Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/07cfb2a1-6843-33bb-9006-b430b8bc5c25.roa
File:                     07cfb2a1-6843-33bb-9006-b430b8bc5c25.roa (raw, json)
Hash identifier:          ZcyvlvMkJv5XDACi0fx609aRZObpPASZq3g70uU6qHw=
Subject key identifier:   0F:76:10:49:CB:59:7A:E0:5D:92:D6:16:E3:09:AD:C8:A9:C0:F4:14
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A348028A6679274E3516B0200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/07cfb2a1-6843-33bb-9006-b430b8bc5c25.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     2914
IP address blocks:        168.93.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:28:a6:67:92:74:e3:51:6b:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=6eff52a4-c321-4b35-9029-d88efe76ddbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:ff:da:aa:c4:1a:29:ec:2c:c9:ee:05:a8:
                    35:0a:e1:86:30:dd:cb:c0:0f:64:15:62:59:5e:1c:
                    db:52:cd:71:0f:37:dc:15:fd:ae:7d:e0:7f:60:74:
                    c0:59:7b:33:ec:fa:68:13:89:80:30:eb:99:99:a2:
                    60:d6:90:e6:e8:56:33:d7:d1:c6:f1:95:12:d8:46:
                    0e:60:ca:51:bc:a6:dc:fc:05:e9:b7:4d:e4:9a:10:
                    84:31:a1:5e:8a:d6:9a:e4:ff:42:97:74:ff:59:86:
                    bb:2f:b1:04:31:4d:05:77:30:8f:3d:b0:52:f5:29:
                    20:55:92:75:a5:9f:3e:fc:a7:97:90:05:ba:2d:57:
                    cc:f7:d7:4e:ce:62:9d:b3:17:61:d7:b1:9e:53:c0:
                    11:18:18:e6:77:ad:01:41:fc:5e:d0:0a:d1:a7:8a:
                    19:e0:2f:8e:39:a5:b8:37:b0:76:75:86:dd:d3:e6:
                    a2:a2:33:75:39:ca:55:59:e4:4a:dd:2f:d1:d9:3d:
                    d9:dc:ea:1a:a2:fb:0b:02:ac:b9:a4:62:65:34:24:
                    e2:34:92:2a:24:44:1e:66:d7:34:99:8f:24:e2:e2:
                    0f:7c:3c:60:7e:c7:e7:2e:f1:c7:8e:91:ee:31:fb:
                    11:fc:6d:7d:f0:f3:83:97:b9:f0:83:a7:c6:d8:b7:
                    89:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:76:10:49:CB:59:7A:E0:5D:92:D6:16:E3:09:AD:C8:A9:C0:F4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/07cfb2a1-6843-33bb-9006-b430b8bc5c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:38:13:7f:87:ed:dc:60:01:f8:b1:72:8f:d6:3d:78:d9:7a:
         d5:67:4b:64:f9:e7:7c:4f:35:f9:5d:d0:69:1a:54:c9:7d:5f:
         22:81:d5:57:5b:4d:b4:9e:f6:6e:6d:c4:2d:9e:73:b7:e1:7b:
         13:14:83:b2:a2:47:ce:e1:6e:99:c7:3b:03:dd:cc:09:eb:f7:
         f9:98:81:e8:b7:49:9d:3e:2f:e9:21:87:90:2f:a4:2c:08:ac:
         94:97:b5:9b:5c:bd:45:e1:58:f1:97:cc:51:30:eb:99:a3:d9:
         53:74:ff:54:8b:b8:d7:53:63:86:6e:79:4d:46:11:5d:38:ff:
         83:a9:a9:29:03:ed:3a:d9:4e:80:37:a4:6c:04:3a:5c:3b:e6:
         e3:6a:94:d9:95:06:c3:9e:9f:2c:3b:e7:6d:24:d3:e8:bb:c8:
         0b:2e:6f:07:30:84:8d:09:99:16:34:04:cc:3a:d2:61:2f:63:
         bb:66:f7:d7:cc:cf:2a:94:c5:8e:2c:11:ce:65:c9:18:c3:a5:
         e4:fd:98:9b:2c:e4:7e:48:2a:8f:a1:0b:5e:67:24:dd:bd:47:
         5a:6d:0f:49:d3:80:c2:7e:31:64:a7:95:ab:a3:94:5b:be:13:
         ef:92:7c:45:68:81:54:66:a8:75:d7:01:cd:48:89:87:98:34:
         40:cd:91:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:07:58 2025 by rpki-client