Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/f12f5b3c-0dc6-32c3-845f-6ca9fef893a4.roa
File:                     f12f5b3c-0dc6-32c3-845f-6ca9fef893a4.roa (raw, json)
Hash identifier:          BofLM0d+iF/RqQhcat927NcMS9IFYDw3dG/8qbKR7i4=
Subject key identifier:   64:33:23:02:EE:95:F0:5A:C3:6C:C8:25:47:08:2D:75:AF:5B:3F:E7
Certificate issuer:       /CN=8765e137-e0cd-4574-8e57-7cf87cfec9de
Certificate serial:       010D0C9F4328584973DEEE0FAC6D379E9B858480
Authority key identifier: 01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/f12f5b3c-0dc6-32c3-845f-6ca9fef893a4.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        168.100.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:ee:0f:ac:6d:37:9e:9b:85:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8765e137-e0cd-4574-8e57-7cf87cfec9de
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=98e0fa92-3c2a-4e03-b1e5-d36cfb9f7c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:29:90:56:d5:35:f9:1c:4a:e6:e1:db:e5:b9:
                    d0:37:a2:62:cb:e9:2a:c5:89:37:07:c3:78:af:67:
                    76:f5:53:9f:f6:95:f7:87:9b:c3:14:1a:39:8b:b5:
                    a8:64:b0:a7:db:47:80:41:a5:63:16:07:59:57:56:
                    c7:65:86:74:85:99:e4:50:c9:51:a4:16:2e:cf:4a:
                    2f:2f:9f:23:db:e4:be:e1:fe:d4:0f:9e:35:79:6a:
                    72:91:46:85:e0:db:13:83:93:1e:b7:22:5f:eb:10:
                    eb:87:d0:64:ad:02:52:10:bc:99:5d:a7:4d:3d:b0:
                    c9:01:45:62:e2:55:1a:59:eb:2f:68:88:7f:b6:fa:
                    19:ac:60:c8:45:f5:ab:55:81:03:3f:8d:89:5e:84:
                    ca:e7:f3:0f:08:b8:ac:1e:0d:8f:ab:88:88:bb:ec:
                    cf:b1:70:a3:93:16:17:15:99:3b:ff:13:11:c8:f9:
                    a8:05:af:3a:c3:15:81:12:b2:47:10:45:92:70:0d:
                    1c:87:f3:2a:85:a1:e6:69:10:26:1c:14:03:63:b9:
                    c8:1f:18:6e:82:71:28:fe:ef:ec:65:c4:5d:57:c0:
                    f7:24:1a:5a:fd:98:8b:cf:4b:11:11:5e:50:67:19:
                    9e:56:d5:2c:b6:8d:9d:5d:d9:42:48:d7:9d:da:48:
                    e0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:33:23:02:EE:95:F0:5A:C3:6C:C8:25:47:08:2D:75:AF:5B:3F:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/f12f5b3c-0dc6-32c3-845f-6ca9fef893a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl

            X509v3 Authority Key Identifier:
                keyid:01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ce:88:cd:e7:b8:ff:8e:ea:42:0f:1c:a1:73:4c:bc:11:04:
         64:14:f8:c7:36:d2:e4:85:8e:56:23:3c:2d:30:a9:bb:7a:92:
         4f:ca:4a:23:fa:38:b0:c0:11:e2:72:12:83:cd:44:26:da:77:
         c8:ad:75:22:7d:f9:ea:ea:87:db:eb:08:18:83:22:5f:a5:c1:
         bf:1f:94:c2:a2:0d:c5:6c:f1:f4:bd:0f:92:f2:8e:75:bf:e4:
         5c:bf:e6:94:e5:ee:fd:1c:8f:9b:f6:9c:03:28:72:ae:57:17:
         de:b1:49:f1:7d:2d:36:6f:b4:9c:31:17:55:95:6f:26:af:88:
         0d:f2:51:2e:62:d5:63:09:03:1b:17:e8:8a:91:94:ca:f5:68:
         16:89:fc:a7:e5:f4:33:f0:eb:1f:5c:fa:6a:f9:f6:85:a1:11:
         2a:90:5e:be:3a:dd:30:51:00:e9:8f:c5:d3:b0:36:23:cb:02:
         0a:ac:5a:3f:30:46:03:e5:a8:e0:ef:2a:13:dc:7c:97:dd:ac:
         9e:8a:2b:ea:d7:96:9d:84:e8:d9:a2:f2:3a:31:00:28:47:e3:
         d1:3b:6f:99:5a:46:16:6e:40:b2:93:c1:8a:3a:ad:45:a3:22:
         b1:66:b4:ab:58:16:9b:d2:8f:81:19:9c:49:aa:8f:95:cf:5e:
         d1:9e:b6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:59:34 2025 by rpki-client