Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/2e0e8d28-3d3b-3b3b-8b47-354fe7f5052c.roa
File:                     2e0e8d28-3d3b-3b3b-8b47-354fe7f5052c.roa (raw, json)
Hash identifier:          Y9GvyfcjnA07PW/WQRVftUvxLI/Ahoe8RDGiNWRk3mc=
Subject key identifier:   F0:A7:D3:1D:CC:4A:DC:5B:02:55:6D:24:E3:DF:CA:CB:1A:31:17:2C
Certificate issuer:       /CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab
Certificate serial:       010D0C9F4328584A77808849F26B426100787E40
Authority key identifier: E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/2e0e8d28-3d3b-3b3b-8b47-354fe7f5052c.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     14618
IP address blocks:        168.86.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:88:49:f2:6b:42:61:00:78:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=e441bfe6-23e4-493a-a496-69c5ffda2e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0d:49:90:e5:85:dc:cf:df:ca:16:50:1a:bf:
                    11:3d:a7:db:54:5a:bc:ee:44:f7:16:57:eb:99:60:
                    b9:eb:65:19:b9:f3:d3:3b:8a:74:77:df:57:54:6b:
                    03:02:85:2f:f0:74:b2:a8:ca:46:40:82:52:59:a8:
                    33:6a:af:a0:53:ab:54:cb:0a:cb:47:09:cc:90:3b:
                    50:26:8a:cf:8a:6b:41:57:24:97:5d:3a:ec:e9:4b:
                    31:ae:5d:16:47:d3:31:71:a1:a0:6f:fd:ec:05:98:
                    a5:60:61:1c:f7:7b:64:21:27:f5:7a:36:b8:08:ce:
                    ee:4a:0d:c5:04:6f:3e:d7:14:f8:eb:05:1b:65:97:
                    96:ab:e8:19:02:17:7c:15:ce:12:80:e5:55:47:f6:
                    50:63:45:84:29:33:7d:26:1b:3b:7f:1b:80:1c:08:
                    ac:c9:be:73:04:f7:4e:ce:0a:67:1d:81:ef:8e:58:
                    f2:08:f6:e1:56:31:94:8e:6f:f1:d2:89:5e:2e:e6:
                    41:03:e9:84:d4:52:49:d0:8f:bc:48:24:c3:4a:b4:
                    8d:08:8f:68:7f:3d:5e:b6:8f:ec:26:f1:9a:f3:f1:
                    87:48:91:da:a1:4b:13:93:bf:c0:b4:f8:33:ca:80:
                    37:fd:1b:09:51:78:89:a7:b4:90:09:09:50:37:95:
                    63:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A7:D3:1D:CC:4A:DC:5B:02:55:6D:24:E3:DF:CA:CB:1A:31:17:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/2e0e8d28-3d3b-3b3b-8b47-354fe7f5052c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl

            X509v3 Authority Key Identifier:
                keyid:E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.86.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1d:34:e6:e6:70:87:63:d4:28:4f:34:3d:9f:11:06:37:d1:
         11:09:84:22:0d:5b:9e:e7:cf:01:e3:0a:4b:e7:15:e9:d2:74:
         ae:cf:b7:d0:67:42:c8:a7:cb:37:7a:52:b0:e4:b5:11:91:b5:
         86:94:5b:4d:8a:9f:09:75:cc:77:17:c7:f8:18:70:0d:06:de:
         7f:19:c8:44:28:08:98:76:39:36:02:12:c6:82:a0:86:7a:23:
         e4:e2:53:1f:85:f4:c4:d8:83:3e:5a:7e:9b:79:c6:1f:b9:f6:
         65:0c:d0:b6:3a:47:65:bb:ab:a3:ab:21:3f:ad:ef:22:21:10:
         f2:79:7b:81:0b:e3:fe:4f:21:94:ea:73:78:57:f7:8a:80:8a:
         78:76:0d:a4:c3:cf:08:f9:30:c1:6f:f7:94:a4:2f:4c:c9:7f:
         6f:0b:7c:5f:9a:ed:f7:43:54:bc:24:f0:96:43:0f:38:a3:ad:
         6b:96:70:3a:04:92:ac:95:45:88:68:9b:66:da:f0:e4:10:9f:
         50:70:59:60:b9:d8:b4:69:df:c4:1c:f1:12:45:3e:d0:6c:ce:
         ac:e2:c3:c1:00:a6:d9:bd:5f:c2:16:19:eb:d3:a5:02:ce:2b:
         7b:34:1d:8b:7e:7e:64:88:2e:55:39:65:b3:0a:68:a2:13:08:
         b1:50:96:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 11:32:25 2025 by rpki-client