Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/09c19d50-c067-3e65-81fb-cf90c34ff493.roa
File:                     09c19d50-c067-3e65-81fb-cf90c34ff493.roa (raw, json)
Hash identifier:          z0WKKYuY+/oaInzqAP1qRH4OZUqxPdQagurHMxaE9Ew=
Subject key identifier:   DB:BE:81:D4:B0:AF:48:F5:F1:43:C8:A9:A3:5E:4E:77:36:EE:7D:E0
Certificate issuer:       /CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
Certificate serial:       010D0C9F4328584A29556D096CFD96CA55A46220
Authority key identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/09c19d50-c067-3e65-81fb-cf90c34ff493.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     21693
IP address blocks:        151.215.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:6d:09:6c:fd:96:ca:55:a4:62:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=fdc0f52f-11c5-40b5-b40b-976194eb5372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:98:eb:45:46:aa:11:f8:1c:9c:03:ee:0a:
                    0d:1a:b9:7c:2b:9c:8a:22:aa:e9:ae:82:80:20:35:
                    04:d7:34:7f:0c:1b:4b:9b:ab:12:85:66:be:c1:2a:
                    12:b8:e9:60:67:2e:74:ac:8c:ac:99:15:86:2d:3f:
                    f2:69:c5:31:4d:24:5c:97:7f:60:bf:da:ef:b9:08:
                    ea:81:44:c1:1f:1c:42:dc:d5:a4:d2:8a:60:ac:a2:
                    e8:79:7b:ab:2f:f5:22:76:32:29:d7:6f:ee:92:e9:
                    f5:40:fd:e0:b3:fb:1d:32:64:e2:25:4f:d8:d2:f8:
                    e8:4d:cf:74:de:71:0c:62:26:10:ae:b8:10:9a:b7:
                    09:22:03:ca:63:d7:01:62:59:4f:f4:16:60:f2:c6:
                    a0:8f:71:13:ba:bf:58:b6:32:fa:17:26:a5:9e:11:
                    41:1f:e4:65:6e:41:15:95:d1:ed:4a:42:1c:a7:bb:
                    8c:d0:74:d3:cc:5a:04:db:79:70:f2:24:ba:0d:0f:
                    7a:5e:d1:82:b9:27:bc:a3:79:90:c4:90:84:22:19:
                    00:c3:5d:1a:40:cb:18:07:38:2e:cb:1f:03:bf:20:
                    f2:bb:10:2c:8b:b4:58:99:6c:2f:e8:59:1a:fe:98:
                    a0:3e:da:ed:0c:8f:23:e6:5a:40:e7:fe:20:6e:ff:
                    84:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BE:81:D4:B0:AF:48:F5:F1:43:C8:A9:A3:5E:4E:77:36:EE:7D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/09c19d50-c067-3e65-81fb-cf90c34ff493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl

            X509v3 Authority Key Identifier:
                keyid:9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.215.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:77:85:a7:29:15:c7:9b:34:56:74:27:39:f1:c0:c2:6b:4c:
         72:30:76:9b:fb:0a:67:e8:00:e7:87:c6:6e:4b:7b:56:bd:46:
         ca:f4:99:b0:c0:41:e1:e1:ca:b5:91:f2:12:79:fe:39:a2:b7:
         36:85:39:2a:11:77:b1:4f:fa:f0:a9:d8:90:b6:6c:38:7f:a7:
         95:cc:44:e9:5f:8b:d5:59:c2:34:1c:c8:b9:2a:f8:99:a1:d7:
         33:59:23:81:09:30:40:c1:00:00:a3:5e:54:ba:a0:cb:f7:34:
         28:c1:71:a9:53:77:5f:a9:38:0e:57:25:98:c2:de:d3:bf:57:
         1a:cc:5d:b4:c5:aa:ef:ff:73:25:af:ad:ce:26:97:6f:fa:76:
         7e:a5:d6:4d:6d:c3:c7:29:d1:6f:03:1d:5e:0b:1a:6b:e5:8b:
         02:de:80:5b:4a:3f:f2:38:1d:1b:0c:13:d4:1c:c9:e5:e1:3a:
         60:5a:0d:4a:8a:ec:4e:2c:73:34:4b:6d:bb:7a:9a:1a:cc:dc:
         8d:bd:71:55:fe:cb:16:78:0b:a6:3a:d0:f7:33:f8:1d:b1:15:
         ac:53:bf:01:9e:71:52:ee:17:8f:48:a8:94:5e:a3:e4:1b:21:
         3f:65:2a:b8:26:c2:71:cd:c6:5b:0e:fb:64:a9:76:ae:d5:59:
         e3:c4:1d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:29:48 2025 by rpki-client