Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/3c8de3f1-efb5-3d06-828f-08fd5a84b5e4.roa
File:                     3c8de3f1-efb5-3d06-828f-08fd5a84b5e4.roa (raw, json)
Hash identifier:          JE2wlyL8X/raZJxb1r9djlqgTEOO+GTfRDGB8GAye/0=
Subject key identifier:   CD:AE:AE:C4:62:52:E8:C8:0A:9A:1F:C5:5D:6F:BA:52:E9:CC:48:7D
Certificate issuer:       /CN=91625b8e-8d13-496f-b542-d170ffd5f3fa
Certificate serial:       010D0C9F4328584A600F8657F4980F9A64FF4D80
Authority key identifier: 95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/3c8de3f1-efb5-3d06-828f-08fd5a84b5e4.roa
Signing time:             Tue 01 Jul 2025 15:29:39 +0000
ROA not before:           Tue 01 Jul 2025 15:29:39 +0000
ROA not after:            Mon 29 Sep 2025 15:29:39 +0000
asID:                     5065
IP address blocks:        165.140.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:60:0f:86:57:f4:98:0f:9a:64:ff:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91625b8e-8d13-496f-b542-d170ffd5f3fa
        Validity
            Not Before: Jul  1 15:29:39 2025 GMT
            Not After : Sep 29 15:29:39 2025 GMT
        Subject: CN=3b823d61-0c5d-4f00-9dde-ff41676896ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ef:b1:ff:55:13:93:b0:cc:85:ec:4f:d7:d0:
                    10:fa:c9:57:82:c4:cc:83:ec:0e:5b:3d:1d:75:40:
                    24:6a:e7:8c:92:37:60:25:dd:9b:4a:2a:73:7b:8f:
                    c5:0a:01:a9:f3:32:6a:2b:21:4f:99:29:09:bc:55:
                    78:79:14:c5:a9:44:bc:1f:56:d5:0e:76:e5:dc:e4:
                    2d:ac:e3:7a:a4:46:05:d9:51:f7:d9:fb:f4:eb:c3:
                    3d:f9:7f:fc:ef:32:01:9d:da:37:85:63:89:e1:b5:
                    8a:73:d6:67:09:a6:4c:46:0b:a5:55:a4:8d:db:00:
                    53:7e:ac:2f:21:c1:24:ee:51:d3:5b:6d:6d:b1:02:
                    7f:a0:a3:41:65:69:48:ae:61:fc:f2:9c:93:7e:b1:
                    da:5e:e8:8b:68:4e:2c:01:8e:e1:d0:92:2a:5d:d5:
                    97:74:88:5b:0e:1f:2e:e2:88:e8:90:ea:cb:14:51:
                    1c:9a:ee:6f:e7:ad:36:47:c7:df:7c:32:31:ac:6b:
                    9d:c3:e6:b1:7e:a9:9f:e1:10:f8:db:a3:d7:52:62:
                    84:c1:d8:eb:77:01:98:73:9f:d7:05:61:c7:cf:67:
                    c9:ca:b9:54:b2:c4:ba:68:9d:6a:16:db:39:74:ce:
                    ac:31:2d:e9:d5:b3:28:e9:13:8d:f8:58:53:9a:b4:
                    15:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AE:AE:C4:62:52:E8:C8:0A:9A:1F:C5:5D:6F:BA:52:E9:CC:48:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/3c8de3f1-efb5-3d06-828f-08fd5a84b5e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.crl

            X509v3 Authority Key Identifier:
                keyid:95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:40:9e:ab:a8:3a:2e:3b:d9:6b:fc:34:39:f1:46:71:6a:fb:
         d8:b7:13:0b:37:4b:b1:b1:c6:cd:e2:08:dd:44:e2:41:ea:e9:
         f1:d1:95:39:a7:bd:f5:15:03:de:d5:33:83:23:cd:bc:7f:4c:
         97:6b:8f:5a:a4:7c:69:e0:bb:78:32:de:f0:5f:af:26:33:9d:
         96:63:74:b5:b0:ad:29:8d:fa:45:a1:44:10:28:92:2f:a8:29:
         1e:42:40:36:17:6d:28:a3:51:6e:9e:52:b7:1f:dd:b1:60:2a:
         91:90:a1:48:83:00:71:bc:6f:c9:52:50:45:2d:77:e0:26:de:
         4e:09:15:90:8f:d1:5d:91:21:33:83:dc:07:33:ce:5a:81:0d:
         de:04:48:4c:7e:3c:2f:47:3a:5f:f7:56:c5:ef:c8:07:f3:e8:
         bd:e4:bb:c3:43:b8:de:71:97:4d:d4:3c:ee:f8:f6:9a:1a:7c:
         a1:79:47:06:5a:51:88:44:1a:ce:e7:e1:c4:f9:60:da:74:b6:
         f3:59:9f:ec:52:ad:02:34:ab:73:d3:40:8a:34:93:db:33:76:
         58:f6:2a:d7:20:3a:a7:a5:58:29:35:37:05:e4:e8:4f:07:27:
         b2:0c:6c:31:14:16:f2:99:25:14:3d:ce:59:64:bd:d7:63:5e:
         17:ef:44:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:36:46 2025 by rpki-client