Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/81fc4665-ce8c-3e5a-b70d-57e304474f19.roa
File:                     81fc4665-ce8c-3e5a-b70d-57e304474f19.roa (raw, json)
Hash identifier:          y55su6WNFbecVtV7q5n5NMpMgyxqyP9HSyWHlaUfIKg=
Subject key identifier:   D8:69:08:7F:A1:5E:CB:FB:A3:85:D2:E9:22:1A:04:74:09:A4:63:63
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FF7BDA7AB034B360FF200
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/81fc4665-ce8c-3e5a-b70d-57e304474f19.roa
Signing time:             Mon 16 Jun 2025 16:03:18 +0000
ROA not before:           Mon 16 Jun 2025 16:03:18 +0000
ROA not after:            Sun 14 Sep 2025 16:03:18 +0000
asID:                     81
IP address blocks:        128.109.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:f7:bd:a7:ab:03:4b:36:0f:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:18 2025 GMT
            Not After : Sep 14 16:03:18 2025 GMT
        Subject: CN=5d257ad7-5b8b-4ebe-9568-6bf820be8cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:4c:55:39:93:77:d1:3a:a0:62:19:08:c1:
                    34:6d:70:ff:5b:47:ba:7a:75:c9:ec:f5:e9:41:1b:
                    96:cf:e8:46:1c:a7:b0:8e:06:a3:4d:f3:0c:f5:6b:
                    5d:cf:ce:35:1d:96:8d:65:f0:3c:c6:5a:fc:0e:1c:
                    a9:25:cd:35:c1:ea:50:1e:f5:a6:34:43:3d:0e:d5:
                    ac:2b:89:54:ef:94:d8:0e:07:50:44:dc:9a:57:30:
                    ac:c5:f9:20:a4:2c:cd:65:a6:e0:a1:6f:2f:f7:e5:
                    68:06:ec:a9:5c:8d:d3:c4:74:53:67:be:21:ab:cf:
                    86:ea:12:35:11:d6:99:2e:b9:4b:b4:9e:9c:78:45:
                    f3:47:12:73:ba:65:b7:d9:01:23:0a:9b:7e:5d:7a:
                    5e:18:0d:ef:3a:76:0d:65:46:2a:9a:72:fb:3a:e1:
                    c1:ed:2c:4e:3d:be:4e:c2:c9:ec:00:43:55:ca:a5:
                    6d:ca:34:f8:94:be:b6:f6:34:39:cf:77:e8:6d:e9:
                    13:d7:2f:08:76:eb:df:f6:26:85:ce:82:94:4b:1c:
                    9c:f9:23:91:21:ef:f6:ca:44:78:4e:8e:89:59:97:
                    98:0f:ae:20:35:26:34:18:77:58:d9:3e:b2:5d:8c:
                    5d:3b:4f:e3:3a:82:1c:c0:c8:ba:b8:ed:a8:3a:0d:
                    82:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:69:08:7F:A1:5E:CB:FB:A3:85:D2:E9:22:1A:04:74:09:A4:63:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/81fc4665-ce8c-3e5a-b70d-57e304474f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.109.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:3e:ae:4e:22:99:12:36:1e:b2:42:68:7c:ac:57:c0:3a:0c:
         51:bd:64:4d:7d:fa:38:65:13:5e:d8:94:74:6e:2d:77:5a:96:
         8b:1b:8c:19:56:3d:32:e4:a7:76:de:a5:b7:f3:2b:6e:05:2a:
         5e:46:c0:86:52:f6:4d:27:c8:24:e5:a9:3e:e5:dc:e9:ae:59:
         f5:21:e6:61:12:f0:c0:0a:be:94:c3:43:2c:6e:d4:56:3d:85:
         80:56:42:e1:25:9e:13:aa:3c:b2:e0:61:75:68:0a:77:da:f0:
         35:1d:09:47:8b:30:32:81:a0:07:50:ac:7f:e2:d8:75:4f:86:
         a6:81:ee:b1:4a:db:0c:74:84:0c:ce:23:e3:02:ea:fd:5d:65:
         7e:fd:c6:2b:a4:9e:7f:e9:11:31:ca:79:e8:19:58:95:4b:2c:
         83:96:f7:0d:88:99:a5:be:12:1a:f6:29:78:ca:43:ef:db:2f:
         8f:ea:0a:ee:cf:95:12:b8:6d:88:b6:2c:71:b5:1d:00:9f:ea:
         29:5e:d2:2e:94:e0:45:3b:ac:e9:3c:3c:ba:97:1c:e2:dc:15:
         12:22:99:49:4f:ef:e8:7f:aa:33:7f:b1:7b:4d:61:db:ff:0d:
         8a:0e:bd:0d:ad:13:35:4b:d1:ef:82:a4:4e:9d:f2:dd:88:22:
         e6:d0:57:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:00:39 2025 by rpki-client