Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
File:                     e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa (raw, json)
Hash identifier:          Qq7F4bmeiCBYaUkH8VKyPEzRThf9o7v8PbsKaHTXU7c=
Subject key identifier:   07:F0:93:44:C0:3F:84:A3:FB:31:BD:26:A3:C5:4A:9D:D2:CA:3F:22
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584A1465799C108C3CD805359980
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     9009
IP address blocks:        172.85.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:79:9c:10:8c:3c:d8:05:35:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=6cc94546-7f3e-40fb-b3e0-cae09dbf1f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:ab:96:9b:2e:f2:1e:b2:51:12:bb:cf:96:
                    4e:ff:3a:9f:c6:7c:8b:9e:20:d3:56:27:6e:3d:45:
                    10:4f:36:0d:3e:55:57:77:fe:4f:87:66:72:3e:51:
                    c4:7d:15:2f:23:bd:18:08:0c:7e:31:74:6d:a9:e1:
                    38:84:1a:83:28:31:ee:b2:33:4e:23:8c:09:e1:a8:
                    77:e5:f8:47:ab:95:84:14:18:8f:0b:9c:3e:de:95:
                    34:4e:3f:f0:c1:7a:39:15:d2:89:05:67:eb:83:11:
                    3a:75:5a:ae:14:24:81:ef:3f:a3:36:51:f6:e2:42:
                    9d:78:cb:4f:5b:87:93:2f:1c:ae:47:41:46:b9:48:
                    eb:46:4b:bb:ac:00:54:53:e6:06:79:29:b0:2c:cc:
                    87:78:58:bd:61:a2:35:3d:00:20:73:b4:d8:d6:2d:
                    af:dd:40:af:2f:8e:a8:12:7f:cb:20:69:7a:c9:a6:
                    d9:ca:8b:14:87:ea:6f:31:ee:3d:0c:81:9e:e0:9c:
                    fd:29:e8:63:50:76:f4:34:25:bd:bd:5e:78:ef:b7:
                    cb:4e:3a:32:77:7e:0b:9a:35:a2:93:ad:4b:af:bd:
                    5d:50:89:20:ea:a2:33:38:a2:61:34:22:6a:06:83:
                    9d:fe:3e:f6:be:eb:21:c4:4d:ec:b3:6a:a9:90:ec:
                    b1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F0:93:44:C0:3F:84:A3:FB:31:BD:26:A3:C5:4A:9D:D2:CA:3F:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:de:52:f4:a3:19:2a:25:7b:df:d6:2b:12:ac:29:00:8a:4f:
         91:b9:af:26:19:79:fc:bd:f7:56:8a:e4:5e:95:ca:fc:dc:7a:
         a1:40:2c:6d:e9:da:30:56:de:33:1d:50:9d:81:3f:14:9d:46:
         79:93:fc:3d:20:29:aa:4a:b9:88:09:2e:0c:33:d3:f7:fc:94:
         9f:25:22:04:dc:52:4c:95:2b:49:c3:87:08:6a:81:1c:85:60:
         65:92:41:ef:02:d8:8d:71:3b:53:6e:c5:5f:08:1d:52:2e:79:
         ce:50:b3:56:bc:2d:cc:d6:38:b9:4a:bc:99:b1:24:44:a7:73:
         0a:3a:65:8d:3b:bc:b1:5c:ce:3f:fd:23:81:ff:a0:c6:7a:4e:
         58:37:28:d6:cd:a0:5c:e9:a9:8e:9e:ae:1b:d1:d0:2e:10:d9:
         f2:76:29:c7:8f:7c:64:6e:eb:b1:e7:b7:b8:60:30:88:4e:02:
         89:66:67:24:4c:88:93:e5:40:c6:5e:23:94:3c:d4:54:ad:ab:
         ab:e2:74:03:29:c9:cc:31:a7:6d:dc:b8:c8:fd:03:f9:e6:ab:
         50:03:d4:31:89:ad:91:b2:66:0f:8b:31:f2:2b:65:b3:cf:a3:
         0a:45:d6:4c:6d:01:e9:53:27:d1:61:9e:8b:91:0c:d1:d2:47:
         6f:be:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:03 2025 by rpki-client