Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa
File:                     20885ce4-5a76-39c3-86d6-c90d2b265830.roa (raw, json)
Hash identifier:          S4XvwVDfENakRCJAmrTEWv/FnJ8tVjvlkSXH98kej3E=
Subject key identifier:   9A:38:B7:FB:57:3E:B0:0C:14:48:09:E7:0E:E3:9F:9E:BC:94:A0:2B
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584A2ABAE2DC16DF7B6E7B094B80
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     394285
IP address blocks:        174.137.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e2:dc:16:df:7b:6e:7b:09:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=2bb62b13-9047-4e83-9fc9-88c2a5b04c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:61:4e:bf:8b:64:cf:3e:0f:0c:35:ab:15:76:
                    c7:23:87:77:c1:01:96:a7:a4:15:7a:8f:de:2e:9c:
                    ec:dd:53:64:70:26:f0:14:46:f9:f0:5f:c1:10:34:
                    61:8f:ca:45:1a:94:f6:f4:70:c0:b4:22:75:e9:ea:
                    c3:b3:d5:f4:7a:c4:85:36:64:2f:dd:a8:3c:7b:54:
                    aa:1f:d5:dc:08:bf:c7:6a:73:66:e9:74:a8:70:21:
                    88:66:d9:5c:b5:83:42:f3:17:b7:c6:bb:ec:69:56:
                    66:24:41:bb:d4:c8:ab:d3:74:6e:ea:23:da:fc:53:
                    c7:9b:3e:39:dc:0e:4e:c8:f5:05:4e:50:c0:c7:cd:
                    69:f7:70:96:88:ad:ed:e9:b2:02:91:e8:ea:97:db:
                    e6:10:35:8a:77:e2:0a:be:40:2d:43:31:92:d8:17:
                    5e:21:c6:e7:1e:a9:00:1a:11:0e:57:d2:8f:f1:0b:
                    ba:f1:e0:a2:1a:34:be:08:bb:64:37:25:5f:62:2e:
                    30:42:83:62:17:62:7c:e0:9a:44:83:e5:25:00:d5:
                    6a:c2:a8:35:1c:88:6a:32:01:38:c2:e3:7c:fe:ae:
                    b8:12:25:69:c7:ac:bd:42:14:c1:83:00:5c:3f:85:
                    e1:5e:c1:7f:53:e4:51:ae:7e:4a:de:79:9f:e4:07:
                    6d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:38:B7:FB:57:3E:B0:0C:14:48:09:E7:0E:E3:9F:9E:BC:94:A0:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/20885ce4-5a76-39c3-86d6-c90d2b265830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:bb:ad:cc:9d:7a:24:fd:15:dc:e5:4a:c2:1f:66:c7:e8:0c:
         0a:f9:b5:8d:c9:d6:06:06:31:62:88:ce:a9:1e:e6:40:d8:da:
         e5:3d:03:22:ea:a8:a6:8a:e1:f0:01:9b:38:47:c3:5a:cf:04:
         30:66:f8:d6:d4:0c:79:0b:b3:4a:3c:40:42:ef:73:18:0a:42:
         87:61:d8:20:e5:70:9b:0e:9c:ef:08:ae:c0:e4:ee:61:47:35:
         d2:15:12:23:07:e6:5f:11:20:c9:90:7a:35:a2:6f:5b:e1:3b:
         ce:3b:20:1b:e0:da:39:42:8f:e5:f8:c1:ec:06:6d:78:ee:4b:
         34:1d:6e:7c:c0:a2:38:12:90:94:a1:77:e8:06:be:58:66:5f:
         f1:60:4b:76:69:52:17:47:be:10:72:48:98:e2:34:a7:88:af:
         16:0a:bb:d8:af:7f:32:8e:27:37:79:27:0e:f4:78:3a:c9:58:
         ae:88:b7:ce:7f:34:2e:6c:8d:76:09:95:0f:c7:67:1f:7d:7c:
         80:ab:75:92:30:57:3a:9f:73:cd:cd:69:ef:69:fd:5e:46:f7:
         cd:c0:f3:6d:eb:4b:bc:25:87:f3:e5:ac:ee:7f:36:d5:80:f9:
         44:79:06:fe:07:c9:ea:91:7b:fe:8f:18:0a:b1:83:44:27:f7:
         71:dc:5c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:10 2025 by rpki-client