Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/e3c8eb65-5995-380e-9c40-7d02136e19ea.roa
File:                     e3c8eb65-5995-380e-9c40-7d02136e19ea.roa (raw, json)
Hash identifier:          6dgyzoAVi75I0RwadKCn9Es/vTg/FEKP0T8UwNgk4gs=
Subject key identifier:   09:55:FC:27:47:F5:A5:24:4A:B2:EE:D5:FA:DD:40:42:9A:9F:CE:7C
Certificate issuer:       /CN=5a757a69-2945-4b01-b30c-29c3ff74ae4b
Certificate serial:       010D0C9F43285849EEB5002E3B2C52A5E06B5400
Authority key identifier: A8:EB:81:AE:2C:25:0B:A2:04:D6:36:83:5A:23:18:21:11:B2:59:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/e3c8eb65-5995-380e-9c40-7d02136e19ea.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     40716
IP address blocks:        192.234.159.0/24 maxlen: 24
                          192.234.160.0/24 maxlen: 24
                          192.234.161.0/24 maxlen: 24
                          192.234.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:00:2e:3b:2c:52:a5:e0:6b:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a757a69-2945-4b01-b30c-29c3ff74ae4b
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=dd3d8ea7-6240-49ba-aa9e-aec5c2b92135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:4e:df:f4:2e:cd:fe:80:ef:70:44:00:89:
                    ff:65:90:16:1c:ab:a7:48:3c:67:2d:ca:52:c6:89:
                    8e:3c:e9:d6:44:11:06:f5:bd:0d:29:cd:55:61:eb:
                    89:90:15:e9:f3:a2:d9:05:7f:c2:ca:19:e2:41:b5:
                    47:3e:bf:0d:80:a3:3d:9d:e6:bf:23:b9:6b:dc:c6:
                    f5:9b:e2:aa:d8:32:ad:74:19:b1:14:8f:21:f2:2b:
                    9e:95:a9:d7:60:f7:53:77:e1:8c:be:01:e7:26:b6:
                    27:f3:8d:1c:30:2c:de:3c:8c:02:ea:ca:7b:d5:ba:
                    e8:f5:ec:4f:c8:77:ad:2d:76:ab:09:d2:ee:06:ad:
                    56:50:95:03:bb:29:8e:c3:f8:35:c1:9a:26:ca:22:
                    3f:95:92:af:e6:76:f2:c7:08:83:19:1c:00:e8:79:
                    11:73:4e:be:3b:fb:6d:ae:59:f1:af:46:36:fd:26:
                    00:a8:10:c8:e1:17:d8:2e:f3:3c:c4:8e:19:7b:d1:
                    8d:04:82:72:81:fe:27:0c:92:8a:18:7f:10:d2:d6:
                    c4:3c:09:2c:99:09:b8:1d:34:2b:32:2b:9b:27:ad:
                    d1:fa:9f:e3:0a:80:27:d8:9c:59:b0:17:e8:8a:18:
                    da:6e:26:28:72:bd:c8:8b:76:3a:05:e4:18:45:58:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:55:FC:27:47:F5:A5:24:4A:B2:EE:D5:FA:DD:40:42:9A:9F:CE:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/e3c8eb65-5995-380e-9c40-7d02136e19ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b/5a757a69-2945-4b01-b30c-29c3ff74ae4b.crl

            X509v3 Authority Key Identifier:
                keyid:A8:EB:81:AE:2C:25:0B:A2:04:D6:36:83:5A:23:18:21:11:B2:59:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5a757a69-2945-4b01-b30c-29c3ff74ae4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.159.0-192.234.162.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d8:6c:0b:ba:d6:ae:2f:2d:c0:e7:db:8a:67:31:8e:da:bb:
         ed:49:08:c2:35:61:f3:76:28:2e:c9:00:4a:f8:55:3a:66:dd:
         50:d9:f2:36:26:02:5c:ba:32:05:48:0e:71:38:03:9e:4e:b2:
         db:6c:24:0c:06:25:1f:95:68:a4:b4:97:f3:be:17:a6:82:af:
         da:93:de:ff:8c:a6:db:03:16:d6:10:a1:51:6d:45:b2:89:c5:
         65:ac:fa:ef:81:a6:55:10:d4:f4:12:91:f5:4a:77:18:21:5e:
         7f:c4:57:15:ad:83:79:98:5f:d5:bf:e6:22:c9:cb:48:b1:91:
         43:87:30:41:8b:1c:83:2f:92:64:cf:a9:0b:66:ce:77:f6:84:
         d8:f0:47:40:03:d4:0f:3e:25:a1:ab:01:b8:23:aa:28:2f:57:
         5b:e8:cd:e5:78:42:06:26:b4:af:71:60:70:7d:41:60:fd:96:
         0e:4c:8b:c7:d7:fb:ee:e9:4d:6e:50:75:cb:6a:b6:72:26:8f:
         2b:8c:27:c7:04:41:79:f4:6f:72:38:ea:4a:6b:98:6c:51:9b:
         50:44:77:b9:40:f4:ef:79:bc:40:ea:62:09:f9:11:24:f4:52:
         e1:5e:50:07:72:b9:19:51:34:fa:34:c4:6e:78:aa:45:6d:5c:
         dc:1e:c4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:39:10 2025 by rpki-client