Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa
File:                     b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa (raw, json)
Hash identifier:          8MP1lb4uAfoN79mdIlnp4kuhW7a7EjaklWXMBjhkGtg=
Subject key identifier:   5C:27:4A:FF:66:5F:A2:81:02:9F:CD:71:9D:9A:AE:39:E5:4C:46:DE
Certificate issuer:       /CN=15164b64-0a30-43c7-b7d1-dda370c303f8
Certificate serial:       010D0C9F4328584955294BD38D0861739955A27C
Authority key identifier: 60:FC:2D:3B:F2:7B:1B:67:6C:0F:C3:29:85:FE:B2:B9:05:43:B3:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     11135
IP address blocks:        199.102.136.0/21 maxlen: 24
                          2607:d9c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:4b:d3:8d:08:61:73:99:55:a2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15164b64-0a30-43c7-b7d1-dda370c303f8
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=6758e6d7-8c5b-4e8d-b551-756b9b0539ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:25:2a:d1:7b:30:75:ac:33:0a:74:90:5b:88:
                    f4:f3:1d:ed:ef:6d:f1:86:a9:61:09:ef:ae:9a:4c:
                    f4:97:e8:9e:0a:3a:45:05:d2:14:3a:2f:cc:ef:5a:
                    0c:ae:f8:77:c8:e2:95:65:75:76:26:89:9e:81:5a:
                    a5:44:c8:3c:d0:4a:84:36:0e:c6:0d:4f:d8:34:45:
                    12:de:cb:42:47:61:db:cf:e7:6e:48:80:05:a5:1c:
                    4d:ac:10:8a:4a:c6:98:6c:2b:65:9d:28:e6:35:6f:
                    19:11:e3:f2:bc:2a:6f:f9:b1:63:b7:61:24:9d:9f:
                    a4:65:30:e8:06:e5:12:dd:84:d0:a0:1f:fb:17:78:
                    50:34:12:41:dd:a8:17:00:b5:b1:40:fa:a1:68:57:
                    9c:3d:ca:e9:ac:52:5c:55:8c:04:7d:73:0b:ec:f5:
                    85:b5:5d:21:c5:53:6f:5b:33:9f:38:09:7f:a3:78:
                    86:55:61:56:27:24:2d:e7:bc:57:00:b7:00:9c:ed:
                    27:bb:fb:96:5a:34:d9:e8:7e:1a:52:21:73:da:54:
                    12:cf:45:d6:1e:d2:84:b1:bb:0a:aa:93:40:84:e4:
                    13:21:3d:d3:e3:b0:f4:71:23:9f:49:f2:c8:47:a2:
                    87:f8:a3:0f:94:14:ce:59:66:f8:dd:c3:19:de:82:
                    9b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:27:4A:FF:66:5F:A2:81:02:9F:CD:71:9D:9A:AE:39:E5:4C:46:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/b1dcaee6-3a64-3eb9-8096-09e542e0fb54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8/15164b64-0a30-43c7-b7d1-dda370c303f8.crl

            X509v3 Authority Key Identifier:
                keyid:60:FC:2D:3B:F2:7B:1B:67:6C:0F:C3:29:85:FE:B2:B9:05:43:B3:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15164b64-0a30-43c7-b7d1-dda370c303f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.102.136.0/21
                IPv6:
                  2607:d9c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:bc:08:e4:3a:3b:d5:dc:32:e1:6c:f0:f5:30:fe:62:9e:63:
         97:f6:06:66:56:24:85:26:72:a6:15:f7:9a:8a:df:31:75:23:
         38:98:65:16:c5:c1:b4:dc:2f:56:b9:0b:7f:ab:20:73:b7:50:
         86:7a:86:94:28:7d:9c:bc:10:ec:1c:e9:e3:98:96:89:83:e5:
         99:24:fd:84:25:70:13:63:70:5a:89:60:a7:3a:f3:33:b4:25:
         da:5f:16:6a:89:8e:1b:64:e1:3d:af:bf:bb:2d:37:16:6b:8a:
         ce:81:bd:57:d7:ae:13:8a:91:41:7e:76:7a:9c:3e:b2:fa:df:
         58:a9:8f:9f:2e:17:2c:33:e1:b6:f6:7c:1b:c4:0c:f4:5e:23:
         f5:41:74:81:5a:44:33:33:c6:ad:4e:7f:04:4d:81:a7:a1:2c:
         36:9f:b2:e6:66:c4:16:a1:bb:99:ce:85:bf:50:9b:c9:ca:49:
         6f:57:7f:29:db:24:1a:42:12:b0:73:73:ae:45:11:0d:71:b6:
         df:bd:f3:9b:e6:56:fa:43:d2:62:c7:92:00:61:a4:d8:73:19:
         01:02:13:c7:62:f1:77:fe:6f:dd:07:9c:eb:b5:23:c9:6e:ce:
         7e:b6:b0:77:d3:2c:2a:d7:78:53:4f:bb:92:f6:58:bd:62:c7:
         e9:fb:67:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:08:16 2025 by rpki-client