Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/318575d9-1dbf-3047-90b7-19b80a1b4a18.roa
File:                     318575d9-1dbf-3047-90b7-19b80a1b4a18.roa (raw, json)
Hash identifier:          yqFj+sC7UVbfweaNtLIFyS4DCmj09ponIIV+uPZFZqE=
Subject key identifier:   9A:6E:B0:F1:AD:4C:B9:8D:C9:EF:A0:F4:26:F3:A1:58:E1:20:33:68
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584A050A72CAE47949442288EA00
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/318575d9-1dbf-3047-90b7-19b80a1b4a18.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     14593
IP address blocks:        144.126.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:72:ca:e4:79:49:44:22:88:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=425e5899-4f5e-4a4a-84d1-3da69fd14c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:d7:40:ab:e2:f0:62:68:f8:c0:bc:1b:f7:
                    25:1d:f1:04:10:02:9b:b0:55:b3:e6:a8:17:c4:89:
                    e0:04:c2:22:4f:98:a2:ae:cb:9c:81:05:6b:e9:e0:
                    a4:0c:f1:82:6d:a1:7e:0c:95:cb:b5:2b:f9:a0:9d:
                    e9:d8:6f:a9:a2:69:11:f5:4b:41:36:64:ca:38:53:
                    c0:fd:4f:5b:8b:7d:cf:30:1a:20:07:a2:da:e1:37:
                    09:24:07:f9:62:ba:13:57:17:cd:51:ab:35:0a:34:
                    08:6d:22:11:2c:8c:5a:1f:cb:c7:42:c4:2a:3e:7d:
                    99:fe:86:36:7a:e1:03:ad:08:0c:d3:03:d2:72:cd:
                    08:10:59:d0:6c:b1:96:2a:8e:62:ed:10:40:1c:7a:
                    8c:46:2a:44:10:4c:b6:76:33:d3:15:69:68:76:89:
                    09:3f:8c:bb:08:a5:d3:ef:9a:64:78:f3:b5:62:d3:
                    bc:15:88:38:63:2c:1c:2e:30:c0:f7:ee:14:db:08:
                    7b:bd:b5:eb:41:08:61:3e:9a:d5:44:0e:42:23:6e:
                    00:f9:b7:f1:bd:2d:c2:14:1e:29:2d:17:97:34:96:
                    1a:ff:9e:06:91:5e:16:cc:e4:74:9a:5e:1a:f4:ad:
                    ab:06:b0:ac:04:74:ef:e0:0e:a7:ba:7c:9f:75:6a:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6E:B0:F1:AD:4C:B9:8D:C9:EF:A0:F4:26:F3:A1:58:E1:20:33:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/318575d9-1dbf-3047-90b7-19b80a1b4a18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.126.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:2a:71:fd:20:04:ea:7c:a4:75:ed:67:0a:a6:35:0d:a0:8c:
         4f:f1:87:5f:e8:87:4b:ca:c8:39:f4:f1:87:fa:78:58:6e:96:
         41:79:95:8b:3e:2e:f7:ce:7a:3b:d2:6d:fb:26:01:4a:f8:6e:
         a2:fd:0a:a2:7d:6f:f8:05:bf:6c:02:cb:2d:02:93:39:79:74:
         63:d2:e1:56:0e:d8:2f:1a:d3:5d:13:e7:19:5b:cb:1e:59:7a:
         80:c5:6d:c6:dc:86:66:dc:1b:b4:8c:78:6f:91:44:9b:57:cb:
         21:d0:da:dc:40:24:82:1d:04:6d:8b:a3:d9:92:00:40:e0:fb:
         62:13:e1:20:dc:06:a7:34:47:57:04:5d:a1:22:b8:05:15:c4:
         4d:a5:6e:9f:26:74:d3:5e:b2:0a:b9:27:f2:02:86:dd:ca:8b:
         1f:ef:ec:75:44:68:92:c6:02:8e:50:f3:19:f5:87:39:fb:6b:
         f8:b8:3f:c0:97:7e:f9:df:1a:f1:ec:21:2c:ce:10:2e:f9:d4:
         c2:04:63:d8:75:58:7f:9e:90:a9:af:17:9e:a1:e4:b3:5d:58:
         14:90:4b:ab:7f:d2:d4:ba:70:a4:25:2b:1b:67:64:32:4e:96:
         08:6d:9a:fd:9e:0b:43:3b:34:fa:d3:8a:c8:75:9c:a7:08:e5:
         96:e6:33:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:38:31 2025 by rpki-client