Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa
File:                     4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa (raw, json)
Hash identifier:          WvGrUJC/pmtny7MMvaEfzbVwp9uaphuCxqJ8+NqlaTg=
Subject key identifier:   6D:4D:EF:63:94:D4:8E:BC:43:20:B7:C9:98:E8:84:4A:2C:C3:FC:63
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584A268AC39414AFB69E2FEF71C0
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     394285
IP address blocks:        174.137.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c3:94:14:af:b6:9e:2f:ef:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=05467e60-53e9-4f02-80a5-c98d4f3c7436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:13:02:83:02:b3:d8:61:ca:8e:0d:77:3f:09:
                    03:50:23:4c:2c:d8:48:af:6c:6c:05:a1:a3:63:f9:
                    44:36:1e:63:99:1b:42:eb:15:d9:d6:bb:0f:77:8e:
                    f3:2a:de:ee:9e:22:d9:4f:09:5e:06:e7:12:0d:4a:
                    d2:18:f1:9e:d8:23:84:f0:d0:b2:c3:41:28:76:fb:
                    8b:99:31:6b:66:8a:9e:3e:03:0c:ab:e8:06:1f:26:
                    5d:70:c2:10:18:da:c4:f1:a3:fb:92:3d:73:9f:8b:
                    af:4a:9c:de:7d:46:50:71:f8:a8:ba:5b:82:fe:ea:
                    96:e6:19:cb:f5:4c:5c:88:6d:75:d3:f5:2f:68:c5:
                    66:35:cc:c7:54:9a:a6:ed:8b:46:39:0c:70:86:aa:
                    7d:09:cc:d8:f2:9e:fd:c0:86:63:a5:a7:9e:d8:ec:
                    02:45:51:59:04:e1:9f:f1:4a:27:e8:5a:08:58:6d:
                    8b:a7:2d:af:cd:76:f4:9d:a0:f8:76:45:b9:68:54:
                    89:7a:0b:ea:e9:16:08:09:5e:82:11:5c:c4:df:be:
                    7d:58:33:74:da:a5:cc:2d:bf:ee:ce:77:fc:ac:74:
                    3c:e2:bc:f5:67:41:98:ef:74:b0:33:c6:a3:05:f8:
                    0e:f8:87:52:06:45:9e:b7:5d:e6:db:8f:31:ce:24:
                    b5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4D:EF:63:94:D4:8E:BC:43:20:B7:C9:98:E8:84:4A:2C:C3:FC:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:2b:05:fc:06:ac:8a:3b:5e:fb:f0:7f:a6:4f:1c:01:a9:e5:
         3e:7b:da:38:9b:17:b4:58:c8:88:b3:d9:b5:1e:8a:86:8e:e0:
         fb:2b:4a:04:db:47:c7:74:ac:e1:85:f1:3b:36:22:97:23:06:
         ef:e5:58:85:12:d9:f1:7a:ca:af:d9:f3:5d:41:48:7d:c7:5a:
         9d:89:6b:3e:8c:6e:2d:b4:2a:15:ee:32:5a:02:1c:d0:f3:4a:
         ff:f2:ad:9b:8d:71:89:df:5c:2f:8a:a6:1b:fe:66:16:a5:7e:
         fc:05:e0:de:75:59:d9:57:c6:d1:ff:55:c4:40:b1:43:7f:87:
         b4:34:aa:67:fa:6e:e1:af:6b:ca:64:0f:51:08:6d:81:32:0a:
         50:bc:e5:19:9f:a4:17:bd:c0:a8:c1:83:d8:cf:bd:ed:11:b6:
         f4:46:85:2d:f7:8d:4d:70:18:7d:14:d8:8a:58:90:90:3c:89:
         c2:5b:94:d1:a3:1e:65:02:3b:5e:47:c3:04:45:74:f1:62:34:
         39:95:91:91:44:67:34:ff:76:21:75:93:b5:1f:35:78:76:2c:
         12:0d:0c:1a:ea:53:ba:34:83:13:c0:47:c3:8c:ac:9b:2e:5f:
         fc:e0:f4:dc:ac:1b:de:32:35:3e:2e:70:db:e0:e5:a3:8a:34:
         a7:52:92:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:39:52 2025 by rpki-client