Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/9f31b181-b0fd-348a-be60-f42ecd0d2be4.roa
File:                     9f31b181-b0fd-348a-be60-f42ecd0d2be4.roa (raw, json)
Hash identifier:          9pELvcs2e7DWDvmCE5U4TfdWeaZMceKD4xWAP8drLSo=
Subject key identifier:   C1:B4:86:80:F3:0C:6F:58:46:65:D3:C0:4F:D2:DC:C3:F9:2C:08:D5
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F4328584A30503764F50CD773C6EB0900
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/9f31b181-b0fd-348a-be60-f42ecd0d2be4.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     26914
IP address blocks:        166.93.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:37:64:f5:0c:d7:73:c6:eb:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=d7d6a5c4-9a78-46b4-b74d-37e84cd123e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2e:97:82:4e:96:3d:74:2e:9a:e4:08:81:82:
                    f5:93:72:de:f3:81:ac:13:7e:f7:90:a1:16:e2:75:
                    9b:6b:d1:8a:0f:ea:61:91:a5:28:bb:4b:cd:9a:f8:
                    c6:ef:a0:3f:51:c9:17:98:63:13:64:19:81:ce:6b:
                    93:7b:c0:09:61:e3:b0:cc:71:6f:6b:4f:ce:4a:8b:
                    09:d0:7a:b4:3f:cf:f7:23:17:ff:d6:ba:bc:1b:64:
                    0a:48:a8:76:ff:b2:79:ab:9a:56:2a:68:56:ba:04:
                    54:af:d3:75:40:91:1c:00:ad:7a:d4:1f:37:ab:8d:
                    06:3e:56:ce:0e:6c:c9:bd:f3:17:59:77:da:82:a5:
                    72:10:a9:95:e9:bf:83:0d:e5:88:8d:b1:5f:0a:92:
                    c0:7e:59:72:b7:9c:db:c5:d4:81:cd:a1:6d:a1:16:
                    b6:e2:b9:d6:a3:61:15:37:02:ea:af:7a:11:2d:70:
                    15:5b:1a:7a:44:5a:d3:5f:70:cd:fe:c2:75:be:2e:
                    ca:8b:05:04:e3:99:a7:01:d0:f0:15:49:48:bc:9b:
                    5f:73:c4:34:64:a4:07:89:98:07:47:40:92:28:20:
                    0d:40:f4:04:91:fa:ba:08:f8:a9:69:7b:28:47:cd:
                    89:2c:bc:25:a4:52:4b:17:aa:8e:12:36:fc:3e:c9:
                    61:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B4:86:80:F3:0C:6F:58:46:65:D3:C0:4F:D2:DC:C3:F9:2C:08:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/9f31b181-b0fd-348a-be60-f42ecd0d2be4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.93.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:fe:0f:99:8f:f0:7d:71:a0:99:43:3e:b3:85:4c:b9:75:ba:
         c5:bd:2b:f3:e3:8a:94:4a:0c:99:2e:c9:13:8b:41:8f:0f:f0:
         78:bc:64:a1:1b:07:c2:6b:3f:41:b0:ec:16:3d:35:db:95:2b:
         6f:e9:2d:ed:07:54:e0:9e:72:47:40:ab:1e:a3:c0:54:15:ff:
         f3:ef:c7:25:9d:6d:a0:f0:c0:a2:1e:90:24:b2:85:6d:13:f8:
         3c:a9:17:25:5d:c3:e2:b1:4d:3b:4a:d8:06:85:7e:f4:98:b3:
         05:b2:77:cc:e7:4a:01:90:ce:71:f5:88:06:b6:e3:e2:e0:bf:
         a3:8a:ac:ad:f5:72:63:30:9e:83:5e:c9:00:0d:6b:f8:ad:2d:
         c0:61:25:9d:1f:68:b8:db:59:81:70:63:20:7e:41:1a:6c:61:
         c5:e5:08:a1:24:c1:e8:d8:c4:7e:45:bb:88:29:85:65:23:c3:
         92:38:f3:eb:be:d1:fb:5c:d6:82:b3:2d:cf:3b:d2:d7:1f:c0:
         9e:20:ee:65:48:fa:fe:97:db:c9:4f:04:55:74:3a:a1:12:ff:
         2f:09:ad:c2:5e:26:d3:d1:bd:6c:8c:a4:35:55:24:4a:ad:e6:
         3b:9b:02:5d:c2:a4:c6:19:6e:87:c9:a4:f7:6b:e4:0b:46:77:
         10:16:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:49:23 2025 by rpki-client