Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/150163dc-8b27-3e02-913c-e2a4c34fdb91.roa
File:                     150163dc-8b27-3e02-913c-e2a4c34fdb91.roa (raw, json)
Hash identifier:          zaMsMYteiCSLGw+xNnof6PqwkTrR0+Qgdk8f6SgAFTs=
Subject key identifier:   6A:14:55:C2:30:C6:EA:45:9E:CF:AD:EC:99:78:6D:F7:89:BC:C1:93
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F4328584A331AF106595FB9B23DA02580
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/150163dc-8b27-3e02-913c-e2a4c34fdb91.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     9312
IP address blocks:        93.179.124.0/22 maxlen: 24
                          94.103.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f1:06:59:5f:b9:b2:3d:a0:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=ba82c121-7999-43a3-a6e4-72e87ec16611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:16:06:10:aa:a2:8b:ee:bf:00:2e:c4:2d:8c:
                    7f:ef:83:28:e9:f8:e4:3f:3e:0c:a9:63:dc:02:38:
                    c5:f1:f8:9d:de:a4:8e:89:82:f7:92:8a:1a:d4:05:
                    a8:bc:57:cd:2b:8c:73:94:c3:10:f5:e1:7f:b1:05:
                    46:ad:39:b0:94:94:21:c9:1e:b9:b3:49:6a:04:29:
                    94:89:9e:60:24:b2:e8:4d:30:92:61:12:03:07:95:
                    87:0a:3b:9b:d6:14:77:25:06:d0:27:11:13:21:73:
                    69:85:23:18:d0:b8:01:8b:7e:8b:71:4f:68:cf:50:
                    6f:34:5c:30:22:0c:dc:7f:5a:c8:91:84:6b:69:8b:
                    df:e7:d6:52:2c:94:78:dd:ba:24:1b:71:d4:82:ad:
                    c0:21:89:bc:24:08:aa:02:e4:6a:b3:6d:a9:91:cc:
                    ff:db:41:e4:4c:b7:7f:2e:57:84:75:7b:9d:8f:a8:
                    44:20:99:c6:94:ed:09:51:1e:5d:80:e3:88:9e:a0:
                    37:f7:8b:df:6b:d3:7c:fb:96:8c:31:7d:0d:d1:0e:
                    b4:0d:bd:7f:a7:01:83:70:23:77:19:9c:f2:51:64:
                    dd:d6:1f:d7:47:48:a5:1b:25:7f:e7:8d:b5:5e:22:
                    49:db:1b:40:cd:11:fc:7d:01:7d:30:95:bd:e5:f8:
                    27:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:14:55:C2:30:C6:EA:45:9E:CF:AD:EC:99:78:6D:F7:89:BC:C1:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/150163dc-8b27-3e02-913c-e2a4c34fdb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.124.0/22
                  94.103.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:1d:ac:95:b8:8c:b0:db:11:75:a3:59:e3:0a:b9:5d:3b:
         7a:ba:44:c8:46:8e:54:7c:8e:72:a1:c4:b3:e2:94:74:bb:87:
         b3:d7:35:d7:f9:bb:e5:aa:2e:79:6a:01:bd:eb:3c:43:8c:9a:
         07:7d:fa:d3:62:46:b7:ca:52:cf:d5:c5:99:e1:6c:08:40:a5:
         d0:e2:3c:a0:fa:52:a1:73:c6:8e:6f:3a:52:a3:09:d1:fc:cb:
         a5:4c:07:76:14:82:5a:ab:a3:6b:31:19:e8:af:03:37:79:14:
         5b:2c:64:ff:02:37:d5:ba:91:59:dc:9e:bf:fc:20:f7:ae:b7:
         fd:1e:ce:95:19:a6:c1:fd:56:db:0e:d2:c1:9f:46:ae:29:a5:
         dd:88:63:dc:a3:64:ae:73:7a:30:52:ba:1c:ee:df:ea:ca:c0:
         f5:cd:7f:d3:f6:27:32:6b:87:9e:b6:dd:13:d8:f2:b9:11:13:
         f5:b9:43:b9:de:b8:25:bb:99:1b:c4:f3:7f:f6:7b:68:fb:7f:
         26:12:1e:2b:a6:6c:92:0a:b2:72:08:0b:1a:8c:3a:7d:30:df:
         b0:98:11:c1:dc:02:e7:0b:6f:99:6a:8c:9b:a8:5b:7f:ee:02:
         d6:87:be:66:d8:36:cc:eb:37:8f:15:e8:33:4c:08:1d:6c:ae:
         6a:8f:71:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:09:56 2025 by rpki-client