Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/678a1903-456b-3e46-aecb-edfc725741eb.roa
File:                     678a1903-456b-3e46-aecb-edfc725741eb.roa (raw, json)
Hash identifier:          Hnoisn0rcHnGuKGshzrFGHyK8k5FgbCWSqSGPHrAfqU=
Subject key identifier:   BD:68:5A:8C:63:EB:18:18:C0:80:B1:FF:3D:DA:EF:9A:47:2C:94:8C
Certificate issuer:       /CN=d7df35c8-e79b-433a-a950-6df11849bfd3
Certificate serial:       010D0C9F4328584A2ABAD14FAB54064F03463010
Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/678a1903-456b-3e46-aecb-edfc725741eb.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     88
IP address blocks:        128.112.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:d1:4f:ab:54:06:4f:03:46:30:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=f36e7675-17d8-4de5-aade-b206d95bcb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:b7:d5:95:ce:41:a6:87:74:3f:60:5c:f6:
                    43:4d:ca:0b:2f:ef:47:b1:a5:60:63:19:7b:1e:30:
                    2d:b3:a9:78:67:d4:58:a7:b8:17:f9:ea:c9:a1:77:
                    0a:2f:bc:9e:50:86:65:a1:51:53:42:70:b4:75:07:
                    ab:dd:d0:35:c2:65:ac:02:22:f5:5b:30:fe:3b:c9:
                    b3:af:59:be:9b:42:23:78:f9:7c:a7:b5:be:a2:ff:
                    7f:a7:7a:92:35:19:9e:1d:f1:ca:03:29:07:c7:2c:
                    7b:66:2e:00:3e:82:74:3e:64:09:30:c8:6f:67:6e:
                    48:44:c2:c8:71:e9:2a:3b:e9:eb:2f:45:7e:87:88:
                    72:cd:4a:f8:dc:9d:54:5a:02:5d:e0:6a:43:49:33:
                    69:cc:dd:36:bb:65:88:78:61:73:22:0a:a6:cb:15:
                    13:a2:11:76:a4:66:b5:0a:97:81:5f:c1:c3:93:8e:
                    15:ab:47:c2:28:27:81:5d:cc:4b:72:6f:2d:94:1a:
                    af:69:0e:a7:a6:ba:95:f8:04:03:5f:8f:d4:85:30:
                    0f:11:28:cd:34:34:09:82:b6:47:89:9d:41:23:f1:
                    57:c5:07:35:7a:e6:63:3e:24:1b:da:54:4f:af:1d:
                    7c:ac:ae:a1:04:fe:07:0f:a3:4d:8a:72:7d:dc:2d:
                    ab:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:68:5A:8C:63:EB:18:18:C0:80:B1:FF:3D:DA:EF:9A:47:2C:94:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/678a1903-456b-3e46-aecb-edfc725741eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl

            X509v3 Authority Key Identifier:
                keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:5a:44:cd:a5:f4:1b:88:b6:88:da:34:08:46:85:8c:ac:c0:
         22:3e:e8:25:73:5a:04:54:3b:12:89:e0:da:98:5d:6b:fa:7f:
         9b:b0:e6:3d:c4:6c:91:71:fc:a6:c4:33:e9:c5:fb:9d:46:e0:
         5b:3e:30:db:0a:58:a5:fe:e6:5b:fc:8e:78:cb:ef:af:aa:cc:
         04:6e:4b:27:05:86:ff:82:ad:0e:38:e3:10:19:92:31:81:b6:
         d3:7f:be:6c:92:16:c6:06:c3:69:b6:aa:86:a3:3a:24:b6:04:
         8a:ab:e4:8c:97:98:7a:67:53:2c:99:8c:8f:3e:a9:88:7a:70:
         52:36:f8:56:3f:7e:be:af:80:a2:7e:d6:62:0b:d5:8e:93:a4:
         49:28:50:bc:ee:77:71:b6:e3:21:8c:52:8a:75:e0:eb:d7:ab:
         01:60:27:f6:3d:ec:c9:b6:37:f5:ef:cd:6f:fd:16:5c:cd:7f:
         42:06:af:4f:4f:57:ee:7a:b0:bd:0f:29:fe:9c:5c:6a:88:98:
         ff:7a:1f:48:27:21:03:c7:1f:3b:84:ac:39:3a:96:41:88:f2:
         65:27:e7:c3:3a:51:9a:7a:58:40:60:0b:16:d9:31:84:fa:71:
         5f:ad:e9:53:ea:ac:87:c4:fc:30:5c:26:92:94:9a:ff:9d:d1:
         59:6b:8e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:30:34 2025 by rpki-client