Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cda15afa-5135-388b-9154-ecfc9f4b72ac.roa
File:                     cda15afa-5135-388b-9154-ecfc9f4b72ac.roa (raw, json)
Hash identifier:          i/xDDUDXPcVw23tLlx0L9PTgarZ793CWWVbePdwH0uY=
Subject key identifier:   6F:11:B8:93:68:B7:5F:6B:84:1D:E4:5F:76:D9:C5:13:0C:9D:03:BB
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F4328584A107866472B30513BA6FAD900
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cda15afa-5135-388b-9154-ecfc9f4b72ac.roa
Signing time:             Tue 03 Jun 2025 03:16:17 +0000
ROA not before:           Tue 03 Jun 2025 03:16:17 +0000
ROA not after:            Mon 01 Sep 2025 03:16:17 +0000
asID:                     834
IP address blocks:        165.140.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:78:66:47:2b:30:51:3b:a6:fa:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: Jun  3 03:16:17 2025 GMT
            Not After : Sep  1 03:16:17 2025 GMT
        Subject: CN=b3ecf233-b551-4b1b-9fb0-c1a0c6d4669d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:97:2c:94:bd:af:93:fc:19:6f:01:56:b0:3f:
                    61:53:9e:01:d7:3d:d3:2b:39:5c:d0:af:42:a6:49:
                    62:41:c4:01:b7:71:c3:b3:0f:b9:35:ed:3a:6a:98:
                    94:2c:0f:04:d9:6d:14:e6:09:4c:2e:b4:47:7c:9f:
                    e2:12:4c:0a:14:e1:57:50:14:1e:e4:56:ab:77:58:
                    64:cd:f6:f1:d1:8d:e4:8f:7f:8f:2e:4e:74:f6:71:
                    93:be:a4:9e:18:3c:a2:17:6e:42:cb:66:8c:ef:2d:
                    2e:18:ee:48:2b:82:37:95:b0:9a:00:24:12:a0:5d:
                    70:b6:7c:af:1e:b6:b5:b2:50:5e:05:04:9d:01:eb:
                    ce:dd:99:88:c6:45:45:a6:25:1c:9b:12:7d:d4:50:
                    5f:2c:e5:cf:76:9e:2d:6d:ce:f6:c6:a3:02:0d:d6:
                    a7:4f:77:76:41:01:6a:d3:d2:19:8a:8d:90:c6:84:
                    54:f2:47:57:9d:c2:7e:4e:0c:c0:48:fd:18:18:14:
                    2f:3e:f5:3f:08:29:26:d9:cc:62:c1:83:e0:39:21:
                    b9:17:21:09:af:9c:a7:9e:22:eb:be:74:bc:28:5c:
                    da:f6:f7:62:70:4d:eb:38:16:ba:04:57:42:9e:72:
                    25:6b:3a:0b:b8:a7:23:45:df:b5:ab:e0:19:94:59:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:11:B8:93:68:B7:5F:6B:84:1D:E4:5F:76:D9:C5:13:0C:9D:03:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cda15afa-5135-388b-9154-ecfc9f4b72ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:0a:2b:c0:34:50:80:e7:a9:b3:ce:e2:06:18:e7:9a:42:40:
         2f:71:6e:0f:c2:c9:95:e1:2f:f2:cd:44:ed:41:f7:c6:11:3a:
         53:ed:f7:29:7c:f0:38:36:13:21:69:82:13:05:46:1a:9a:04:
         db:dd:d0:a5:e0:b5:e0:03:89:1d:0e:f2:c7:58:16:3f:33:cf:
         ee:4d:b3:4c:b8:e9:4a:52:90:34:63:bf:5b:9d:ef:d4:7a:ec:
         db:4c:75:ba:73:20:fd:a9:a6:e6:ff:dc:6c:59:7f:9e:f7:de:
         5c:2b:ca:ba:5f:b0:c8:43:93:4f:a7:82:d5:63:d0:78:08:15:
         90:2b:56:5a:2f:82:1f:98:fa:dd:37:1d:78:9b:18:64:16:36:
         79:c5:87:1c:db:d6:4e:2c:6a:5c:17:7c:68:a7:42:f0:b4:6d:
         67:5c:b4:9b:f0:e6:c0:b8:bf:7c:43:93:e5:e5:ee:38:4f:ec:
         16:99:02:86:67:0d:3f:63:c1:ff:52:37:3b:91:94:91:bc:f9:
         10:3e:0b:b6:dd:17:29:09:ee:c3:87:59:a3:10:bc:7c:44:ca:
         dc:b8:cc:62:1c:e8:61:cc:05:17:9a:04:09:29:88:a4:6c:20:
         78:e8:7e:60:e5:69:b2:f0:36:4d:56:90:12:62:40:71:2c:6f:
         ce:23:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:03:41 2025 by rpki-client