Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/3e491d0a-4864-3a25-a3d6-7184f0e9affe.roa
File:                     3e491d0a-4864-3a25-a3d6-7184f0e9affe.roa (raw, json)
Hash identifier:          OCr58k9D32drULksLUEDJzOmHoyKYsD7kvVoShapbKM=
Subject key identifier:   C4:74:14:1A:2D:F4:3B:32:F7:E4:90:DD:49:88:E8:C7:82:17:A6:90
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328584A189543B83D8235AA1BE16880
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/3e491d0a-4864-3a25-a3d6-7184f0e9affe.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        164.153.128.0/24 maxlen: 32
                          164.153.129.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:43:b8:3d:82:35:aa:1b:e1:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=d10332b3-9729-49e8-9c7e-f9f97cbdd087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a9:f5:e6:c0:53:a6:be:53:22:9a:2d:15:b0:
                    bd:71:94:fd:cc:45:ac:e5:cd:d4:20:eb:8a:36:b8:
                    c4:1d:51:5c:5e:b1:ab:11:22:ef:f5:8b:c7:73:f9:
                    e7:5b:11:22:75:0c:8c:f1:c0:7f:83:bd:cd:5c:7a:
                    3b:17:32:b6:47:f9:41:f0:51:c5:2d:13:72:39:d7:
                    84:00:90:61:a5:e5:fa:b7:37:fc:23:89:1c:a1:2e:
                    af:a5:43:d0:97:59:4c:53:f5:fe:06:f7:4d:13:e3:
                    02:96:10:8f:a1:a9:e1:b8:f7:56:d2:20:6c:a0:e7:
                    84:4c:68:61:01:49:d9:90:33:8c:20:2b:b1:c1:35:
                    02:56:f9:96:37:45:ae:f0:93:1c:56:50:de:06:fb:
                    1c:2e:b1:50:b3:04:a4:73:2d:46:c3:c8:a6:62:24:
                    44:28:88:73:d2:56:76:15:7b:19:68:35:74:18:ca:
                    32:e4:82:e7:76:3e:aa:cb:6c:01:d4:25:24:d4:a6:
                    dc:b1:70:9a:2d:1f:b5:aa:88:cf:ac:89:d3:c8:e1:
                    97:15:83:78:9e:13:5b:69:a3:9c:9b:1d:1c:fc:23:
                    cd:b3:c6:7a:59:16:01:df:46:8c:f9:e0:0f:1e:f5:
                    07:49:cc:05:ad:2a:3d:f8:19:b8:18:fb:d2:20:f9:
                    3d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:74:14:1A:2D:F4:3B:32:F7:E4:90:DD:49:88:E8:C7:82:17:A6:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/3e491d0a-4864-3a25-a3d6-7184f0e9affe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d1:28:f6:0c:b5:39:e1:bc:5c:5c:85:1c:0c:69:0b:dd:f5:
         49:31:82:66:da:41:b0:03:52:e1:31:15:58:12:4f:8b:01:9d:
         47:f4:f8:ca:56:74:69:f0:35:79:5c:77:57:02:81:2a:67:6a:
         ae:f7:bf:96:ba:39:19:91:39:cc:a0:33:d5:ef:c9:ae:be:30:
         81:55:4d:fd:78:be:96:a3:80:3d:bc:b4:15:8e:8b:a2:88:b0:
         1e:ea:7d:13:29:d8:57:54:8a:e9:aa:14:47:4e:2f:ca:d1:aa:
         fa:54:4c:1f:60:a6:eb:a1:77:60:3e:23:a5:b2:22:87:b9:b4:
         b2:3e:2a:ea:bf:f9:27:a3:46:12:1c:de:a0:4b:27:50:49:34:
         80:4d:ea:45:1d:f3:46:97:86:60:b1:7f:0c:10:9d:f5:00:21:
         71:2e:38:65:c3:6c:27:63:14:cd:b6:20:ca:b8:e6:c7:87:d5:
         5d:a7:9c:b7:0b:25:96:5d:95:61:3a:f4:3a:20:35:c6:98:f3:
         d6:f0:2c:54:da:1c:65:dd:ed:04:3c:23:22:9b:e1:3a:4a:34:
         75:ef:ae:9f:d9:74:ef:01:7b:c6:30:dd:a3:36:a6:01:6c:ff:
         65:b3:48:af:e9:05:dd:a4:0b:50:57:71:95:d8:ec:b7:00:4f:
         4e:a0:9a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:08:42 2025 by rpki-client