Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/059c2fd6-432e-314b-8cd5-af06bd669909.roa
File:                     059c2fd6-432e-314b-8cd5-af06bd669909.roa (raw, json)
Hash identifier:          C3h8za8zKh5wk5iRhMVwv8j8kRA2/Fh2JurAwl142t8=
Subject key identifier:   E4:8B:1D:B7:B3:5F:7A:9B:3D:89:CB:32:25:5F:8C:DD:62:4B:B1:14
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA99A178BF622461D5D840
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/059c2fd6-432e-314b-8cd5-af06bd669909.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        184.151.118.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:99:a1:78:bf:62:24:61:d5:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=635ce339-40f6-4fc5-9771-6ae0e12d1a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:42:fa:53:fe:06:43:df:bc:02:9a:96:dc:af:
                    11:1a:b4:87:55:84:cc:0f:81:6b:ca:e7:40:0a:cc:
                    5c:f7:a2:05:2d:be:08:da:10:69:4d:dd:f5:4a:dc:
                    f4:65:78:28:0f:38:09:78:2c:bc:2f:dd:f0:87:4a:
                    94:46:59:1b:f4:45:ee:0f:ad:3d:03:ed:15:8d:87:
                    7c:83:bb:40:87:68:82:70:7b:33:9a:02:53:b2:ba:
                    db:2b:89:11:0f:57:fd:0e:b9:b2:f7:2f:a4:a5:3a:
                    40:50:8e:c7:e5:21:47:29:c4:03:db:bf:7d:c0:c4:
                    34:fb:25:93:d7:55:b7:ba:2d:e0:11:5e:8c:7c:d4:
                    dc:e5:64:14:3b:e1:42:7e:a0:41:d5:67:55:3b:2f:
                    0a:10:e6:3b:84:d1:92:08:0c:6d:c6:ab:34:99:62:
                    a3:03:94:47:4e:a0:40:a0:df:e5:01:23:af:1f:92:
                    e7:de:68:86:ce:ec:4b:12:0f:dd:9e:6e:d7:06:01:
                    9d:8d:5d:69:66:01:28:f9:0c:a4:f7:ba:fa:8c:fd:
                    1f:a9:09:47:fb:5e:81:63:23:5d:19:db:a4:ee:95:
                    75:ee:d9:e3:f4:8f:51:8f:3e:3e:5c:ed:4e:f2:db:
                    c6:45:66:e8:75:77:0c:f5:9d:d6:81:db:3e:3b:77:
                    c2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8B:1D:B7:B3:5F:7A:9B:3D:89:CB:32:25:5F:8C:DD:62:4B:B1:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/059c2fd6-432e-314b-8cd5-af06bd669909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.118.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:20:f8:b8:22:50:1a:b3:9e:aa:37:b0:7d:93:65:a6:ca:36:
         1c:64:08:48:92:fc:d2:7e:d2:4d:14:6a:48:d9:45:a4:e2:55:
         07:b5:ee:15:99:fc:83:30:c8:a6:91:9b:9b:64:90:0f:e1:34:
         35:69:8f:f6:55:94:bb:4a:dc:af:15:ad:ac:bf:26:2c:99:4f:
         6d:e7:85:40:97:15:d5:2c:13:15:65:5a:22:23:74:9b:57:9e:
         12:e3:d2:e3:8f:c3:c3:90:70:c8:e2:a3:79:ea:aa:6f:ea:cd:
         c3:f3:40:02:98:fe:0c:72:02:9b:b0:54:85:b4:de:b2:90:cb:
         0d:a5:56:09:a5:73:0a:a3:f9:b9:f2:dd:64:9f:9a:a3:55:d6:
         1e:2a:ba:d6:16:2c:85:3b:06:de:0e:a3:cf:83:47:48:29:85:
         ca:8f:f2:98:de:00:cc:4a:b1:39:0a:91:9c:91:2f:f1:61:b4:
         7b:f5:05:ef:03:08:15:c4:67:9c:01:19:83:5b:96:63:1f:3a:
         79:30:58:be:b5:b5:90:6c:13:aa:61:f1:23:a8:b2:f1:59:69:
         ed:f6:c9:17:3d:ef:f1:99:62:f8:00:63:4d:7c:0f:3b:14:4a:
         93:bb:6d:30:5c:c1:4f:28:9f:e1:8c:82:67:d3:98:0b:df:d3:
         61:e2:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:07:54 2025 by rpki-client