Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/226ae6f2-d3dd-33de-b762-e50a81175086.roa
File:                     226ae6f2-d3dd-33de-b762-e50a81175086.roa (raw, json)
Hash identifier:          NfRql/ND7Vn6ZOixYD+rxBX2kJiwlBpR/z+cWn8JSjk=
Subject key identifier:   3C:59:E7:64:1E:FD:00:E9:9D:91:15:AC:F2:A5:B1:EC:69:DD:A9:79
Certificate issuer:       /CN=063abcef-47ff-4267-9198-eb628aba7842
Certificate serial:       010D0C9F4328584A549B23210C5F912853895D40
Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/226ae6f2-d3dd-33de-b762-e50a81175086.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     397976
IP address blocks:        146.12.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:23:21:0c:5f:91:28:53:89:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=62a32698-66c1-4fb3-bf32-4a3d5cd6a13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:75:95:d2:78:57:a7:87:c5:78:3e:3a:9c:bb:
                    e6:c4:8d:0b:54:a9:2d:71:c8:fb:1e:5d:9f:28:09:
                    7b:77:36:10:1f:c6:a4:56:86:d6:58:b0:50:9e:e8:
                    a8:43:5b:1b:d5:93:79:9b:ab:a2:d5:89:a5:a4:5b:
                    e1:f2:51:cb:a4:07:2c:bb:2b:77:62:46:cf:23:08:
                    0e:74:f1:3e:27:37:0d:19:15:f7:fe:76:ef:85:d7:
                    93:e5:05:c3:c4:f2:d0:45:01:05:ad:fb:fb:71:99:
                    41:c1:e5:06:8e:6b:53:40:8b:e2:a6:d7:76:d6:8e:
                    11:b8:dd:73:b5:8b:9b:29:f9:0a:66:67:84:c3:3f:
                    e6:f7:44:e9:84:c0:9d:5e:70:77:ab:b8:cc:c0:4d:
                    2e:eb:f6:9a:2f:64:b7:aa:b5:dd:d4:da:31:8e:47:
                    f1:8d:7d:d3:eb:68:26:fa:ce:71:35:41:5d:f3:63:
                    5f:5c:3b:5d:33:a0:a4:8a:bf:ba:cb:f5:f2:9e:ba:
                    97:ef:cf:48:0a:6b:89:02:6e:c6:b3:af:98:35:80:
                    06:14:cf:61:74:00:d4:1a:cb:b1:1f:7c:e7:54:a8:
                    45:f1:c5:2d:1f:4f:18:52:e1:f4:63:3a:99:e0:49:
                    7d:ff:11:82:66:2f:59:23:6e:5d:1d:bf:6b:2f:5d:
                    56:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:59:E7:64:1E:FD:00:E9:9D:91:15:AC:F2:A5:B1:EC:69:DD:A9:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/226ae6f2-d3dd-33de-b762-e50a81175086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl

            X509v3 Authority Key Identifier:
                keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.12.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:01:5d:38:21:4a:0d:57:ef:32:f0:e5:cd:6a:68:a4:67:fb:
         7c:f1:0a:05:3a:7e:3c:44:74:b0:04:69:a8:ae:88:98:12:9b:
         45:11:2b:ff:fd:16:00:5b:16:26:07:25:53:aa:1c:a5:3a:01:
         70:e4:a3:be:86:3f:04:22:01:ce:99:a9:d8:81:45:41:a7:c6:
         37:92:ca:10:62:f6:18:1d:19:36:b1:64:32:0c:ce:38:ad:8b:
         59:7b:8b:93:e1:12:64:19:a8:19:6e:eb:0d:40:b7:a7:03:75:
         3e:46:f2:89:90:ca:6a:13:1c:e8:66:10:83:58:10:d2:21:b3:
         a2:aa:32:e0:1b:49:37:30:cb:97:f3:23:54:75:d5:0f:ae:70:
         01:34:91:dd:4f:bc:43:15:46:25:94:98:df:aa:2e:95:20:7d:
         43:99:df:7d:a4:78:c9:f5:7d:83:dc:9e:30:7a:c0:a5:40:9c:
         99:b2:a5:a7:50:c7:37:42:2d:88:2f:80:27:7b:ba:a6:f7:c0:
         08:7f:be:65:9b:49:49:1d:42:a5:a4:47:3f:8e:74:e6:d6:28:
         b7:6f:0c:0b:99:de:e0:78:da:b2:8b:e4:90:e7:ff:c7:4d:bb:
         de:bd:35:32:4a:6f:80:b4:2f:9b:f3:20:1c:f9:a7:d3:0a:d2:
         52:0d:c0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:40:18 2025 by rpki-client