Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/35b36db1-db1f-376c-ae0e-79fafd55c056.roa
File:                     35b36db1-db1f-376c-ae0e-79fafd55c056.roa (raw, json)
Hash identifier:          aObl8xlo4huXVyAH3jEnG5Kdwx+htxRkv+l4gKKKJFI=
Subject key identifier:   80:DF:8B:53:FF:3D:E9:B8:C5:1B:B1:A6:F3:B1:F8:0C:73:CB:E9:08
Certificate issuer:       /CN=a2fa2878-715e-4793-af2a-432583ea0699
Certificate serial:       010D0C9F43285849CE9A56FFF13E02BC9F519D80
Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/35b36db1-db1f-376c-ae0e-79fafd55c056.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        134.195.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:56:ff:f1:3e:02:bc:9f:51:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=055f3e97-b1b2-4664-9e69-cb2dcd4e31d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2e:31:43:00:5a:35:d9:a5:36:9d:9d:35:03:
                    73:56:ea:95:c9:bb:06:66:a9:e9:32:9e:c0:00:d3:
                    7c:ee:93:a8:44:29:11:d3:7c:50:9b:da:44:0b:5e:
                    cb:ac:7e:bf:85:cd:dd:bc:09:34:f7:73:fd:30:b7:
                    b1:9f:89:0f:86:ee:09:b9:24:3b:b5:19:59:e1:fc:
                    07:be:d1:5f:ce:f8:55:cb:00:f1:58:6f:5b:0a:34:
                    ac:f1:af:d9:c5:48:9e:d7:82:9d:ec:2a:b0:a4:fb:
                    81:dc:7a:ca:93:0f:3f:36:09:6f:30:56:77:6e:73:
                    82:10:de:f2:41:e1:b5:84:1b:4b:d4:7a:ad:05:2d:
                    ef:7d:02:45:16:a0:b9:53:85:50:23:80:c9:9d:67:
                    cf:cb:a0:13:7f:0a:4e:9b:72:e5:d6:e8:f1:b3:c3:
                    83:01:e7:a6:e5:07:81:b8:dc:d6:13:cd:dd:b2:3a:
                    d8:16:4b:d9:ad:c8:19:d9:2f:23:0a:2d:99:3e:ca:
                    fc:7b:a0:39:26:11:91:1d:2c:7c:c9:fc:26:e8:92:
                    39:fd:b5:75:94:dc:60:99:5a:bc:21:b7:b3:d6:28:
                    3d:64:a3:fa:83:63:f7:93:11:4c:94:ff:02:6e:3d:
                    c7:00:8b:bd:6c:f7:18:6c:32:96:10:5a:17:a1:d7:
                    da:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DF:8B:53:FF:3D:E9:B8:C5:1B:B1:A6:F3:B1:F8:0C:73:CB:E9:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/35b36db1-db1f-376c-ae0e-79fafd55c056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl

            X509v3 Authority Key Identifier:
                keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d3:12:0a:77:28:9e:0b:3c:79:e5:08:4b:2d:97:6d:c8:0a:
         a5:11:61:f6:06:7d:da:a4:e9:0b:e8:f3:ba:c7:d5:dc:7f:69:
         52:68:d7:2c:34:53:92:d6:66:85:12:7f:51:93:e2:38:d1:9a:
         c6:6b:27:c4:79:15:e2:30:b7:c5:a2:7e:83:07:1c:b9:98:d6:
         d3:45:f1:45:79:11:2a:67:77:f1:a0:d4:37:d6:61:c9:53:18:
         a8:0b:ac:a3:2e:4f:6f:64:25:7c:4b:f9:a8:67:ea:d7:1b:14:
         80:1d:f8:8a:97:92:09:db:d7:96:3f:ad:b5:4b:03:45:ee:4c:
         71:06:70:2e:1a:5e:e7:3c:06:76:50:90:8f:ea:aa:72:35:b5:
         57:0e:cf:4e:a4:31:ea:a2:ef:af:b2:20:cc:59:bb:d7:9d:75:
         4e:54:0c:11:a2:3b:1e:0e:97:f6:50:8b:6a:ed:49:26:d6:b0:
         3a:ca:8f:b9:90:9e:40:a6:b0:d0:fd:2f:c0:5b:c4:9a:f8:8c:
         02:f5:41:a6:0b:fd:f2:ed:28:1f:fd:1d:38:b3:c4:45:23:b3:
         15:b9:bc:18:57:70:56:0e:2d:f0:59:06:ca:64:70:4f:fa:b5:
         23:c8:35:12:d4:22:fe:18:cf:90:5f:98:1c:5b:f6:6a:c6:df:
         6a:42:cf:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:10:27 2025 by rpki-client