Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/714385cc-6caf-3534-9571-6bf92f8ea373.roa
File:                     714385cc-6caf-3534-9571-6bf92f8ea373.roa (raw, json)
Hash identifier:          qQqyL27l5Zt9ishyzQv7iQtvVJWeuEnour2/OQkKmtM=
Subject key identifier:   50:8E:00:1A:6B:47:94:1D:DE:18:3E:D5:3F:45:C2:7D:A2:7D:EA:FA
Certificate issuer:       /CN=85be797f-f426-4ba8-98b0-1c2b5f752753
Certificate serial:       010D0C9F43285849F2E53323737185D61772E600
Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/714385cc-6caf-3534-9571-6bf92f8ea373.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     7922
IP address blocks:        134.195.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:33:23:73:71:85:d6:17:72:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=c7fdadce-67d9-4375-bbb3-00edc31d635d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:34:68:ef:af:4b:03:ad:92:cd:31:96:87:bf:
                    59:ac:7a:21:47:47:10:19:59:e3:d2:a7:07:ba:eb:
                    68:6e:83:03:78:4f:f3:b3:08:a8:3a:35:c4:02:17:
                    9e:19:bc:cc:b5:05:45:13:f3:69:8b:fd:10:2f:bc:
                    fe:2b:7d:46:15:00:4e:52:9c:ec:d4:b5:91:4b:cb:
                    19:0d:c8:0a:d0:a7:1e:7b:ae:ac:8f:03:82:ae:3f:
                    26:7d:79:81:0a:cf:cf:14:9f:35:b5:0a:74:0a:8a:
                    bc:d8:ee:e9:da:ff:27:69:08:b2:24:f9:ff:b8:b8:
                    6b:55:7b:03:1d:51:31:30:98:ff:79:d2:07:62:bf:
                    13:62:cf:49:e1:6f:65:66:47:bb:58:ae:9a:8c:4d:
                    d6:ca:63:d7:22:b9:7b:7d:19:36:15:f4:31:7b:58:
                    8e:5c:d9:81:39:02:74:1c:28:71:a0:9c:c8:fd:a2:
                    a2:17:24:22:6b:58:20:b3:a7:77:f4:d5:33:0a:73:
                    b1:7c:f5:f8:ae:75:3c:e3:13:16:97:56:7b:7a:63:
                    eb:a2:67:ea:b7:93:5c:ee:8e:79:c1:0e:00:02:87:
                    87:19:3b:2f:f7:4c:97:7c:cf:3d:41:d0:56:b4:93:
                    77:e6:41:fc:74:ba:0d:84:ea:46:f8:5a:3e:46:a3:
                    84:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8E:00:1A:6B:47:94:1D:DE:18:3E:D5:3F:45:C2:7D:A2:7D:EA:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/714385cc-6caf-3534-9571-6bf92f8ea373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl

            X509v3 Authority Key Identifier:
                keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7f:fe:6e:b7:b7:f1:b1:05:5d:54:08:c0:35:c3:a1:fe:dc:
         a2:13:14:ce:6b:e2:b9:95:ba:8c:7a:a4:2b:e2:3f:dd:0e:41:
         f0:c1:03:7e:d4:de:1f:76:16:ca:7f:d9:44:a6:eb:e1:c4:4c:
         4c:62:e5:c0:7f:4d:8b:3e:15:68:39:c7:5d:49:9c:4a:6a:93:
         d7:7f:4e:d5:d1:33:16:f4:7f:c0:e5:1e:88:0f:20:71:5a:de:
         ef:4f:54:7f:b4:13:65:4c:93:dd:cb:4b:10:b5:d8:87:b9:47:
         f6:50:97:1f:c2:8d:ff:9e:5a:44:ce:45:7f:14:e1:21:f3:28:
         d2:4a:ba:7d:a4:ea:9a:72:73:98:64:36:78:d7:db:9a:68:66:
         c3:89:7d:b3:fa:a5:47:f7:8a:2f:61:0f:93:e9:33:0e:a8:04:
         a5:64:4e:00:e5:ac:c2:e7:e6:82:41:6c:4b:7e:82:64:c5:1c:
         fa:58:d0:30:3d:e3:08:c7:a4:0b:cb:73:f5:1d:b6:7e:cb:90:
         20:08:70:7f:c5:53:c7:11:5e:e3:2c:93:b6:bd:2a:e2:1e:ea:
         26:eb:53:69:d5:e6:67:8a:b5:38:eb:17:5e:0e:32:54:38:e6:
         15:ed:0a:24:9c:8a:c5:3e:38:f4:5d:7f:94:d5:32:ef:60:93:
         69:48:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:51:46 2025 by rpki-client