Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ae2e07e2-0345-34df-ae2e-cc5cbd28d387.roa
File:                     ae2e07e2-0345-34df-ae2e-cc5cbd28d387.roa (raw, json)
Hash identifier:          gvlwF7ZHFpr5WvCvHj/RMc9SVr1xpmqnFkWSigJIlhU=
Subject key identifier:   53:D3:8E:30:C6:E7:22:52:45:1D:20:5E:3D:D4:7B:D1:98:86:5C:36
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584AA160DFC4517CA9EB0456EED0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ae2e07e2-0345-34df-ae2e-cc5cbd28d387.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     271
IP address blocks:        128.189.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:df:c4:51:7c:a9:eb:04:56:ee:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=549a3516-7f51-4e11-812c-86945bdddad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0c:39:4e:64:e2:73:ad:27:90:f7:24:da:2e:
                    5f:12:99:ad:9f:8f:a6:01:2b:8e:80:95:ab:b7:0e:
                    f7:38:84:dd:f3:aa:ef:d8:f8:68:5e:b5:33:6e:7b:
                    e5:39:e1:83:88:50:10:b4:01:e7:f1:d3:e8:52:3a:
                    79:d0:f7:e7:40:b8:07:0d:df:ea:8e:c9:58:23:8a:
                    82:66:0a:37:4b:b5:0d:55:9e:76:b0:64:63:ea:2c:
                    b9:d8:81:0b:60:55:13:14:0d:e3:60:f6:52:70:92:
                    04:5d:ed:79:01:f0:47:f7:44:de:f3:fc:59:06:07:
                    3f:bb:f7:0e:9e:3b:ed:fe:74:78:ff:11:02:b8:f5:
                    e7:33:15:64:40:ca:66:14:6c:2d:21:b4:3f:0c:bd:
                    50:6d:30:7e:59:72:16:81:a0:74:95:28:ee:59:1e:
                    18:a7:b8:b0:f6:57:f4:78:1b:4a:51:68:81:d4:b1:
                    be:a6:6f:26:fe:5a:3c:d6:fe:22:54:cf:57:45:9a:
                    ec:87:89:7b:9d:7f:9f:8d:1c:20:87:3f:e0:d9:fc:
                    8c:53:d1:8e:79:5a:1d:c5:ce:87:b0:73:c3:ce:ef:
                    c7:b4:3d:40:f0:0d:5e:35:cf:7f:5e:41:ae:d2:03:
                    30:20:64:99:11:e1:95:0e:ec:ec:39:d6:e4:90:c4:
                    bc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D3:8E:30:C6:E7:22:52:45:1D:20:5E:3D:D4:7B:D1:98:86:5C:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ae2e07e2-0345-34df-ae2e-cc5cbd28d387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.189.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:5b:03:5f:41:e3:e2:c7:08:62:00:29:ec:60:df:ee:65:ed:
         03:30:94:f1:a9:c6:84:ba:6c:55:ba:a0:ee:27:a5:ab:02:f9:
         e4:a4:c2:1e:34:c7:7e:e4:fa:f4:0b:09:21:fc:17:4e:a8:7a:
         f7:08:7a:49:85:07:90:09:6b:36:c9:ea:d4:cb:a4:40:c7:bc:
         c1:86:52:f2:52:7c:86:71:c4:1a:8d:f3:b8:50:e5:63:1e:2f:
         4f:bc:79:d4:f3:5b:2d:bb:87:36:09:25:6f:58:e4:01:74:dc:
         8e:bc:3f:6c:16:bf:f6:c7:78:66:ab:77:17:fb:15:a4:af:09:
         b1:71:79:d7:f5:4c:eb:d0:60:36:9d:7f:29:f4:e5:ce:28:6c:
         5f:93:3c:7e:a9:84:cd:c1:57:a9:11:a1:ac:b2:1c:a4:a2:a4:
         3f:95:5c:8e:cd:d6:91:3c:84:89:db:90:41:2f:35:27:57:d7:
         03:bc:dd:f2:3d:7b:b6:0c:77:c7:fd:0a:ac:a0:75:86:f3:a4:
         a2:f7:b2:0a:a4:26:83:f5:33:06:72:27:ff:94:aa:e1:13:e5:
         5c:8e:6c:d4:4c:21:cf:af:e3:f2:6c:07:8a:d0:a9:5f:a0:f8:
         b8:f2:2c:4a:ef:c2:06:f8:b9:c9:66:1f:99:fd:56:33:1e:57:
         f8:d2:b2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:05:55 2025 by rpki-client