Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c0acfa2f-7274-3abb-abad-36132a4c20b9.roa
File:                     c0acfa2f-7274-3abb-abad-36132a4c20b9.roa (raw, json)
Hash identifier:          t72DxKWucyNI0tJ68pH44iIpqCvyC5HeQYZy3f2atS8=
Subject key identifier:   9E:B7:A2:39:33:BF:B0:B8:76:95:5F:2D:43:8A:DE:8A:F2:F3:F6:3B
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F4328584A45403EC347B1DBEE309EEF60
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c0acfa2f-7274-3abb-abad-36132a4c20b9.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     21738
IP address blocks:        140.235.156.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:3e:c3:47:b1:db:ee:30:9e:ef:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=82d21fb5-3a5b-4f67-a04e-88d09a2b0404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:3d:26:73:40:31:05:4a:e5:08:4c:21:85:
                    19:0b:41:21:0f:1a:54:86:58:1e:f7:65:c5:45:43:
                    f7:39:ab:a6:e2:ae:89:b7:e5:c6:85:10:f4:35:52:
                    c1:1b:85:c4:f8:75:28:44:d0:ef:ff:d5:51:35:8f:
                    b6:23:49:13:18:ca:24:03:ad:54:14:4e:60:48:0f:
                    fd:a2:54:c8:b3:12:27:42:5f:29:77:a8:b9:20:2f:
                    97:f2:c2:00:5d:38:bf:9d:38:2c:40:43:3a:97:dd:
                    49:e9:7e:42:7d:6f:76:99:3f:d9:95:92:48:88:08:
                    04:01:74:52:1b:70:ab:ec:a1:b4:21:bf:0e:a4:07:
                    f8:cb:ff:4c:1b:d8:94:7c:93:4b:a3:fc:85:c3:b4:
                    8b:af:26:69:04:d7:32:b8:ed:58:b1:28:e9:f2:1e:
                    6c:a8:d8:5b:50:e5:90:74:13:b3:1f:1f:d1:4f:87:
                    27:6d:2f:76:69:dc:5b:52:89:2c:87:bc:43:00:14:
                    c2:1d:6c:55:0c:0f:5d:19:55:43:f4:7b:58:37:22:
                    9c:44:9c:f4:fd:7f:a9:bb:26:d2:ac:f6:45:f5:69:
                    6d:29:b0:7a:3b:69:8e:9e:33:4f:0d:5c:27:6a:d2:
                    da:39:43:70:d5:c2:4f:08:e1:36:e8:bd:da:09:a6:
                    16:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B7:A2:39:33:BF:B0:B8:76:95:5F:2D:43:8A:DE:8A:F2:F3:F6:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c0acfa2f-7274-3abb-abad-36132a4c20b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:d6:a9:f5:d2:da:22:85:e1:e9:e9:8f:97:ff:bc:6e:21:02:
         2a:33:c7:a0:ae:0c:85:fc:be:23:a1:77:f2:06:8f:50:67:59:
         e2:51:af:77:aa:72:0a:f2:91:2b:8a:58:5e:00:4e:88:30:24:
         73:85:f9:34:a3:d8:a6:c3:d4:00:0b:58:bd:ae:5d:d8:77:e2:
         26:27:23:2f:5b:6a:16:ca:80:b2:a4:73:ec:92:0c:e1:fd:23:
         22:8b:b4:30:01:0f:72:6c:d7:51:1c:44:0a:6e:a2:e1:ba:89:
         cb:61:a0:66:c7:ed:dc:62:80:6d:64:b1:c5:86:87:e7:93:ea:
         eb:f4:5b:e6:2b:b6:a6:18:c1:96:f4:8d:1a:64:28:a0:d1:f1:
         fb:f5:7a:2c:65:c7:a7:6d:24:b9:7f:f8:18:44:71:ba:1f:83:
         66:56:d1:d5:52:d2:5d:fd:e6:78:bd:1a:1e:63:21:4a:46:49:
         75:15:9f:d6:c7:d3:db:2a:14:d0:d0:57:d9:8d:9e:8a:d3:44:
         e9:11:db:cc:22:34:db:4d:d1:bb:8c:5a:e7:6f:1a:17:24:e2:
         f0:90:6e:43:82:f9:8e:49:a2:c5:21:bb:4a:40:83:b0:45:7f:
         94:bf:30:ef:a0:5a:a1:d0:92:ec:86:a7:f6:b1:e0:53:5b:16:
         b8:93:76:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:49:52 2025 by rpki-client