Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa
File:                     80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa (raw, json)
Hash identifier:          o3tQe3PgDl+RRetUnma1yNtYiAZjGefwTVUJTzqUH/w=
Subject key identifier:   6D:E9:B6:3D:EB:81:8C:14:46:2B:24:A9:C9:33:7C:2E:AD:32:C3:B9
Certificate issuer:       /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Certificate serial:       010D0C9F43285849D594E7062C61A728CAD10BC0
Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     87
IP address blocks:        134.68.0.0/16 maxlen: 16
                          149.166.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e7:06:2c:61:a7:28:ca:d1:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=099b0a7d-b95e-4fa5-8f1d-2016be44a89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c7:8d:07:b9:d1:52:32:97:2b:0f:05:26:3e:
                    3c:5f:5b:b1:e4:84:33:a2:58:71:d9:0b:31:71:4c:
                    22:26:d0:07:45:84:28:7c:21:3b:d2:a4:4d:8d:7a:
                    79:ba:77:7e:6e:26:3d:54:46:0e:a2:c5:e1:ac:10:
                    92:cb:f1:7a:5e:b9:29:96:43:3c:0f:22:59:e2:bc:
                    7f:a4:9f:f2:cd:3c:27:78:84:a4:ff:9c:e1:6f:39:
                    df:7c:e8:25:d7:e6:84:17:bb:dd:ca:76:59:72:8f:
                    9b:22:d7:b1:05:dc:e9:66:39:77:fc:3c:1a:35:38:
                    d6:87:37:e8:ac:4e:91:18:ec:99:d2:f3:e9:47:84:
                    85:9b:b0:9d:91:be:b4:bc:8a:f2:76:3c:f4:b7:71:
                    78:47:0a:0d:14:17:a0:03:84:82:03:09:92:2c:af:
                    32:a8:8d:df:74:d1:df:04:de:55:7d:79:8c:32:c3:
                    75:ff:5f:d3:e5:9f:e6:4b:3e:4f:94:d7:e5:8a:b1:
                    0d:90:66:8d:3e:d6:d2:9b:d5:da:91:4f:c3:17:21:
                    8a:18:b4:83:7b:fa:42:3d:5e:b5:5d:41:46:d2:c9:
                    30:65:bd:8a:bf:cd:ef:92:22:c4:ec:b9:ff:32:d5:
                    9b:5f:20:32:06:7a:cf:0e:b0:16:b4:0d:97:b0:f7:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E9:B6:3D:EB:81:8C:14:46:2B:24:A9:C9:33:7C:2E:AD:32:C3:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/80a87ebc-f0c6-3223-8156-73a966a5fbbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl

            X509v3 Authority Key Identifier:
                keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.68.0.0/16
                  149.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c8:22:f6:91:c4:22:bc:c6:e3:a9:19:ce:c0:8c:af:f4:7c:
         6a:c1:a5:73:ac:49:28:ce:ff:4c:c3:d4:63:bc:0f:f0:58:05:
         57:3a:08:8c:7e:5d:d1:68:74:42:bd:01:bc:95:7e:79:03:00:
         cf:80:51:fb:49:3b:a3:99:80:6c:8b:cf:68:95:bf:96:13:62:
         ad:9f:5a:51:92:ac:41:da:a2:ff:f4:20:cd:a7:07:d9:2e:87:
         ef:63:6a:42:21:8b:b0:16:89:79:1c:e1:90:0f:7c:f3:f0:ae:
         90:ff:09:01:f5:43:47:23:1a:45:12:60:03:5f:f0:ff:f2:4e:
         6c:e3:8e:67:79:47:0c:a2:63:72:a0:a4:7f:64:81:23:99:a6:
         40:a2:a5:35:91:6d:e6:d2:34:96:5c:fb:ae:9f:92:bc:92:60:
         b5:8e:bc:9e:00:ae:ad:56:b1:44:36:f3:f7:df:63:57:98:42:
         aa:c8:5e:34:83:e3:c4:a1:8d:69:7e:71:eb:4e:79:ea:74:df:
         eb:0b:2d:cd:35:13:41:1b:d7:9d:e7:a7:49:a0:27:15:47:c2:
         a9:58:23:e6:32:d4:80:86:7c:46:5f:f3:98:73:6f:02:2a:dc:
         55:24:0d:1d:15:0c:49:cb:4f:80:c9:d8:22:46:0f:80:7c:50:
         b8:35:bc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:33:24 2025 by rpki-client