Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/08662800-70a1-381c-9f25-ce8be9a5ed9b.roa
File:                     08662800-70a1-381c-9f25-ce8be9a5ed9b.roa (raw, json)
Hash identifier:          KOET1Bchr0a/fbar3mJsBDKlH1bdr4SWCmgbi6M+wY8=
Subject key identifier:   5B:CD:40:BC:3C:FE:10:65:D3:FC:54:EB:09:E7:39:BF:06:85:E8:AB
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285849E22521FECD845B67D72A0B4A
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/08662800-70a1-381c-9f25-ce8be9a5ed9b.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     396982
IP address blocks:        165.1.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:21:fe:cd:84:5b:67:d7:2a:0b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=f0114e53-71c8-42eb-b498-39fd87dd329a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:96:8f:af:6e:6c:0a:eb:5e:01:0e:0b:56:
                    c3:22:3b:e7:d0:ff:f3:80:f8:af:a4:6d:49:6c:64:
                    83:47:fc:45:af:e1:c7:d6:7b:ea:57:e5:bf:24:45:
                    89:f0:2f:0f:6f:a9:95:ab:ef:8a:42:ee:da:4e:e4:
                    a1:ba:2a:44:8b:4d:93:e1:17:97:86:50:69:23:58:
                    2d:83:c2:77:51:f4:cb:eb:01:7a:e2:e8:eb:f8:ae:
                    18:df:14:e3:bd:2c:6b:15:f4:d8:b1:f0:4a:e4:08:
                    f5:cb:74:a2:d2:20:ea:f2:73:55:71:d0:71:81:c6:
                    83:73:b9:3f:d7:fc:ae:36:bc:98:7e:4a:66:b1:5e:
                    44:af:bf:da:da:15:f5:9a:8c:11:13:22:e8:01:a7:
                    de:b1:d7:50:06:64:8b:45:d8:a2:14:c6:90:6c:54:
                    24:ca:7d:19:a2:d8:99:6c:02:75:0e:b0:b1:48:65:
                    68:f1:e0:9f:2e:30:21:c3:3a:7c:f6:e0:7b:5a:7e:
                    1d:ef:29:5c:1b:75:e4:1d:74:16:52:55:66:b1:49:
                    9d:45:08:fe:52:e8:b8:40:81:bd:0c:30:1b:01:a6:
                    7c:8b:93:9d:d2:f7:48:b9:c8:bf:3f:29:b7:d5:d3:
                    b8:3b:04:25:b8:d5:a9:e3:82:ef:21:d2:2f:78:86:
                    90:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CD:40:BC:3C:FE:10:65:D3:FC:54:EB:09:E7:39:BF:06:85:E8:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/08662800-70a1-381c-9f25-ce8be9a5ed9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.1.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:87:74:15:39:04:28:3a:da:47:1c:6f:1d:01:9a:6a:8b:46:
         8d:05:bd:46:22:32:76:80:81:a1:47:5f:00:cd:cb:0a:08:a2:
         45:3e:72:b4:47:f5:fc:c6:9e:1d:93:62:5b:c9:f2:5f:45:80:
         7b:f4:ff:56:86:2b:c3:39:51:dc:b2:9c:a0:8d:f6:fc:bb:22:
         fc:0d:dd:e8:c4:f3:cb:6b:a4:7d:47:81:25:05:d1:5c:87:d6:
         f6:36:ca:38:c2:de:46:c3:f2:68:a1:97:9d:d3:ad:cc:55:f1:
         16:9c:0f:03:7a:f4:eb:7c:0e:52:e3:7b:45:57:4b:14:1e:f2:
         92:ad:8d:e4:e3:fe:bf:bf:8c:3f:d2:46:36:9c:e8:b7:44:3e:
         70:91:72:67:56:11:ce:f7:6b:4a:ec:28:79:0e:92:a2:82:05:
         b7:d1:bf:f1:06:83:71:81:aa:8f:a4:01:9a:71:ad:04:95:eb:
         98:83:f9:b4:2e:3c:42:ab:64:e9:03:c3:fe:3f:f3:65:fb:51:
         84:7b:1c:f2:54:fd:1d:79:f3:f4:63:06:21:82:b8:2f:bc:df:
         46:2d:cb:79:d6:47:ec:0b:09:aa:ad:98:45:46:0a:c4:78:88:
         5b:40:c3:e1:a2:f3:c6:80:93:49:2d:04:e4:33:8c:41:e4:ea:
         d8:84:84:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:33:04 2025 by rpki-client