Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/b8ddf106-0a90-38c4-ae61-95439d204dfe.roa
File:                     b8ddf106-0a90-38c4-ae61-95439d204dfe.roa (raw, json)
Hash identifier:          GE6GP4Wwidr1nbTdQBRidBaR8kcVnvKD1tbdK0bf6aQ=
Subject key identifier:   BF:DA:FC:42:A9:7D:00:08:7B:57:5C:77:0A:4C:C7:92:88:66:CA:CB
Certificate issuer:       /CN=6f824b15-97fd-4ba5-b124-5a3ef78ac2ce
Certificate serial:       010D0C9F43285849F2E2780F9AA167BD44E12500
Authority key identifier: D4:06:E4:BE:A1:A3:D3:DC:BC:FA:C0:FB:05:D7:67:D6:B1:8E:2E:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/b8ddf106-0a90-38c4-ae61-95439d204dfe.roa
Signing time:             Fri 23 May 2025 12:55:45 +0000
ROA not before:           Fri 23 May 2025 12:55:45 +0000
ROA not after:            Thu 21 Aug 2025 12:55:45 +0000
asID:                     36413
IP address blocks:        144.126.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e2:78:0f:9a:a1:67:bd:44:e1:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f824b15-97fd-4ba5-b124-5a3ef78ac2ce
        Validity
            Not Before: May 23 12:55:45 2025 GMT
            Not After : Aug 21 12:55:45 2025 GMT
        Subject: CN=ecfd84f6-3078-4d22-a13b-eb92fba54648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:31:18:6d:57:82:0c:2c:a7:c8:fe:67:a0:
                    b9:ac:6b:4b:43:ee:a9:dd:af:c0:3b:46:44:e5:38:
                    60:6c:e2:5c:7b:21:77:07:52:28:0d:5e:ea:c5:f4:
                    c4:bf:8a:77:0a:2c:d9:1d:ed:3a:a0:06:cd:69:19:
                    30:2e:a3:d3:de:40:ea:70:7e:41:5f:dc:63:99:c5:
                    9c:64:83:d5:ef:de:62:d9:8f:06:76:af:43:4e:20:
                    99:8b:c5:de:82:a8:c6:13:b7:bd:b6:ca:fb:44:d4:
                    19:2b:72:de:00:1f:2c:06:70:50:9c:8d:33:22:d6:
                    d0:37:e5:41:17:f1:cc:55:77:85:6b:6c:15:be:b4:
                    55:55:c6:3a:88:d6:e9:eb:ce:29:8d:cb:25:29:3a:
                    bd:01:f2:8b:f5:75:4f:ee:af:e8:a0:49:96:ad:43:
                    52:8d:84:b7:fc:c6:63:86:24:55:82:67:b5:d0:82:
                    e7:72:0f:8f:37:db:a8:5b:44:33:9f:2c:6d:a2:ff:
                    0e:07:d6:87:f2:0d:93:52:00:10:74:24:40:67:b4:
                    44:d8:a5:12:a1:06:a5:73:98:2f:fd:de:27:5e:e5:
                    30:e2:6f:b7:73:1d:da:07:fb:c7:c5:ba:95:ef:cd:
                    65:9a:80:46:11:b1:00:84:a7:ab:1c:3f:5f:8b:25:
                    1e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DA:FC:42:A9:7D:00:08:7B:57:5C:77:0A:4C:C7:92:88:66:CA:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/b8ddf106-0a90-38c4-ae61-95439d204dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.crl

            X509v3 Authority Key Identifier:
                keyid:D4:06:E4:BE:A1:A3:D3:DC:BC:FA:C0:FB:05:D7:67:D6:B1:8E:2E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f824b15-97fd-4ba5-b124-5a3ef78ac2ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.126.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:17:ad:f7:d7:9f:ae:19:d2:0c:3e:c4:c6:94:4b:04:38:a1:
         16:23:1f:c2:2f:97:e3:3a:35:fd:7e:fe:e9:20:ef:09:6a:96:
         06:dc:a3:49:7f:bc:22:b2:35:90:57:40:62:78:d2:8c:1b:41:
         6e:5e:a1:a9:47:d1:25:00:dd:a2:38:b2:74:3e:c8:b3:ab:6d:
         84:60:7a:58:ef:6c:e3:c7:8d:67:06:9e:98:3c:ac:96:03:58:
         cd:e2:d0:70:e7:0c:1f:0f:a9:86:d7:ba:9d:fb:11:27:80:00:
         a6:43:80:0c:c2:77:3b:67:89:af:77:ec:55:c0:2b:b4:57:7e:
         80:19:6e:36:6c:d9:9c:a4:e5:1e:75:ed:67:55:29:e5:6c:6b:
         ef:46:a9:12:1a:a2:ba:96:1b:ce:5c:76:df:4a:ca:d9:24:5c:
         6a:30:41:ff:7a:f9:ce:a4:04:38:f3:e0:08:70:e4:92:a4:b0:
         7e:fd:26:79:ee:71:18:c6:5d:70:09:33:e6:4d:b3:40:f6:7d:
         00:9a:fd:25:01:1f:3c:0b:2d:d8:30:f5:10:e4:15:6c:3e:d5:
         f1:17:c8:10:17:ae:81:65:70:79:63:b2:d3:7c:1e:cd:a5:05:
         0d:f9:c4:e3:21:24:37:03:62:b3:bb:c9:09:46:17:c7:fc:21:
         15:fc:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:30:21 2025 by rpki-client