Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0ab67bce-4ef6-37a3-97b2-99f4a486943d.roa
File:                     0ab67bce-4ef6-37a3-97b2-99f4a486943d.roa (raw, json)
Hash identifier:          HpFQZs7qXR2JY1U2syJNgSnqMOn6GJ5qXXw8owbdRQw=
Subject key identifier:   0E:1C:BB:0D:C4:8D:52:DD:73:91:C8:E6:D7:75:DE:01:43:F0:2B:B0
Certificate issuer:       /CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
Certificate serial:       010D0C9F43285849C904EC84B3334CE04AB4C640
Authority key identifier: 69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0ab67bce-4ef6-37a3-97b2-99f4a486943d.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     9002
IP address blocks:        185.115.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:ec:84:b3:33:4c:e0:4a:b4:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=96bb3b9d-d2ac-4ae5-954c-657b0e828347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a1:85:39:43:e1:90:59:75:b1:88:b8:6c:1a:
                    76:17:b3:66:2c:6b:79:33:87:d4:c4:52:55:26:82:
                    34:6c:04:8f:88:7d:a1:56:5b:ea:61:01:8b:3a:8d:
                    fb:5d:d1:32:13:33:53:0f:7b:97:5a:b6:f4:01:47:
                    02:47:e1:b3:44:ac:b3:02:d9:6f:80:da:99:79:a8:
                    bd:09:86:7e:02:94:e5:a4:f2:ef:c6:45:88:17:0a:
                    9f:c1:a1:c9:0d:46:42:1d:28:1f:23:35:d6:fc:be:
                    82:8c:7f:88:51:dc:2b:64:35:7b:0e:c1:b6:4f:cf:
                    40:56:0f:5b:1e:07:9d:43:90:bd:5f:52:95:76:6f:
                    1b:f0:85:1a:c1:45:41:26:03:27:8b:a4:ef:19:ee:
                    8a:5d:50:a5:bc:70:67:ad:d9:74:8b:4a:b6:af:99:
                    71:cf:cc:9a:60:1d:d3:72:1e:80:87:09:27:25:51:
                    40:69:03:00:fd:9a:37:71:de:14:14:9f:43:ef:28:
                    cd:28:5b:39:d2:cd:23:04:9d:2e:cb:40:92:2e:4b:
                    05:7b:ac:b9:87:e0:03:72:00:59:0a:e6:b4:a7:10:
                    15:2e:5a:e6:44:6e:9c:6b:19:20:d5:f9:3b:a7:e5:
                    65:c2:1c:5f:8f:9c:db:c8:b8:ba:1f:dc:d7:26:1e:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1C:BB:0D:C4:8D:52:DD:73:91:C8:E6:D7:75:DE:01:43:F0:2B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0ab67bce-4ef6-37a3-97b2-99f4a486943d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl

            X509v3 Authority Key Identifier:
                keyid:69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:6a:f4:90:fd:82:e2:81:16:24:a4:8f:32:d9:39:3c:fd:09:
         3a:06:29:5b:5e:7c:74:c2:80:ec:a0:d4:e3:a8:73:39:6d:d3:
         98:e5:d6:49:6e:a3:15:0f:5e:48:85:ef:ea:dc:00:e8:42:24:
         be:d5:cf:76:76:c8:07:63:2b:c3:36:18:b5:2f:ad:09:a2:3a:
         5a:59:a2:18:8e:90:82:47:cb:0f:06:40:92:22:39:4b:73:9b:
         fb:c8:b4:bd:d4:25:bf:75:c9:ea:83:77:bc:20:38:3c:f8:f9:
         ff:b9:4c:d6:9f:99:e4:66:e6:ce:e6:f3:6b:76:0d:0f:98:a6:
         3b:8d:98:2e:63:9c:86:e0:5a:78:50:0f:f0:a3:ec:70:6b:9e:
         44:74:6d:3e:45:3a:3a:9c:c4:0b:ba:06:9b:0e:ed:2b:2e:25:
         ed:8c:92:77:0d:18:c5:89:5c:57:54:e9:5e:70:40:a2:72:b3:
         48:cb:4a:71:0e:d7:e5:8b:ff:e8:69:97:fe:2d:a4:a0:9f:1d:
         10:7d:90:1c:ba:e1:aa:8c:1c:83:a0:1f:05:ad:8f:d7:ed:d0:
         70:84:9b:01:5c:52:93:6d:f8:a1:7d:14:03:59:2a:24:bf:58:
         3d:f0:99:10:1c:18:7d:c1:a3:ab:0a:41:f7:15:b9:3b:5c:d0:
         cc:f6:d8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:02:19 2025 by rpki-client