Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ed9f5e9a-efdf-3683-8b54-3e7f8aaffbdb.roa
File:                     ed9f5e9a-efdf-3683-8b54-3e7f8aaffbdb.roa (raw, json)
Hash identifier:          F6UAOn1lkPzSZrC8tiS2oKKwM2JM8bkjxyIJk19MXm4=
Subject key identifier:   21:B5:07:E2:06:8A:24:2F:96:20:94:E1:84:7A:16:18:FF:1C:61:49
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849DB2A2B442362008FACE7D900
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ed9f5e9a-efdf-3683-8b54-3e7f8aaffbdb.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     6461
IP address blocks:        209.249.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:2b:44:23:62:00:8f:ac:e7:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=83a0df58-89bc-4788-b6cb-5f1c247efaf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:41:17:8b:5b:53:b9:32:7c:5d:0a:41:98:b1:
                    20:cf:cf:ad:18:bc:70:f2:4d:73:81:f8:7b:2e:d1:
                    d8:37:b4:88:bc:6b:67:bc:33:06:65:27:0e:5f:12:
                    0c:9f:7b:64:06:4b:1a:ce:6f:f4:0d:01:df:30:14:
                    26:e7:d4:f4:60:cb:22:e1:72:70:8f:08:e3:0e:2c:
                    7f:d6:83:a5:0f:94:ba:81:ec:ba:75:3a:6e:76:57:
                    42:d2:eb:48:f3:fb:83:0f:e9:7c:77:4d:db:72:96:
                    e4:03:ad:ca:35:a9:97:68:31:cc:6b:8a:a9:52:de:
                    4a:ff:94:ef:1a:b6:2d:92:5c:5b:9a:b4:5f:e1:ab:
                    15:b0:f6:6a:85:c9:6c:78:ae:73:16:d0:0b:b1:21:
                    ea:64:93:bd:f2:4f:e5:d0:5b:9e:62:8c:93:d6:31:
                    90:65:ee:67:9f:eb:d5:f1:c6:84:c4:c6:b3:87:02:
                    aa:d5:12:74:12:bd:b3:33:9f:c1:6a:3d:89:0f:b0:
                    4c:1f:ee:e7:0b:bc:60:a8:1b:33:67:9b:10:8a:38:
                    49:41:4f:a3:04:ef:b8:e7:41:47:a9:3a:5c:5c:e0:
                    75:82:b3:17:00:24:c3:63:a8:81:67:58:62:cf:26:
                    6b:f5:9c:8b:ce:f5:89:bd:c2:1d:94:14:f7:df:a7:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B5:07:E2:06:8A:24:2F:96:20:94:E1:84:7A:16:18:FF:1C:61:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ed9f5e9a-efdf-3683-8b54-3e7f8aaffbdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:0a:a6:4b:05:48:20:ea:8d:97:c8:53:95:59:41:23:14:f5:
         44:54:2f:a7:a9:97:26:fa:e4:82:07:95:49:b4:52:74:53:bf:
         84:f2:94:bc:2a:7f:ac:1a:cc:59:fd:a3:32:fe:07:28:e0:ff:
         ca:67:b0:81:fb:8c:2e:6a:72:4d:95:68:5f:2a:51:2f:d3:f8:
         74:3b:f2:fe:6c:6c:d1:ba:7e:f1:b6:d7:96:e3:bf:d9:6a:9c:
         91:58:15:3a:26:90:db:42:9b:ee:fd:76:51:da:d7:3b:fc:ce:
         0d:88:25:f4:f4:c5:1e:3d:85:5f:eb:09:38:55:cf:da:41:a3:
         26:f0:0c:a6:58:70:0d:1e:2b:24:f8:c4:1f:35:8d:69:ee:b2:
         47:ab:2d:37:ac:36:73:65:bc:8a:33:fe:67:70:bf:4d:28:84:
         51:6f:96:f3:df:e7:4d:59:44:f5:a6:a0:67:69:c0:25:5f:05:
         a4:a5:01:a2:bf:72:d7:59:e9:43:60:f5:d7:76:4a:46:28:40:
         84:eb:8d:c4:43:3e:1f:62:c3:86:83:a2:22:0c:4d:c9:2b:6c:
         2a:54:a1:f3:1b:7a:40:70:b2:de:88:3b:56:df:54:6b:5e:97:
         01:a5:62:33:94:e1:6c:0f:a5:13:64:9e:a3:53:6f:6b:82:74:
         46:02:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:02:26 2025 by rpki-client