Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/5ab37db1-879b-3ee0-a569-c01b0b40a8e3.roa
File:                     5ab37db1-879b-3ee0-a569-c01b0b40a8e3.roa (raw, json)
Hash identifier:          tUjrPnU+XZKsU8niOTxPu4nsYgTdl0ar+BDBZ2vuM5o=
Subject key identifier:   D4:19:90:C1:0B:DD:40:AE:6A:FE:E0:DF:5C:2F:51:86:FD:72:5B:4F
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584AADF0F466C86ABEFFC9550D80
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/5ab37db1-879b-3ee0-a569-c01b0b40a8e3.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     62610
IP address blocks:        205.251.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:f4:66:c8:6a:be:ff:c9:55:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=28ca9989-6c5d-4486-b377-f6ac45cc9efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b5:a8:97:dc:79:1c:b7:4d:24:b6:5d:c4:1a:
                    dc:e4:63:5e:7d:ff:e7:8c:24:67:c9:86:d8:31:a5:
                    ca:f2:c5:3c:14:0f:39:b6:77:b2:03:3f:2b:74:56:
                    cc:dc:68:11:f5:3c:22:fe:67:52:6f:20:00:b7:43:
                    6d:be:c3:63:fa:6b:5e:f1:f3:9c:0c:0e:20:01:6a:
                    84:f0:8a:00:8d:ca:b4:0d:8e:5d:0d:09:76:5c:48:
                    47:80:dd:8e:b9:69:25:c2:e0:4e:6c:d1:67:71:58:
                    af:4a:3c:8a:cd:73:6d:9c:3d:a1:b7:68:50:d3:14:
                    92:50:4b:37:52:d6:6e:33:80:71:3f:f3:0b:04:3d:
                    cb:91:72:3e:90:61:60:d9:e2:11:be:e3:06:d4:bf:
                    81:fb:f6:96:15:bb:17:e5:b4:a7:89:de:36:db:c1:
                    f2:ff:15:4e:ed:d2:cf:8b:79:d7:59:c7:32:21:15:
                    03:ae:b0:a0:c3:cd:66:bb:e1:1d:0a:ec:a0:85:36:
                    73:c9:55:bb:40:e9:aa:af:c5:82:c1:6c:1b:5a:30:
                    09:37:7b:8a:19:ca:eb:3d:ac:6e:fd:6f:9c:b0:90:
                    ed:a8:60:49:7d:45:f6:92:32:95:35:fc:b6:ff:1d:
                    eb:23:93:18:76:52:1e:8b:e0:ea:e8:cd:11:c3:a9:
                    0d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:19:90:C1:0B:DD:40:AE:6A:FE:E0:DF:5C:2F:51:86:FD:72:5B:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/5ab37db1-879b-3ee0-a569-c01b0b40a8e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:4f:3e:6a:58:74:ae:8e:f1:70:1d:41:5b:91:df:cc:c9:a3:
         a8:3b:12:fd:a5:3e:a0:02:5f:ed:c4:86:2c:d5:de:6f:9a:da:
         63:4f:71:fc:6c:28:89:a0:40:bc:d0:b1:65:54:de:d8:18:1b:
         1b:a8:00:cd:c2:f1:6e:ce:47:47:3c:4a:f5:10:8b:e9:74:44:
         e0:fa:46:78:9a:c4:55:45:0a:f5:53:2e:89:d5:28:3e:f7:cb:
         53:87:33:56:90:3c:ae:64:14:d7:4d:30:bd:09:fb:e4:8f:fd:
         e5:e2:b7:13:27:f8:35:9c:92:2e:31:c8:74:6f:22:f8:ef:7b:
         16:42:2f:7b:4f:4f:f4:0e:4c:45:e6:08:5f:6e:76:c1:2a:70:
         e3:c8:d7:b3:fc:64:b6:80:30:dc:50:3e:09:1a:eb:91:c2:98:
         9e:5d:74:67:1e:76:41:16:68:85:ed:d3:b5:61:33:93:71:b9:
         2e:e5:82:03:df:e9:aa:3c:54:8d:a9:e2:76:fa:20:70:96:05:
         16:aa:eb:56:9e:56:85:21:a1:1c:9f:fb:85:20:25:a7:de:7c:
         d3:7b:f4:17:64:24:f5:da:d7:fd:03:86:0b:a9:83:24:50:c8:
         01:b5:a2:ad:65:1e:4f:de:a1:d9:60:08:7c:08:3f:dd:20:09:
         00:6f:c8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:57:06 2025 by rpki-client