Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa
File:                     e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa (raw, json)
Hash identifier:          z3C4b3VFH9dDgaJu9N9Uxqn+xwz/BB+URK3fUR1RNnM=
Subject key identifier:   DD:3E:F3:9E:D1:43:13:A9:40:5D:17:EF:DB:F4:12:E2:1B:85:2C:5D
Certificate issuer:       /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Certificate serial:       010D0C9F43285849CE9A62F8FA24777C2B845C00
Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     8987
IP address blocks:        165.224.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:62:f8:fa:24:77:7c:2b:84:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=136c8833-e52b-44c7-936f-e0285e312628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:a6:17:7e:c7:7c:d3:b0:78:5c:a7:af:00:
                    aa:16:de:24:94:26:a0:05:a7:d8:84:44:93:f1:2c:
                    49:2b:b9:62:ae:d7:56:5f:69:17:32:0d:68:4c:70:
                    10:d1:b8:74:25:b2:87:bc:96:93:c2:ad:66:28:55:
                    76:20:df:16:c9:a7:14:ee:34:d3:51:14:a1:e7:2c:
                    a0:71:ba:07:ee:17:4b:d1:ea:e1:2e:af:7b:25:20:
                    fd:f7:99:34:7c:5b:09:fd:29:ec:1d:a2:00:8d:89:
                    97:d1:7b:01:3f:7e:01:5d:04:4b:5f:be:ae:71:ea:
                    8c:7f:35:34:5c:ea:78:12:ba:55:46:9f:03:72:4d:
                    62:fc:f7:ba:3f:1c:f5:38:95:dc:75:d0:b0:0e:63:
                    2b:ed:5b:b5:53:d9:24:9a:2a:2b:8b:ec:c0:61:6d:
                    0d:f1:4d:e9:6b:8a:2a:b2:be:05:7b:94:31:30:84:
                    62:52:34:aa:0e:46:55:10:43:a6:14:93:0d:e1:fa:
                    a2:c9:5c:e4:dc:90:bb:c2:11:17:a0:db:7a:35:49:
                    5b:bd:f1:4e:2d:0b:1d:c7:9f:31:be:dc:6a:93:b0:
                    98:01:7c:81:af:fd:a6:e9:62:62:ff:8d:9c:2c:8b:
                    1f:3a:dc:d7:0a:1f:31:96:f9:36:3d:1b:6e:1d:2d:
                    fc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3E:F3:9E:D1:43:13:A9:40:5D:17:EF:DB:F4:12:E2:1B:85:2C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl

            X509v3 Authority Key Identifier:
                keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.224.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:45:d1:7d:f1:85:c0:a8:c9:d5:c9:f2:8a:e7:0a:9c:05:d5:
         9d:98:55:7f:0e:21:4c:55:92:1c:2b:53:b1:29:58:a7:6a:d7:
         14:e1:c1:30:5e:5f:3d:bc:0c:09:a8:8e:e5:a9:a6:f9:85:f0:
         57:fa:b5:2c:95:d3:ad:40:2d:54:71:a0:cc:40:3a:d4:e4:43:
         25:73:b7:1e:04:e7:61:4d:41:06:c2:07:3f:45:a1:ca:37:ee:
         f3:e0:f7:ca:7d:a7:20:2f:1d:8d:43:9b:79:07:a0:b3:3f:05:
         8b:96:dd:1d:46:00:12:85:a7:d2:24:6a:eb:6b:1a:71:35:e6:
         d7:57:ba:25:a0:96:4e:4b:93:99:17:2c:5c:b5:f9:b8:ba:d7:
         42:bc:93:c2:2f:57:00:7c:84:1f:9d:4a:a7:f9:10:23:84:ce:
         5d:f0:49:6f:a7:f1:a3:bb:78:7a:c4:23:7c:54:f1:3c:cd:e0:
         7c:62:a1:e4:23:a7:c0:d9:0f:5f:65:55:2f:b9:6f:df:dd:30:
         e1:6d:f0:da:89:e2:14:c8:38:32:c9:27:d9:17:0f:82:4c:83:
         1d:fc:9a:50:27:af:ab:fd:a5:4c:2b:32:1b:f0:a1:6b:6a:4d:
         1d:a5:ff:bf:fd:49:43:8b:cb:fd:76:28:9b:c9:a4:4e:3a:41:
         55:68:3b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:26:32 2025 by rpki-client