Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/96735077-7688-4fde-a5d7-f0b26667a34f/902011dd-c5b9-3fb0-b439-d715f8366ee2.roa
File:                     902011dd-c5b9-3fb0-b439-d715f8366ee2.roa (raw, json)
Hash identifier:          YyiysUl/81bCX7tYviShchNXDsZ3hmI1QzCUIGzAdK8=
Subject key identifier:   1B:03:35:26:33:FD:86:52:C2:AA:45:99:8A:75:98:63:C2:27:2A:85
Certificate issuer:       /CN=96735077-7688-4fde-a5d7-f0b26667a34f
Certificate serial:       010D0C9F432858499829D33209A0480B25165780
Authority key identifier: CA:7E:D5:2E:DA:23:F9:44:33:19:D9:7F:F4:5D:90:68:5C:49:43:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/96735077-7688-4fde-a5d7-f0b26667a34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/96735077-7688-4fde-a5d7-f0b26667a34f/902011dd-c5b9-3fb0-b439-d715f8366ee2.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     395510
IP address blocks:        134.195.185.0/24 maxlen: 24
                          2605:c740::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/96735077-7688-4fde-a5d7-f0b26667a34f/96735077-7688-4fde-a5d7-f0b26667a34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/96735077-7688-4fde-a5d7-f0b26667a34f/96735077-7688-4fde-a5d7-f0b26667a34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/96735077-7688-4fde-a5d7-f0b26667a34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:d3:32:09:a0:48:0b:25:16:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96735077-7688-4fde-a5d7-f0b26667a34f
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=1efe8164-b1da-4756-8ad8-94987762ae5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:dc:a4:3d:c7:15:81:eb:87:25:84:5a:76:
                    f2:fd:dc:41:67:f7:57:dd:47:c5:4e:d4:e2:8f:2b:
                    2a:a1:4e:36:b8:11:0d:11:ee:a3:0b:ff:db:2b:40:
                    bb:95:b9:c0:80:53:c3:e0:64:52:7b:77:d7:96:e8:
                    e2:7e:42:62:b0:88:13:c2:ca:62:1b:26:f9:42:c9:
                    33:0c:1f:ec:e5:ef:5e:92:47:b8:eb:7f:ae:f2:f8:
                    25:41:45:cb:a4:d4:56:b5:48:bf:8e:21:12:34:14:
                    fd:f5:a4:c4:fd:ff:6e:46:3c:01:3f:9a:30:6c:53:
                    f6:af:46:f7:8f:5c:3f:66:15:f1:f0:48:08:b4:b2:
                    d8:c1:e3:2b:f1:57:76:94:36:20:1b:5e:f4:2b:6b:
                    5f:d5:48:94:91:68:c8:82:14:f0:6b:0f:a3:d4:19:
                    ee:3d:5e:f1:49:66:e6:3c:b0:7c:39:21:40:9e:93:
                    9a:0c:d1:c3:51:f8:24:42:17:d8:32:92:99:d3:26:
                    d6:5e:a8:64:75:7a:08:40:10:1f:61:82:3a:9c:67:
                    e0:49:24:b8:35:e8:81:6d:29:6c:f8:6c:62:52:af:
                    3c:01:2d:6f:35:52:38:28:07:5c:58:01:66:a5:4d:
                    c1:ad:0d:cf:d6:44:e3:37:65:7e:7e:86:16:51:17:
                    8c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:03:35:26:33:FD:86:52:C2:AA:45:99:8A:75:98:63:C2:27:2A:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/96735077-7688-4fde-a5d7-f0b26667a34f/902011dd-c5b9-3fb0-b439-d715f8366ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/96735077-7688-4fde-a5d7-f0b26667a34f/96735077-7688-4fde-a5d7-f0b26667a34f.crl

            X509v3 Authority Key Identifier:
                keyid:CA:7E:D5:2E:DA:23:F9:44:33:19:D9:7F:F4:5D:90:68:5C:49:43:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/96735077-7688-4fde-a5d7-f0b26667a34f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.185.0/24
                IPv6:
                  2605:c740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:f6:7e:6c:25:11:b7:c8:e2:ee:bf:41:59:49:a7:86:de:ac:
         59:4b:c3:68:9c:41:d9:6f:12:2e:13:90:16:e2:b7:45:79:32:
         6d:05:d6:1d:88:fb:f6:f1:2d:fe:41:33:a7:1b:ba:f6:fa:77:
         64:18:94:51:8f:1e:2e:31:9b:a5:0b:eb:19:b8:72:c3:30:28:
         67:11:5f:f8:67:37:74:3c:7e:ea:48:04:db:61:55:ab:fb:37:
         da:d3:fc:14:b7:a7:47:04:84:b1:8b:7c:0f:72:fb:48:10:80:
         fc:df:67:9e:8a:2f:d8:72:42:d1:98:32:a1:7f:fc:93:35:93:
         80:c2:2b:75:71:80:99:a3:3e:f3:92:75:21:fc:a9:5f:1a:fd:
         52:92:19:4d:10:c2:e0:4c:d2:c5:9d:7f:76:ef:83:5b:bb:84:
         02:9b:29:5c:10:68:9a:3e:6c:9d:42:8d:19:73:1f:71:56:12:
         74:0a:dc:e0:b5:6b:7b:79:25:ea:b7:9f:f0:fe:bf:d8:6a:56:
         30:92:e2:89:34:36:2c:fe:00:5d:05:90:ba:03:f3:dd:d1:95:
         cb:d8:e0:f0:cf:2e:1e:ac:31:dc:74:6a:09:ea:28:98:14:cb:
         40:68:22:d4:2a:a7:ce:e7:cc:b2:37:7c:e2:b8:58:4d:d3:99:
         d3:4d:bb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:06:11 2025 by rpki-client