Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/606ace8d-1146-36d8-8294-bfbabdd0e3dd.roa
File:                     606ace8d-1146-36d8-8294-bfbabdd0e3dd.roa (raw, json)
Hash identifier:          uA/2D8bqxrLTzEVMyl0JWQZGevCVcgD+6hBEolcOcAU=
Subject key identifier:   90:E8:5A:5A:CC:E9:8A:F9:D5:74:FB:6A:23:4C:B3:65:ED:DA:56:1F
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB91B9A6E1BA1E6571FFAA680
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/606ace8d-1146-36d8-8294-bfbabdd0e3dd.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     7170
IP address blocks:        128.177.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:9a:6e:1b:a1:e6:57:1f:fa:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=597b075a-5223-498f-8f9e-89790a09fdec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:e5:1f:03:75:61:f1:03:12:4b:38:d1:79:
                    0e:e5:f3:df:bc:48:df:35:7d:8f:8c:96:81:ef:51:
                    a4:2a:be:6d:1a:ac:50:4d:5f:0b:5f:a3:06:35:07:
                    e6:9b:ca:ae:6e:f0:34:a3:57:4d:32:3d:2e:b3:bb:
                    95:e4:74:56:f9:38:a4:78:94:90:2a:67:69:07:54:
                    5d:bc:61:66:84:55:9f:e6:c9:b1:24:ca:ad:67:ce:
                    48:ec:c4:3e:18:d2:67:a9:ae:d8:b3:35:ba:03:97:
                    9e:3d:d7:04:02:c2:2e:f3:c0:6e:2d:35:4f:33:e4:
                    65:b6:0b:06:a5:5f:97:56:de:8f:ca:a8:ef:d6:77:
                    0d:5a:56:d8:8c:04:58:6c:37:6a:69:5c:f3:87:5c:
                    83:c8:a2:2d:de:0d:65:b0:ff:94:bd:22:f5:1d:95:
                    cb:f7:19:7e:49:69:b7:5b:3d:bd:a3:f9:11:76:d9:
                    2e:72:6c:04:fc:6c:24:b9:2e:59:3d:62:18:a7:77:
                    82:f7:4b:e9:94:a5:37:37:75:63:9b:b0:4f:85:86:
                    5c:75:68:96:63:86:f0:e2:83:13:8c:8d:e3:e8:54:
                    dd:e2:c8:8d:6a:83:da:9e:a0:e0:5c:68:61:18:c8:
                    8c:cc:c0:3c:34:04:41:05:1e:ac:45:ff:5a:5c:31:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E8:5A:5A:CC:E9:8A:F9:D5:74:FB:6A:23:4C:B3:65:ED:DA:56:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/606ace8d-1146-36d8-8294-bfbabdd0e3dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:6a:8f:96:20:69:be:ad:78:a3:8f:6b:61:20:33:f6:9c:e5:
         bd:b4:66:1f:df:ea:2f:27:0a:ec:a3:c7:54:00:59:5d:cf:d3:
         f6:fc:bc:28:46:61:30:d2:ce:e2:fc:fd:d7:87:70:b7:27:10:
         53:bd:79:31:78:d8:3e:b6:e7:d4:7d:83:a1:f4:97:38:e1:07:
         26:dd:90:54:0e:43:8f:93:58:da:7e:ba:02:85:10:eb:1c:29:
         21:5e:56:7d:0d:49:42:fe:f5:00:b1:63:c3:1a:6e:aa:0b:4e:
         ec:c4:46:e9:fc:ca:5c:81:a6:3c:8b:9a:06:54:74:b4:b8:aa:
         56:c7:e9:17:a2:27:6e:78:ee:b5:1d:5c:64:c2:b1:37:23:8a:
         15:48:71:f1:07:2c:a6:5a:e7:aa:30:4e:cb:fe:af:89:3a:47:
         f7:83:65:b3:6b:72:22:1d:63:f2:39:6f:27:32:34:ac:91:53:
         77:4a:89:44:67:92:c9:2c:26:3f:f0:13:d8:54:3e:d9:43:59:
         30:40:90:3f:44:c8:41:7b:7f:bb:f3:37:01:9f:67:49:88:02:
         24:46:9e:c3:4c:a4:46:e4:29:89:81:94:44:12:cd:7c:01:8f:
         b1:86:fb:31:a6:0f:4f:8c:e5:48:52:2c:77:25:fe:0d:b4:50:
         ba:f9:9d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:47:13 2025 by rpki-client