:ed:57:cb:
         77:19:4a:6c:d8:46:0a:d7:5b:3f:47:af:e6:ad:26:92:61:2f:
         d2:d5:bc:49:89:e7:9e:d3:63:dd:07:d7:05:a7:32:48:17:ab:
         0d:5b:f2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:26:24 2025 by rpki-client