Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/8939da30-7b1b-3ef6-b379-85e7ad13ec99.roa
File:                     8939da30-7b1b-3ef6-b379-85e7ad13ec99.roa (raw, json)
Hash identifier:          sHcELol+npEqn4RBRhjC5LgnerPCg6V/uN4oMJCUyS4=
Subject key identifier:   5A:9D:45:12:C8:CD:AA:9C:B5:31:48:38:DA:E4:AA:1E:0D:47:5A:FE
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584A03A53E34BEC5AFBF350D6440
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/8939da30-7b1b-3ef6-b379-85e7ad13ec99.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     14061
IP address blocks:        159.65.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:3e:34:be:c5:af:bf:35:0d:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=e8f45352-9974-47e4-9c6f-b369636566e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:e6:e1:45:a8:b1:18:16:35:d9:95:00:f4:
                    22:e8:55:b7:94:b3:22:d4:7f:7a:3c:c4:5e:65:e0:
                    c1:bf:6c:46:7b:06:fb:ef:4f:1b:d3:36:5d:f1:af:
                    b0:38:15:93:4d:ea:b2:7c:ad:25:a2:ee:80:ac:1f:
                    9e:45:49:d4:08:a0:9e:a1:98:94:4d:21:50:b7:7b:
                    40:59:16:e3:f0:d9:9a:f5:f5:32:a7:93:65:d6:ea:
                    a0:91:e8:37:50:dc:30:4e:e2:07:34:d3:e5:a0:11:
                    43:33:90:18:4e:8a:15:77:36:84:ac:74:25:ff:b2:
                    94:00:8b:93:a1:da:f7:90:68:bd:75:fa:a2:cf:6d:
                    35:3f:e8:1f:8e:61:12:46:4a:1a:67:af:bb:77:3b:
                    f3:5c:6f:d2:22:f3:08:bd:70:58:64:0c:bc:b4:92:
                    59:5b:b1:10:11:11:ad:99:d8:23:9a:8a:8b:8c:3b:
                    b8:1d:d9:c2:c4:1e:08:28:68:7d:2c:f0:f4:9d:65:
                    6b:70:9a:72:ff:dc:53:59:9e:0a:0a:48:9e:61:14:
                    a2:f4:d2:fb:0c:a3:ca:85:24:37:ae:a2:8e:a7:29:
                    b4:9a:39:c0:2c:ac:60:29:cd:7a:72:6b:b0:56:13:
                    73:ab:2c:a9:90:68:86:68:01:7c:86:2c:53:8f:25:
                    07:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9D:45:12:C8:CD:AA:9C:B5:31:48:38:DA:E4:AA:1E:0D:47:5A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/8939da30-7b1b-3ef6-b379-85e7ad13ec99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.65.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:59:9b:c6:67:c4:cb:b5:3c:7f:a3:c0:37:52:4f:b9:4c:c3:
         a7:24:ed:3e:89:f2:2f:f7:23:fb:13:34:0b:5c:2d:14:d0:bb:
         56:12:c4:ea:79:fa:bd:3d:c0:28:6c:e0:27:77:12:05:ed:03:
         42:96:1b:bd:a6:57:27:6d:6e:b1:bd:3c:81:63:00:94:70:70:
         88:37:a6:f3:39:46:e2:c3:dd:f6:4c:1a:c5:f4:0a:f4:05:b2:
         84:9f:8f:cc:20:0a:b0:e0:c2:bb:91:f0:97:f8:1e:d2:d0:d5:
         a9:0d:92:5e:71:07:a8:cc:8a:5f:11:b0:73:70:c6:f8:bd:29:
         a2:fd:a8:7d:9a:1e:bf:4a:d8:94:ef:a3:a8:2a:f0:93:8b:59:
         2e:1d:d0:b3:e2:63:f5:b8:16:72:92:8a:7e:27:4b:83:89:d5:
         f7:1f:ce:f3:9d:49:ae:e7:40:1d:ca:39:3e:a7:13:96:bf:94:
         30:dd:31:f5:a0:02:ee:70:f8:52:45:12:f3:03:c2:48:58:12:
         ee:72:9f:73:7c:b6:84:d8:b2:9e:25:86:77:a1:79:c3:7c:7e:
         38:71:f9:16:f5:4a:8c:d5:7f:8b:52:be:94:e2:90:b4:14:f7:
         8c:c2:83:1a:8b:6a:8b:f7:a7:89:3e:20:36:bf:a9:de:fb:3e:
         70:06:0c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:43:45 2025 by rpki-client