Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/cbb6ecb7-7567-3eb9-9b46-66501fc109ae.roa
File:                     cbb6ecb7-7567-3eb9-9b46-66501fc109ae.roa (raw, json)
Hash identifier:          wC3rlAqR6oQsyOHiapb11zCFdj8QDLXr8aA5blxoYTw=
Subject key identifier:   61:25:95:D8:17:21:26:31:AD:2E:68:29:90:EF:2C:40:1F:BC:1F:93
Certificate issuer:       /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial:       010D0C9F4328584A03A53FFE4F092520C6726400
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/cbb6ecb7-7567-3eb9-9b46-66501fc109ae.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        193.149.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:3f:fe:4f:09:25:20:c6:72:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=5d58927d-35df-4f1d-abe9-c7556c64177b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:66:4b:37:a2:69:fc:4f:12:50:b1:fd:f5:0e:
                    05:57:31:8a:3f:10:d4:be:47:8a:6a:dd:38:99:8d:
                    9b:88:57:18:9c:0b:6b:5a:f2:b0:55:44:68:b0:97:
                    3f:cf:2f:0f:90:0a:fd:99:5f:c9:99:92:db:a0:f4:
                    e1:be:0c:29:47:4f:b9:7c:76:64:e8:34:7d:00:e2:
                    14:42:85:e4:c5:51:7e:3d:04:3c:c9:66:f6:47:d4:
                    f0:70:69:49:ca:c1:7e:53:bc:3f:84:95:af:d0:f4:
                    55:61:1f:af:df:cc:71:44:ac:23:f0:9c:d3:27:a0:
                    59:7b:34:f1:27:aa:0c:7e:95:02:0c:93:a0:df:36:
                    ab:2b:77:00:7e:9d:dd:da:5f:59:5b:6d:0e:40:9a:
                    1d:7e:4f:67:1a:5d:fb:b1:c5:3a:b9:af:c2:16:f0:
                    01:a0:e7:9b:dd:0a:62:48:67:7b:c1:6c:8c:a9:fe:
                    e8:32:b2:2d:37:cf:a1:7b:ef:65:39:36:07:75:0c:
                    bf:a7:d6:e9:67:da:ef:09:32:4f:ea:bc:ff:68:19:
                    f5:4f:70:e7:0b:73:b7:79:ad:2a:3f:a9:4b:29:d5:
                    2c:c2:64:27:dc:01:99:ea:01:ff:91:52:6a:6d:9f:
                    60:5b:17:aa:4c:d3:dc:d4:28:69:b1:3b:c4:d2:22:
                    5c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:25:95:D8:17:21:26:31:AD:2E:68:29:90:EF:2C:40:1F:BC:1F:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/cbb6ecb7-7567-3eb9-9b46-66501fc109ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl

            X509v3 Authority Key Identifier:
                keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ce:a2:ff:55:e8:7d:c6:a6:99:5c:91:a3:db:00:e2:00:8e:
         05:68:8f:80:e8:b9:55:b8:0f:b5:6d:8b:f3:f2:ac:64:f9:a5:
         cf:79:61:11:f7:c6:c5:f9:76:3c:d1:bd:63:85:e5:aa:a8:1f:
         83:bd:ef:a7:72:7f:61:88:3c:4b:f4:bd:a0:75:f5:0c:c7:b3:
         21:30:d5:af:01:a1:2c:58:83:79:8c:18:13:c0:32:bb:84:4b:
         77:98:ff:9e:98:36:a7:dd:ad:e4:68:d1:7b:c8:c3:d3:e8:51:
         3f:fb:39:38:6b:cc:db:e8:c7:5a:ee:08:8c:ac:8c:ad:10:ff:
         0d:5b:c5:33:4b:25:94:99:c1:f2:a9:24:de:4d:96:ff:bb:86:
         d4:e5:46:c6:d7:72:ee:7d:60:88:46:2b:9e:f9:82:f1:d2:f6:
         6b:18:17:1c:aa:6b:52:8e:a5:62:02:3c:1a:e6:d1:8c:70:9b:
         31:92:72:32:24:46:42:66:80:ac:44:01:2e:86:fb:83:62:ae:
         fb:25:b6:56:0f:5b:23:5c:ce:31:a8:f8:10:6e:63:93:4a:aa:
         d9:35:f3:cc:0b:0d:44:fe:19:a1:5f:13:2a:57:82:24:a7:97:
         4f:e6:38:99:e9:4a:6c:79:be:c1:bf:6a:39:32:44:8c:06:73:
         db:0b:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:23:05 2025 by rpki-client