Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/13195ded-ae5c-3a67-b230-d2c9ab3feb7c.roa
File:                     13195ded-ae5c-3a67-b230-d2c9ab3feb7c.roa (raw, json)
Hash identifier:          qMvH4wYviglowC9g5HDkjXiKPdDonF3NiG5u4Fxm1R0=
Subject key identifier:   AC:73:80:6D:2D:A8:44:B1:39:43:59:F2:04:23:53:17:88:3E:43:BB
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F43285849F2E54B1E2B8812E3AD698560
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/13195ded-ae5c-3a67-b230-d2c9ab3feb7c.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     33182
IP address blocks:        138.128.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:4b:1e:2b:88:12:e3:ad:69:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=50e44817-bef4-4937-89d7-a18782b45d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:93:62:7e:88:75:ae:8e:26:a5:24:15:bf:c3:
                    b4:aa:1f:6c:24:4f:ee:53:a3:22:52:22:91:1d:aa:
                    ab:1c:4c:1b:b3:a6:aa:41:9d:a2:ef:df:35:98:fc:
                    5e:10:d2:6b:f8:ae:cc:ec:d2:5f:30:25:73:69:0b:
                    2c:e7:63:5f:cb:8a:70:c7:8b:41:53:24:8a:15:1e:
                    ce:2f:7b:a8:68:49:f2:0a:65:e5:c6:c6:9d:fd:aa:
                    d3:1e:8e:51:19:18:86:87:2b:21:89:a9:86:5a:82:
                    17:99:1d:cc:a1:3b:78:5b:e8:6d:9f:c5:87:61:bb:
                    08:11:f5:f5:5c:6a:e3:a4:d1:d2:ed:ef:8f:c4:3e:
                    e8:9c:3d:ba:27:de:fc:07:b8:18:47:a1:94:74:34:
                    f1:0c:e6:c8:88:04:9a:de:90:24:d3:c7:95:08:40:
                    72:1f:bf:20:74:36:15:87:8d:da:15:d6:d3:f6:38:
                    fd:99:a6:0a:0a:c8:ef:48:6e:f0:51:53:f1:42:0b:
                    e9:c6:ce:38:8c:71:c6:ba:83:8f:b2:5f:f1:e4:ea:
                    7f:53:bd:81:f5:a0:83:a8:b5:19:5d:e7:3a:f6:24:
                    65:de:4f:6b:b4:67:2b:f2:7d:be:77:56:2b:58:45:
                    62:e8:7f:fb:8e:c0:5c:d2:a3:55:8e:05:f8:45:66:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:73:80:6D:2D:A8:44:B1:39:43:59:F2:04:23:53:17:88:3E:43:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/13195ded-ae5c-3a67-b230-d2c9ab3feb7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.128.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:52:02:cc:36:88:ba:a3:7e:1c:c0:e7:c1:b2:26:d4:f7:53:
         d1:f6:9f:93:23:a1:b0:df:fb:7c:0a:60:76:92:d6:da:51:7e:
         52:b4:a2:ce:1d:40:8a:0f:c3:88:4b:79:61:b9:a6:91:16:42:
         ef:66:74:e8:2a:5e:9f:6b:83:cd:c1:03:c1:37:31:77:22:34:
         23:54:48:6e:7a:a0:b3:b5:0a:83:1c:3c:16:5f:fe:ce:c1:34:
         2c:60:24:21:21:c7:23:c1:51:8c:a7:2e:0e:cc:11:82:52:46:
         3c:39:44:b3:86:09:42:13:dd:81:f4:aa:0d:c2:28:3b:34:db:
         67:de:84:94:cf:4c:39:56:b9:59:ed:85:ab:8d:cb:09:bc:c9:
         f1:af:67:67:b8:bd:36:f7:89:1c:44:d3:99:e0:2d:ce:0d:31:
         57:52:b7:d9:8f:43:d6:44:0a:23:bd:3f:8b:94:aa:58:03:1e:
         b5:4d:89:75:c6:3a:c3:dc:29:c1:b3:46:4a:2e:1e:1a:e9:1a:
         0a:bd:f7:23:be:e9:05:0d:09:f7:36:36:e3:8e:4d:34:19:c9:
         30:5b:66:6c:ee:60:fe:76:02:48:20:54:d9:ad:69:cc:20:71:
         e7:03:7f:4c:ed:b6:1c:3f:5b:4f:59:b6:ac:5b:8a:11:3b:d1:
         1f:65:ac:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:40:42 2025 by rpki-client