Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6435659-5d7f-3300-bb29-809a4762f437.roa
File:                     e6435659-5d7f-3300-bb29-809a4762f437.roa (raw, json)
Hash identifier:          Bv78H09y2JwtEjiDPjsQzPfd5qdPK9D7CUhQaNXK0Ck=
Subject key identifier:   9A:FD:16:EB:92:43:02:23:1E:3E:B8:3C:6B:2E:C9:25:BE:A0:02:26
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849DFF67FA7059606B4411329AC
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6435659-5d7f-3300-bb29-809a4762f437.roa
Signing time:             Fri 16 May 2025 18:15:45 +0000
ROA not before:           Fri 16 May 2025 18:15:45 +0000
ROA not after:            Thu 14 Aug 2025 18:15:45 +0000
asID:                     2129
IP address blocks:        192.53.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:f6:7f:a7:05:96:06:b4:41:13:29:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May 16 18:15:45 2025 GMT
            Not After : Aug 14 18:15:45 2025 GMT
        Subject: CN=289e7542-9016-4339-a995-c3ec7bd471de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:98:e9:af:9f:bc:26:98:ba:0b:c8:34:80:b0:
                    0e:55:a4:55:55:ab:cb:bd:28:a5:06:09:44:66:f8:
                    a7:61:2b:0a:4c:bc:be:8c:0c:87:31:f6:fd:ab:4f:
                    0a:29:22:55:a6:5b:c8:de:d5:d7:30:a3:b9:6b:f5:
                    a4:d9:ef:5b:34:ca:f8:6f:27:34:02:e3:91:2a:a7:
                    93:be:ae:9d:23:47:7c:d5:be:33:75:fd:72:76:19:
                    1d:9f:81:40:13:04:82:76:f6:31:01:a1:6a:b3:7e:
                    af:90:01:67:95:7a:ec:0d:f2:0d:40:0c:37:20:52:
                    e6:9d:53:fb:09:6c:e2:8f:9e:0c:1a:f5:c2:6e:b8:
                    77:e5:d0:c0:ed:d2:8c:f2:75:48:de:76:68:59:77:
                    2c:fc:08:28:af:6e:07:8b:a6:c1:9a:70:cc:7f:78:
                    3c:fc:48:1b:18:c8:e3:f8:e3:8d:5f:39:69:36:d0:
                    a1:65:4d:2c:44:df:26:cb:60:13:d3:66:58:d6:45:
                    4f:73:2f:a5:34:dd:df:cd:93:f4:66:a1:bd:34:0b:
                    ad:c5:e4:cb:e3:14:01:01:ae:ff:ff:89:11:1e:d1:
                    2f:81:58:31:9a:3c:73:6c:32:32:63:9f:12:b9:86:
                    c2:e4:7d:e5:27:6b:a6:10:76:3a:21:cd:ce:f3:7e:
                    07:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FD:16:EB:92:43:02:23:1E:3E:B8:3C:6B:2E:C9:25:BE:A0:02:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6435659-5d7f-3300-bb29-809a4762f437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.53.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a6:4b:6b:d7:85:36:4e:b3:08:4b:13:b1:d7:1b:26:97:3d:
         0a:f5:fd:0a:74:91:96:28:b6:5a:8f:81:58:9b:9d:34:90:8f:
         d3:b0:a6:ee:19:66:17:11:09:7c:df:40:fd:74:c2:2c:06:c1:
         1d:a1:9b:f5:f1:02:9e:9a:34:23:d8:3d:68:ad:31:67:58:a8:
         b6:72:e0:f3:e0:4c:da:6d:a8:1f:90:a9:b5:11:6d:18:b5:1d:
         a1:a9:ed:7c:5f:6f:4a:76:3a:1f:58:19:40:b0:17:2d:99:55:
         b7:4a:8a:84:97:c5:87:8a:90:07:42:d5:d0:4a:ba:06:35:e6:
         7f:87:9c:e9:60:45:50:4b:6a:26:f0:7f:93:cb:8f:4c:e7:80:
         ef:e5:1f:3a:41:2e:f0:fa:86:a5:54:d8:df:d4:61:b3:c1:06:
         83:76:46:c2:f4:52:ee:c6:7b:a2:a9:25:b3:f5:ca:3d:cc:f1:
         fa:7c:49:60:6f:c8:94:3f:47:15:b1:1a:01:8c:62:6c:f3:a9:
         82:8e:30:eb:1f:57:e3:29:f3:74:d0:6f:61:64:11:00:6c:df:
         07:f5:e4:0f:41:00:52:d1:1e:2f:e7:2d:6f:24:e3:4e:3b:64:
         34:e5:47:53:2c:60:c7:78:28:1a:f7:dc:d2:75:cb:d8:f7:e1:
         78:51:f8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 08:05:37 2025 by rpki-client