Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa
File:                     9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa (raw, json)
Hash identifier:          OEk2D7eH76IEhK6uSO4cIGaErYKVHVmLfzUj4VPyYc0=
Subject key identifier:   0B:45:3E:E1:7F:9C:07:35:35:48:B5:44:21:A4:DD:FF:31:7A:E1:D1
Certificate issuer:       /CN=0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb
Certificate serial:       010D0C9F43285849E4EFAC53D349A01881F5B7A0
Authority key identifier: A8:15:F3:CC:F9:79:46:E4:70:33:A1:8E:A1:22:A4:F3:D9:DD:03:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        68.66.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:ac:53:d3:49:a0:18:81:f5:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=937e2bf1-a5a7-4998-8222-d145a3312c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b3:fc:e1:c5:79:e5:46:c2:57:8a:03:eb:96:
                    d6:25:cc:ea:fd:ee:18:c9:6b:7b:b2:21:39:ba:2d:
                    51:53:6b:6f:65:d2:1e:76:2e:61:0f:c7:c2:be:d5:
                    85:50:91:a5:6c:fe:8c:30:59:1c:a0:70:7e:d3:43:
                    d4:81:3b:dc:72:cd:52:3d:69:e5:c5:87:fb:ea:3a:
                    2f:af:3d:99:6b:ad:f3:19:f1:88:c4:8e:ee:33:92:
                    e0:d0:c4:aa:13:14:63:6b:66:9b:99:31:1b:97:ea:
                    57:55:69:41:16:22:fe:20:07:19:a0:04:f2:42:83:
                    03:22:66:2e:c1:69:34:01:a4:67:bb:f5:a8:e7:70:
                    c5:4d:5e:5b:9e:19:f2:42:31:f7:a4:0c:41:7a:b6:
                    b6:9f:48:d1:3c:4d:b5:ba:a9:2a:c2:a6:1d:94:7c:
                    3e:b6:66:55:5c:7d:24:34:b7:e8:54:53:36:62:31:
                    92:db:d1:fc:48:56:15:43:ff:6d:c4:f3:79:e8:aa:
                    42:16:91:25:af:dc:1d:e1:09:df:53:41:28:11:b8:
                    b6:b7:b0:6c:f2:41:dd:99:29:e9:62:ac:61:70:9c:
                    9a:73:dd:77:f2:a4:87:6e:df:15:30:6e:ed:c1:3c:
                    09:b3:41:be:ab:13:35:58:ac:74:57:e9:63:a0:3c:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:45:3E:E1:7F:9C:07:35:35:48:B5:44:21:A4:DD:FF:31:7A:E1:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.crl

            X509v3 Authority Key Identifier:
                keyid:A8:15:F3:CC:F9:79:46:E4:70:33:A1:8E:A1:22:A4:F3:D9:DD:03:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:e8:6d:61:e5:e5:6c:8c:d6:19:1a:f6:d0:84:e4:6a:f4:d2:
         4f:94:75:98:c6:c3:aa:7e:f7:ac:49:86:6c:77:33:b6:62:4d:
         70:b6:34:8b:ec:3a:c0:1b:dc:f3:a3:03:15:f5:25:81:35:dd:
         4f:93:7a:5b:44:4c:a2:fa:18:0c:a4:65:6c:1a:9f:ea:ce:45:
         4f:45:51:97:86:95:60:5c:9e:6d:c7:cb:56:08:9d:d0:b8:51:
         38:e7:a6:ca:0a:b9:71:55:24:5c:cf:3c:f7:65:ee:e3:0e:32:
         99:02:52:e3:ab:e7:8b:a5:fb:3a:6f:11:03:12:2b:54:74:52:
         1e:1f:b9:6d:4a:9d:d7:dc:2b:fb:21:65:34:fe:c8:20:51:31:
         56:8c:bd:f8:9e:b4:08:26:5f:10:74:71:e3:57:81:14:ab:24:
         3d:a3:7a:8b:1b:14:67:57:d7:a7:97:ea:5f:3d:78:ca:90:9f:
         d1:e4:21:3a:5e:26:0e:fc:07:f4:a3:ab:b6:d5:be:e8:3f:3e:
         1a:28:8a:34:fb:f4:c9:40:73:51:3f:ff:c5:73:f0:67:f0:c7:
         a5:66:2f:23:22:81:92:48:a3:c9:d8:57:38:07:92:40:2c:44:
         3b:ab:ff:36:e0:8b:e8:62:02:60:c0:fe:eb:e4:08:03:f2:d9:
         3e:40:af:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:33:38 2025 by rpki-client