Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/4ee21dfc-36b2-372d-aed9-eb81a9135b91.roa
File:                     4ee21dfc-36b2-372d-aed9-eb81a9135b91.roa (raw, json)
Hash identifier:          r9haYxVJ7+M96x1XJypWb8m8NFr2/OXlNFw5R3m4yxA=
Subject key identifier:   EB:34:15:95:4E:ED:33:4D:E6:F3:25:D1:32:CF:16:1D:AD:D7:EA:4E
Certificate issuer:       /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
Certificate serial:       010D0C9F4328584A5FC5DB9759D0AFCB16478E80
Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/4ee21dfc-36b2-372d-aed9-eb81a9135b91.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     15108
IP address blocks:        192.111.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:db:97:59:d0:af:cb:16:47:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=209d64a0-5059-4d84-8528-a3d6d122cc5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:24:67:64:2b:7b:2c:b7:b3:f4:2e:46:f9:0c:
                    a6:45:4d:75:c2:80:10:0c:c8:8e:84:07:bc:81:be:
                    65:e2:8b:f8:7c:c2:13:04:14:35:11:70:f6:ca:c2:
                    80:cc:cf:1b:86:cc:b1:ad:1f:c1:e1:aa:a1:97:4c:
                    7f:0a:52:b0:2b:dd:9f:6b:c9:dc:f7:56:a6:b0:df:
                    c6:97:b3:a5:e7:b3:f4:72:cb:cb:c5:8e:83:25:be:
                    5f:17:5d:ba:7b:49:ac:ca:2c:cd:4a:93:28:26:a2:
                    8e:2f:a4:38:d8:8f:b0:55:df:3f:a3:14:ac:65:4a:
                    05:12:99:55:26:9e:16:9b:cb:e5:b8:e9:65:6a:47:
                    55:6a:cb:ea:df:70:22:59:b3:c1:95:75:97:6e:c2:
                    b2:0f:e5:00:8a:38:a6:8b:da:e0:0c:38:91:11:46:
                    bc:e1:d4:6a:12:64:8f:2c:24:15:35:7a:06:5f:75:
                    f3:54:da:9c:7d:0b:57:af:6d:85:32:85:e1:59:44:
                    a0:90:7e:64:8b:9f:95:30:04:d7:6e:fb:87:bd:8e:
                    af:77:d3:e0:75:73:d0:80:98:b0:54:a8:7f:d7:57:
                    8d:89:2e:64:ba:ea:57:0e:68:7a:26:76:7f:49:2e:
                    41:1c:b9:1e:a7:4f:da:67:b2:86:e0:0a:20:68:15:
                    67:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:34:15:95:4E:ED:33:4D:E6:F3:25:D1:32:CF:16:1D:AD:D7:EA:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/4ee21dfc-36b2-372d-aed9-eb81a9135b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9a:03:ca:ad:87:fb:5d:f9:5c:2b:1b:f4:42:9d:b3:b5:d8:
         03:fb:24:58:99:8f:76:69:d4:f0:16:f4:db:c2:08:68:18:70:
         eb:e7:55:50:6e:40:91:18:60:89:97:0f:24:e7:3b:7a:01:b0:
         cc:ab:48:b3:e3:8e:8d:84:3b:3b:8e:29:50:54:5d:2c:6e:04:
         04:fc:ab:bd:18:a1:89:46:e8:6b:f5:2d:eb:54:a4:ed:be:4b:
         6c:e8:13:66:ba:ca:e2:48:20:e5:2f:99:39:41:3c:b0:5c:09:
         1e:ac:b5:d4:79:40:e0:e1:4c:c6:f1:ba:49:5b:b3:1c:45:d1:
         b2:e3:c1:05:9f:83:e2:c0:fc:3f:93:3a:03:c9:87:f3:ce:ca:
         32:2e:d0:af:d3:83:47:cc:df:ad:09:dd:fc:5a:3d:3b:18:e3:
         a7:24:b4:b9:89:84:ad:b1:ed:e8:31:f8:45:53:62:7e:9c:9b:
         99:be:e8:59:3a:c9:be:5a:0a:aa:bc:26:9c:ff:02:6d:a8:61:
         cf:88:fb:d0:60:0c:0d:14:ad:2e:f4:1a:12:96:4e:4f:af:0e:
         d1:24:30:3d:5c:76:d6:c8:60:82:f0:f6:a8:ad:c7:4a:12:b3:
         e3:fa:df:02:4c:24:47:25:ac:3e:2c:f8:c4:07:c5:a9:e3:25:
         ec:4b:93:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:45 2025 by rpki-client