Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44546442-699c-4ff0-a52f-81b50f3f186d/6b4169a5-f38e-35c1-a9d2-c44fb417de98.roa
File:                     6b4169a5-f38e-35c1-a9d2-c44fb417de98.roa (raw, json)
Hash identifier:          D8DxRU7fWS2sCW0lryRYxB48YKYPDKLUuXkAPCP62T4=
Subject key identifier:   F2:7A:79:A5:E6:7E:A8:2B:4A:7E:F6:7F:A6:AF:98:42:A4:9F:AE:BE
Certificate issuer:       /CN=44546442-699c-4ff0-a52f-81b50f3f186d
Certificate serial:       010D0C9F4328584A29555CDE7BCD6DB8732BBDE0
Authority key identifier: 9B:65:84:74:B7:A2:44:B5:1A:60:3B:9F:88:F2:22:D3:1C:5C:5D:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44546442-699c-4ff0-a52f-81b50f3f186d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44546442-699c-4ff0-a52f-81b50f3f186d/6b4169a5-f38e-35c1-a9d2-c44fb417de98.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     8220
IP address blocks:        192.187.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44546442-699c-4ff0-a52f-81b50f3f186d/44546442-699c-4ff0-a52f-81b50f3f186d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44546442-699c-4ff0-a52f-81b50f3f186d/44546442-699c-4ff0-a52f-81b50f3f186d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44546442-699c-4ff0-a52f-81b50f3f186d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:5c:de:7b:cd:6d:b8:73:2b:bd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44546442-699c-4ff0-a52f-81b50f3f186d
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=1e0dfccc-f646-491a-aa4f-86fd0786cd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:75:bc:46:bf:89:5c:13:b2:45:7d:59:cf:85:
                    cb:38:fe:9d:35:6d:a5:de:1a:e4:70:29:2b:17:25:
                    9d:b6:6a:68:76:91:d2:f8:97:53:32:d9:a6:2b:ea:
                    a9:c9:54:f0:ff:a1:dc:81:26:75:fb:d9:3c:03:5e:
                    d0:1d:35:ae:89:10:3a:a0:d0:c8:e2:b0:77:89:04:
                    47:8e:ab:a5:48:7a:ae:6d:45:94:28:39:fc:bb:65:
                    f4:d9:ac:23:d4:22:51:25:28:67:a4:7c:7e:ce:7f:
                    94:b2:bc:a6:d5:57:6f:9b:b5:78:12:8a:c0:b3:84:
                    a6:be:f3:90:20:b7:dd:dc:64:de:f7:b3:1f:7f:1c:
                    6c:27:06:6a:47:c8:0b:2c:58:78:c7:e3:64:69:9c:
                    27:88:1e:58:10:68:3c:1c:37:de:a4:04:7d:d3:66:
                    9c:ec:97:06:8c:e1:e7:46:fa:77:ec:8b:d6:e9:83:
                    94:08:d7:e4:b0:de:f4:60:98:f6:fa:87:b4:e0:36:
                    b6:ca:2a:bc:59:ef:df:51:f9:7f:08:5c:84:5d:b6:
                    ef:e7:ba:1a:e7:e8:7c:ec:8e:a3:94:9b:f7:f8:dc:
                    70:da:3e:5f:ce:e4:8d:bb:4a:44:b9:22:ca:34:9d:
                    85:9a:61:c9:81:3c:89:d4:05:87:d9:75:bb:ce:11:
                    91:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7A:79:A5:E6:7E:A8:2B:4A:7E:F6:7F:A6:AF:98:42:A4:9F:AE:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44546442-699c-4ff0-a52f-81b50f3f186d/6b4169a5-f38e-35c1-a9d2-c44fb417de98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44546442-699c-4ff0-a52f-81b50f3f186d/44546442-699c-4ff0-a52f-81b50f3f186d.crl

            X509v3 Authority Key Identifier:
                keyid:9B:65:84:74:B7:A2:44:B5:1A:60:3B:9F:88:F2:22:D3:1C:5C:5D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44546442-699c-4ff0-a52f-81b50f3f186d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.187.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ad:68:a0:75:c9:04:c9:86:63:ab:6e:19:72:b4:30:e3:6b:
         6e:21:56:7c:00:ae:43:a2:72:80:ad:6c:1c:25:ee:8d:8b:43:
         0a:b5:2e:a3:98:f4:96:e8:87:16:cd:49:f1:be:b7:aa:a3:a8:
         4e:e1:55:47:22:b8:39:13:d7:b5:ca:f7:24:e2:d9:f2:9f:96:
         3a:0a:b9:b6:8c:5e:8b:50:84:2b:a0:55:98:a4:0d:6f:57:2a:
         2b:b6:1c:96:a9:72:0f:05:60:bf:44:b7:27:7d:ba:9c:06:ba:
         d8:b0:2a:68:72:88:53:b4:1b:86:8b:93:4b:fd:b9:68:e1:ad:
         72:a6:0f:c7:3e:66:6e:7c:42:48:1b:80:7a:f1:35:00:d3:2f:
         8c:e7:94:fe:00:c9:7f:62:2e:58:74:4b:01:59:24:c3:90:36:
         9d:64:51:16:07:74:25:10:46:87:67:99:71:b4:3a:88:e0:62:
         a3:be:da:66:a0:a9:f4:56:19:50:0f:0e:8a:eb:c5:a6:85:b0:
         2a:63:9a:d9:29:6f:ed:00:63:2a:c5:7a:48:5e:2e:18:36:42:
         fb:17:2d:f4:5f:da:bf:71:10:89:e3:cf:81:c3:0b:75:cc:64:
         ae:76:d2:57:ac:d3:eb:31:0a:08:82:94:16:f7:0a:87:5f:eb:
         68:59:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:27:13 2025 by rpki-client