Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa
File:                     3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa (raw, json)
Hash identifier:          AjPHiI22jxO2zK7brapCSnivib6aH1Mj0gfXpQ81hrU=
Subject key identifier:   90:DD:42:25:42:E0:E4:BB:D9:F5:74:0B:82:E4:56:1E:82:C0:E5:07
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F4328584A1B601017B714866FFEE16020
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     26914
IP address blocks:        166.93.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:10:17:b7:14:86:6f:fe:e1:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=3df49822-7c87-4ff9-a5d6-0daee9249d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fd:d9:1f:26:b2:93:65:93:81:d1:b1:f4:e3:
                    74:c2:9f:f7:df:be:ca:4a:8d:83:df:ba:86:97:81:
                    84:fa:74:7c:d6:a7:53:80:ab:11:90:86:9f:fb:fe:
                    5c:86:c4:1a:ce:56:9c:6f:f0:3f:b8:08:7a:c2:58:
                    ce:92:47:39:6d:12:ce:d9:69:37:60:39:a5:87:1c:
                    78:49:59:b6:f1:72:fd:10:34:d3:be:e5:34:39:f3:
                    2e:a8:84:75:dc:35:ad:74:47:f1:34:d0:12:ed:ab:
                    ed:0b:10:14:b8:2e:c1:f6:82:26:8c:b7:03:b7:98:
                    78:d5:05:2b:33:f0:d0:86:6a:07:b5:65:a1:75:43:
                    43:4a:8a:ee:33:31:4e:43:b9:93:0c:35:87:e4:50:
                    03:f2:fd:b9:4e:cf:7d:5a:17:49:fa:e5:43:01:5a:
                    bb:8a:d8:a8:c9:28:b2:d0:e6:93:15:72:8e:22:aa:
                    6a:55:c6:d5:fd:bc:a2:79:c7:87:0b:c6:02:eb:92:
                    45:f3:5e:52:46:08:7f:5d:4b:7e:b0:5f:72:d2:d2:
                    dd:86:97:7d:1b:6c:ae:69:61:43:0a:c2:cc:4e:3b:
                    0e:b5:a8:29:4e:a9:25:2c:ab:21:b2:92:f6:d4:d7:
                    3f:13:97:f4:ea:74:ef:79:a6:0a:25:30:55:89:a6:
                    dd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DD:42:25:42:E0:E4:BB:D9:F5:74:0B:82:E4:56:1E:82:C0:E5:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/3ca0dc4d-4e03-3c1e-a6bf-d87bbcee362f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.93.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:36:10:dc:4e:4a:1c:e3:dc:60:fb:28:37:d6:a4:77:b6:d9:
         82:c8:e0:0a:4a:75:77:e4:b2:98:ef:40:4b:1c:22:5c:1a:06:
         6d:65:b0:90:f6:4a:3a:40:5f:62:7e:e3:b2:73:a4:35:1c:1c:
         82:43:5a:5a:5a:5a:0f:5d:2d:50:65:47:aa:dd:9f:cc:fe:dd:
         c8:20:9f:45:5f:dd:7c:30:66:98:f8:fd:4b:e6:e6:84:06:d4:
         b2:ed:ae:1a:3c:7f:f8:95:71:b7:66:f2:04:c2:e4:e0:14:23:
         af:10:f3:1c:0d:2c:a4:5e:b6:9f:df:33:e9:e5:96:52:02:7c:
         1d:c0:81:60:43:db:21:12:2c:2f:30:08:e2:19:91:f3:45:f0:
         ca:a1:52:13:08:9b:c0:7d:f5:b2:e5:82:27:5d:7b:bc:cb:df:
         0f:4d:f0:d7:4c:b0:2b:5c:94:48:53:41:f9:fd:d9:82:30:4d:
         ef:38:03:5d:31:12:2c:29:a1:c2:51:76:f9:77:f0:86:07:0c:
         d9:31:da:0c:48:2f:e4:ca:78:e9:70:3c:14:b3:9d:97:54:bc:
         20:16:d9:f9:2e:79:13:70:65:38:3e:c1:73:3f:f2:6d:47:81:
         74:e8:35:b0:dd:8c:ed:6c:5e:50:e4:34:05:05:71:20:4d:0f:
         e4:f0:06:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:46:32 2025 by rpki-client