Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/09ca4d21-e90d-39be-924e-66f0e9c839b3.roa
File:                     09ca4d21-e90d-39be-924e-66f0e9c839b3.roa (raw, json)
Hash identifier:          Qss8lyJZTCG7QlF9qCR7UHiiKozBeRY7nwpjGYlKQVg=
Subject key identifier:   A6:27:51:C4:C3:DD:21:EB:7D:A4:3B:AC:8F:86:8C:31:7B:8A:9C:DE
Certificate issuer:       /CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
Certificate serial:       010D0C9F4328584A6AF095362E8F04E4C0E33800
Authority key identifier: D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/09ca4d21-e90d-39be-924e-66f0e9c839b3.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     6453
IP address blocks:        167.253.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:95:36:2e:8f:04:e4:c0:e3:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=56d906e9-bb84-4e6f-8c4a-6b2abffbf271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:48:11:37:e8:ef:be:ec:cf:24:86:b3:e7:
                    db:98:9c:2a:4f:a1:cf:77:ad:92:b8:d5:ce:cb:93:
                    49:72:53:cd:cc:de:4f:98:4d:89:41:88:16:b6:a7:
                    1f:b1:09:40:fc:f4:5e:39:39:1c:43:79:2a:44:58:
                    d7:59:27:74:b0:31:95:f4:4e:bc:86:cb:65:17:83:
                    53:4a:3b:10:b5:cd:12:3a:b7:5c:7f:81:7f:00:00:
                    8a:a4:48:35:98:c9:a1:7c:8c:60:a2:5a:4b:99:1f:
                    5e:e4:82:c5:03:bf:1e:81:92:80:92:73:26:f3:dd:
                    f5:70:c3:00:8f:12:77:16:0a:71:d9:6e:a7:85:da:
                    a2:89:eb:15:b8:89:64:9e:ef:8e:ce:d7:76:30:f8:
                    24:de:6f:c6:68:8b:f1:ea:53:df:5d:bc:d3:55:d5:
                    62:14:86:92:75:b4:ba:46:ee:d5:6b:f1:47:55:e1:
                    6e:dc:7e:fc:ac:9e:6d:0d:bb:f0:01:ed:d7:2d:d0:
                    e8:e8:37:8c:c3:32:54:4e:86:46:65:59:6c:21:fe:
                    99:ba:f5:ed:86:cb:63:e4:ac:7d:1e:a0:a9:c1:78:
                    e5:ec:31:d3:97:d6:10:a0:f9:d0:5a:7f:84:71:b4:
                    0e:8f:39:ec:4c:2c:31:db:6e:b1:e4:ad:4a:82:4a:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:27:51:C4:C3:DD:21:EB:7D:A4:3B:AC:8F:86:8C:31:7B:8A:9C:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/09ca4d21-e90d-39be-924e-66f0e9c839b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl

            X509v3 Authority Key Identifier:
                keyid:D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:52:de:86:e1:58:66:2a:25:39:99:9f:84:bb:0a:e2:43:bd:
         81:03:11:ba:80:ec:51:74:30:a2:a7:6f:54:05:e0:b2:6b:c7:
         84:85:0e:db:b4:28:6f:05:66:b3:a6:2b:70:a9:a5:8d:a1:01:
         68:9f:a7:d3:19:98:57:b9:df:8b:e4:97:2e:2f:e6:3d:dd:53:
         8d:26:0d:f9:fb:b1:74:87:8e:bc:b6:2f:c3:54:f3:c7:49:4b:
         b0:45:55:52:cd:02:e7:3f:e1:2b:dd:0d:a7:fe:43:b2:48:d7:
         71:f1:b8:71:fc:4e:c5:14:af:79:81:a4:56:3d:ed:71:e0:e9:
         43:84:cf:08:84:1d:b8:15:10:85:49:7b:c7:c6:d2:f7:2a:ae:
         08:77:d7:c2:4f:84:56:58:10:93:5e:88:24:98:b1:23:73:53:
         8b:e4:e1:6c:e4:9e:20:c0:81:a3:4e:ac:80:83:db:75:20:3b:
         9c:21:9d:ca:73:bd:b5:d8:97:4b:01:66:7a:38:e5:63:4c:2b:
         ac:b4:2e:96:35:bc:3a:9b:d7:08:31:a2:4a:f9:97:cd:6f:c1:
         1b:af:12:65:d3:5c:93:cb:c7:b8:11:5c:09:3f:31:17:60:0c:
         c1:8b:93:87:dc:9b:b0:5e:dc:ce:d7:db:f0:ee:b8:d5:6d:e0:
         2d:37:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:10:09 2025 by rpki-client