Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/e3f8a90f-d263-36f4-8f61-e7ea632a307b.roa
File:                     e3f8a90f-d263-36f4-8f61-e7ea632a307b.roa (raw, json)
Hash identifier:          PN2rq/ieFkBIZQBGovHjpdAb0aoCTUCuJ+hSyuzSmg4=
Subject key identifier:   9A:D4:71:FB:87:41:F8:64:08:9D:28:BE:2C:24:8B:84:EB:BA:39:DD
Certificate issuer:       /CN=6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c
Certificate serial:       010D0C9F43285849C904E6E7080DC1CBEAAD75F0
Authority key identifier: 39:10:10:A8:A9:95:4E:EE:CD:01:64:C6:66:4B:66:9C:52:65:4E:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/e3f8a90f-d263-36f4-8f61-e7ea632a307b.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     32521
IP address blocks:        192.131.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e6:e7:08:0d:c1:cb:ea:ad:75:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=597c70f6-01c5-4c83-afd6-ec8bbe1ff378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:24:46:67:ff:4b:ce:48:9d:33:99:e6:8a:
                    10:da:1a:0c:c6:b4:7a:fb:af:49:c7:b9:f7:c9:a4:
                    5e:0c:84:41:c1:3a:1e:80:fe:fc:c9:aa:cc:d5:19:
                    f6:a4:f1:ab:50:10:42:cd:3c:52:e0:98:5f:18:86:
                    ac:e7:02:fc:9e:1e:16:d3:71:e3:02:b1:68:46:43:
                    a7:d6:4b:79:34:d0:cc:1a:27:38:b2:35:94:b2:3d:
                    a5:dd:f4:f9:ec:65:72:6d:a7:7e:92:46:e7:e1:e7:
                    92:03:22:8b:c9:dc:73:7b:36:23:fd:48:76:6b:66:
                    87:35:83:ca:6a:ae:18:f3:c8:75:09:f0:9a:ef:d7:
                    7e:38:0d:60:7a:89:d8:8f:5e:02:fa:a1:46:0e:43:
                    99:96:15:a3:f6:cd:b1:be:00:32:a9:94:48:d2:a9:
                    c9:f8:32:da:dd:18:e8:3c:5a:bf:09:8d:c2:39:3a:
                    98:9c:6f:ce:7d:9a:78:a6:79:0d:b9:aa:f7:a6:8b:
                    37:00:1a:89:38:fc:9e:e8:c4:35:66:5f:4e:7c:bb:
                    50:a9:03:55:44:47:a9:06:05:e2:c5:ac:38:a1:91:
                    8f:14:48:f0:90:7a:08:10:21:4a:ef:a6:fc:36:b0:
                    80:6a:0a:38:e1:50:07:25:be:e1:30:35:1a:7b:42:
                    a9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D4:71:FB:87:41:F8:64:08:9D:28:BE:2C:24:8B:84:EB:BA:39:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/e3f8a90f-d263-36f4-8f61-e7ea632a307b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.crl

            X509v3 Authority Key Identifier:
                keyid:39:10:10:A8:A9:95:4E:EE:CD:01:64:C6:66:4B:66:9C:52:65:4E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:02:49:54:a3:29:5e:85:b8:4e:a9:01:d3:4e:dd:4c:31:d6:
         19:0a:71:08:35:93:a1:73:8c:61:3a:61:79:8a:c9:bf:7c:d6:
         02:81:3d:df:5a:1f:ae:44:b3:3c:3a:1b:80:00:61:b1:dc:cc:
         5d:be:02:43:bf:e8:47:cb:e7:b0:73:07:2d:10:94:e1:a1:b6:
         4a:82:5e:a2:a9:c4:95:a7:61:80:b9:36:53:0a:a1:6f:c9:32:
         b8:14:14:47:28:fe:6b:f1:ff:59:b6:04:00:bc:ed:7f:5f:d6:
         09:3a:88:48:05:ea:6d:7c:79:62:d8:2d:8d:d4:3e:9a:49:c7:
         fd:54:dc:37:f0:6e:b0:83:9b:bd:8f:ca:58:c9:de:b8:ab:45:
         79:22:41:e0:8a:9e:b2:ff:14:a7:e9:d2:32:1f:26:b5:c1:9d:
         ee:69:5e:10:18:8a:c3:6f:bb:cb:e8:ba:19:f7:a4:2b:c3:c5:
         e8:ee:e4:f8:5a:90:60:b5:28:e0:68:e8:39:c8:80:eb:4d:29:
         a3:bb:a7:a1:7b:bf:c1:fd:4b:bc:1c:c7:ff:f8:24:ef:0d:d4:
         ff:a4:e9:3c:69:ed:ac:fe:c1:9f:02:e3:4e:bc:f9:c6:c0:f8:
         7d:45:78:65:ed:f7:3b:c6:da:88:81:92:07:a1:e2:86:2a:ec:
         56:e9:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:05 2025 by rpki-client