Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/0909e0b4-b777-341e-9a49-697f016e5a74.roa
File:                     0909e0b4-b777-341e-9a49-697f016e5a74.roa (raw, json)
Hash identifier:          xaZjd3iLaXp6YkNpEQAnIpbKfOiBDXy75ltz4zPRizQ=
Subject key identifier:   F5:F7:4E:2B:7A:3F:2F:C0:C5:D9:41:93:DD:6A:CB:A5:80:F3:22:5A
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F43285849DC8FB37D9E890F93B44156C0
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/0909e0b4-b777-341e-9a49-697f016e5a74.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     36445
IP address blocks:        198.133.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b3:7d:9e:89:0f:93:b4:41:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=176b27e1-e083-44e3-a116-6dcb35dc03db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c0:2b:5b:8d:5c:0e:d1:6a:1e:8f:8b:d9:7c:
                    0a:11:a1:7a:03:79:7f:65:1e:f1:f3:6e:c8:3b:91:
                    30:30:27:dd:03:90:36:d2:4f:d8:fb:4d:1b:36:8f:
                    98:da:eb:d5:17:05:1a:9e:a6:d1:19:55:a2:92:3a:
                    2b:c2:1c:83:5f:fd:c1:07:6d:a9:d9:8d:c7:c7:6c:
                    27:02:3a:e4:3b:c2:03:76:9d:29:2a:30:e5:e0:8c:
                    5b:4b:89:98:df:22:98:78:f5:d9:07:04:10:25:eb:
                    a4:3c:d3:fe:65:af:0c:d4:9d:e4:1d:89:77:87:ce:
                    a0:4f:f0:90:d8:e8:a8:d3:23:87:51:45:4a:f0:cb:
                    14:c8:7d:eb:3c:30:63:37:9d:5a:9d:5e:52:e6:c3:
                    a4:f5:58:7e:bf:ad:7e:ec:55:46:ea:40:53:91:a7:
                    57:a4:9b:7e:b5:2d:79:fd:97:01:e4:7b:99:d2:b0:
                    66:fd:43:62:2d:89:f9:b6:c7:6e:ee:20:fe:4b:f4:
                    d7:ce:87:13:45:25:cc:1f:e0:07:3e:7a:98:04:5c:
                    7d:63:f2:71:d6:61:3c:72:16:6a:f4:f7:eb:47:ee:
                    48:a4:19:a7:a2:43:22:08:51:f6:d5:4d:8f:64:68:
                    1e:12:07:f9:11:6f:64:05:c7:ca:f1:a9:56:5c:62:
                    24:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F7:4E:2B:7A:3F:2F:C0:C5:D9:41:93:DD:6A:CB:A5:80:F3:22:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/0909e0b4-b777-341e-9a49-697f016e5a74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:64:02:a5:e7:c0:0e:25:11:0a:c0:75:12:87:c0:57:b7:53:
         f7:d7:e4:11:34:76:cc:9f:80:ae:3c:36:07:fa:d6:32:ed:23:
         95:f8:f6:21:38:33:e6:8a:5d:51:cc:84:c5:c9:48:56:93:f8:
         8d:5f:49:87:f5:03:47:20:12:8c:35:b1:ad:c2:91:33:dd:c8:
         ab:31:63:81:92:60:22:ae:39:9d:b8:05:26:a0:90:f9:c8:ea:
         34:ed:0e:af:76:93:f8:b2:b9:d6:9d:b9:0c:b5:f5:88:8c:d1:
         a2:ab:4a:01:be:43:91:6a:d5:1e:1e:8f:2a:30:56:ee:1e:6a:
         c0:b6:a3:79:fa:cc:04:ec:02:6a:39:27:88:74:41:31:e0:eb:
         bc:38:45:45:3f:f4:0d:8b:6b:0c:35:8a:35:82:d2:3a:3c:2e:
         76:e6:8a:a1:22:c2:2a:11:bb:41:d6:e4:ca:19:f5:39:b4:9f:
         c8:4d:e0:ac:c8:6f:26:9e:e4:c6:53:ac:23:a0:bf:c3:59:39:
         f6:70:d4:4d:54:5c:e0:8b:0e:7e:42:f5:1b:21:4b:e6:78:07:
         8e:66:0b:e8:ff:ce:88:cf:d8:92:a3:28:68:41:fc:24:60:83:
         39:52:94:d8:37:6c:01:74:d3:72:5e:11:c2:fb:eb:be:30:cd:
         0b:21:df:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:27:07 2025 by rpki-client