Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/a3d697fb-881c-3ed6-a31a-85b5e6882a6c.roa
File:                     a3d697fb-881c-3ed6-a31a-85b5e6882a6c.roa (raw, json)
Hash identifier:          TyO6g1lHO8X210F5j6yBYt3/pIejQUE6AnweP3E2B0c=
Subject key identifier:   91:8F:D2:53:F2:86:42:24:46:B6:07:67:73:F5:32:24:CB:6F:C7:4A
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584A331AFDC05F774B20E50EF380
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/a3d697fb-881c-3ed6-a31a-85b5e6882a6c.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     6250
IP address blocks:        137.118.70.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:fd:c0:5f:77:4b:20:e5:0e:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=54fc50df-43cd-4376-b3ff-ad2865a90d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:52:72:02:25:a5:38:30:ab:97:90:38:34:a0:
                    b2:88:47:2d:10:05:9a:4d:d2:4e:dd:5e:b1:0a:c7:
                    e9:32:29:67:ef:9a:2e:99:ef:0c:82:28:4c:5f:d4:
                    2e:8e:ce:6b:d9:8f:c7:a8:f1:a5:72:cb:31:f2:de:
                    1e:bd:1b:44:cb:fd:0c:87:ec:b9:d8:fe:6e:c9:5b:
                    1d:7d:cd:21:30:24:5a:26:33:ee:8c:2f:14:81:fc:
                    01:69:a9:45:c8:36:2b:a1:74:81:cb:77:ed:16:a4:
                    de:ad:4d:66:8f:45:b5:3f:41:57:7c:2f:af:8b:a8:
                    b8:3f:10:70:cf:b9:6c:0a:d0:4d:22:95:ae:30:2b:
                    c1:eb:f9:ca:38:24:65:89:af:30:c0:9e:ba:c9:95:
                    de:79:d2:2b:b0:f9:06:64:f3:76:78:61:9b:e6:9b:
                    76:64:8d:1e:97:bc:cb:ac:93:1f:9a:cb:ef:2d:64:
                    6a:ae:51:ca:8f:1d:94:aa:07:f6:4b:d2:67:2b:3c:
                    ef:11:aa:27:1d:dc:44:1d:52:22:4a:19:d8:2a:e5:
                    bd:ae:21:d0:e9:e5:6a:e3:c9:ba:df:2c:ad:e0:52:
                    99:a3:88:98:d0:35:ef:8b:8e:fd:b3:b9:e7:a6:5c:
                    3d:30:b1:17:6c:b4:99:22:d1:95:43:45:0a:20:f4:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8F:D2:53:F2:86:42:24:46:B6:07:67:73:F5:32:24:CB:6F:C7:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/a3d697fb-881c-3ed6-a31a-85b5e6882a6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:64:d5:88:a8:32:5a:3c:23:f4:a6:4a:ed:52:ae:30:fb:d3:
         75:99:a3:7a:d6:d5:e8:40:59:8b:0a:18:2c:37:b8:6f:6e:ab:
         31:00:d1:89:c2:98:f7:1c:66:a1:9f:2f:c7:53:2e:3a:a5:de:
         f9:4d:8c:30:f7:18:99:bf:0f:fb:f6:3f:53:b9:3e:e7:fd:10:
         b7:e5:8a:dc:6d:27:dd:29:b5:ca:d2:09:9b:de:d5:f0:b0:15:
         8c:97:4d:93:ef:64:99:90:3f:44:a8:a4:fc:7a:e5:5e:b4:00:
         11:53:d1:d7:43:6d:87:be:5f:0d:ba:95:99:50:a4:8f:36:a6:
         38:dc:2c:6b:45:3e:05:fb:e2:33:d9:d8:cd:0a:ee:90:29:d3:
         4f:44:7a:c0:41:8a:97:5c:a0:21:ad:82:17:ef:8f:ab:2b:2a:
         75:cc:4e:0d:b6:b2:de:dd:65:39:45:3c:e7:3a:33:12:80:17:
         66:2f:c0:ef:c9:e3:58:e2:4a:82:b1:a2:2b:36:1c:f1:30:13:
         ba:da:7a:e8:83:21:b1:d1:ab:fc:fd:70:45:e2:f0:88:0c:77:
         05:73:9f:05:ef:82:f3:7c:79:1a:aa:4f:36:35:05:77:5a:51:
         eb:b8:2d:f5:dd:5d:d1:65:64:99:a5:d9:15:f1:46:c1:1d:52:
         a3:ec:9e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:37:14 2025 by rpki-client