Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/7e7b5a39-a47e-30fe-b0e3-3315f092e92b.roa
File:                     7e7b5a39-a47e-30fe-b0e3-3315f092e92b.roa (raw, json)
Hash identifier:          ue9BFUiq94xK5i6eC20ZnMNu8cBHQ8BbdOjc+PVR3N8=
Subject key identifier:   F3:1C:59:CA:56:81:AC:56:CC:56:F0:2C:79:14:D0:A2:6F:B5:75:B5
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F43285849F9DFDC31541B871E10E876C0
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/7e7b5a39-a47e-30fe-b0e3-3315f092e92b.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     394708
IP address blocks:        209.173.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:dc:31:54:1b:87:1e:10:e8:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=2e2c0dc1-c30c-42e7-a339-a68f9b456601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:28:e7:3c:86:48:2b:86:bb:8a:ee:38:e7:3d:
                    9f:91:71:fb:19:36:74:81:84:6a:17:1d:45:48:dc:
                    3b:c4:39:e7:19:af:98:e1:70:06:9e:38:6a:ea:ae:
                    14:7f:98:aa:88:86:b2:b6:d0:73:f7:19:6f:5f:ef:
                    bc:b2:c3:66:0c:49:66:be:e2:76:05:05:02:91:b4:
                    21:cb:e6:84:65:99:6d:7b:63:32:59:f2:51:72:90:
                    79:6a:11:e8:a8:b3:60:a2:91:e9:20:ef:67:38:74:
                    fc:1d:1b:2d:ae:f9:35:eb:1b:4c:fb:c9:35:0a:9f:
                    85:10:43:d7:a7:93:2c:fe:98:2c:d5:a4:ca:7d:59:
                    19:e2:89:f4:d2:3c:61:42:80:0a:a3:6c:9b:3f:a9:
                    cf:dd:61:d8:22:55:ea:09:94:16:7c:f8:80:44:4a:
                    5c:f1:dd:f6:d6:66:16:63:39:d1:7e:f6:b9:7e:ac:
                    17:27:29:f5:6d:b2:76:63:81:2f:7f:4c:df:f2:f9:
                    2a:da:76:24:17:54:3a:7f:1a:d0:f0:5a:80:22:cd:
                    ae:bd:14:a9:a1:13:ab:bf:9a:4a:ef:87:af:47:d9:
                    68:44:b7:a6:24:c4:f7:f3:87:1d:bf:04:04:28:e5:
                    7a:53:f6:85:78:17:eb:0d:ce:d7:9d:8e:40:91:27:
                    f4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1C:59:CA:56:81:AC:56:CC:56:F0:2C:79:14:D0:A2:6F:B5:75:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/7e7b5a39-a47e-30fe-b0e3-3315f092e92b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:37:ab:e1:41:39:72:9c:1c:18:71:17:a5:27:c2:f4:b8:e6:
         1c:04:36:a8:85:ff:8b:b7:d2:a6:b3:c1:0e:82:c6:44:af:d4:
         81:87:e6:91:80:b4:03:48:f3:90:28:34:53:5b:15:a2:31:f3:
         3d:0c:9e:77:c1:fe:bd:e9:97:c2:05:ae:dd:86:06:4a:2e:f9:
         89:55:2a:56:6a:c9:cb:13:b9:1f:71:85:64:e2:41:98:cf:ab:
         c1:2d:69:2b:77:b1:13:02:b2:2f:b2:39:be:20:16:08:8e:09:
         ae:b5:17:2a:bc:ad:bb:3a:e2:1c:ab:4a:b5:4d:11:d4:2d:43:
         c1:5e:bc:0f:ab:6c:30:52:4e:57:35:b4:5a:42:f0:d8:2d:ca:
         f0:51:b4:d2:02:8f:fd:b7:5b:d0:d4:99:49:c8:3e:8f:53:29:
         ae:8d:ec:4d:05:7a:19:3d:bd:f9:a8:6d:0a:95:42:40:9d:1a:
         70:59:2c:de:80:f4:aa:24:17:2e:e9:32:d0:70:d0:9e:b9:2e:
         4f:3c:aa:9a:d1:87:e2:eb:fd:f3:bf:91:62:b0:d2:9f:81:bd:
         e4:13:9f:f7:cd:b0:69:38:80:59:79:0f:eb:cc:2b:23:9e:64:
         1a:4c:76:5e:cf:07:06:e8:d4:77:ff:2b:5c:dd:f6:d6:2e:60:
         08:34:b6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:34:16 2025 by rpki-client