Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d5db2009-1fe6-3a7b-a729-f42e9b7b1c26.roa
File:                     d5db2009-1fe6-3a7b-a729-f42e9b7b1c26.roa (raw, json)
Hash identifier:          I2E6MT5vpp2qZ5ezBrE5k6KhWi4FO4FtY6ADsM99gvw=
Subject key identifier:   59:C1:27:47:2C:F2:59:17:DB:2F:35:E1:44:9A:93:E6:64:84:D0:B2
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F43285849E7BA80FE3CB4A5C81FD60880
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d5db2009-1fe6-3a7b-a729-f42e9b7b1c26.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     394946
IP address blocks:        169.145.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:80:fe:3c:b4:a5:c8:1f:d6:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=65e0c115-9f7d-4ddf-90d0-f7413cecb1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:f3:a9:01:4b:e0:bf:c0:a3:7b:8b:0c:92:
                    3b:75:96:ec:50:b7:fb:fe:f3:a4:96:0e:b9:3d:5d:
                    8a:b7:9b:3c:a8:5e:9a:c2:4e:67:1a:55:b8:c7:e3:
                    30:f7:30:29:7b:67:d8:d5:91:3f:80:9f:15:3c:56:
                    6d:e6:f9:ab:32:9f:e8:fe:83:9b:94:61:14:cd:9e:
                    cd:df:18:cb:f9:63:7c:12:ba:95:3a:8d:73:b2:18:
                    8b:c5:b9:f0:73:47:11:ab:c1:74:09:b2:cf:95:70:
                    84:7c:37:56:ce:20:2b:3f:d2:a8:a6:93:65:0f:9b:
                    52:15:c4:4c:17:4e:73:9c:d8:0a:1d:d8:e5:47:7f:
                    7f:d9:b4:fc:7a:09:bf:03:d7:c0:44:14:61:e0:95:
                    e7:c6:a4:41:ca:fa:49:e4:1c:15:9c:2b:55:40:c3:
                    21:45:a5:d4:bf:8b:8d:e3:46:8f:b4:29:33:02:76:
                    a7:e4:38:77:a0:90:6c:87:d0:07:0e:e9:89:2f:b0:
                    3e:fa:68:93:d9:6d:21:d2:f7:52:0d:d6:7d:c8:8f:
                    29:f5:10:84:c8:4d:72:55:7f:11:07:b8:af:aa:a4:
                    7a:a5:59:6c:25:8f:f8:32:ee:2f:c2:18:a3:9c:23:
                    e1:99:87:81:05:3c:6a:31:62:64:ee:16:e5:d1:1e:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C1:27:47:2C:F2:59:17:DB:2F:35:E1:44:9A:93:E6:64:84:D0:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d5db2009-1fe6-3a7b-a729-f42e9b7b1c26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:6a:cb:76:68:b1:b7:df:ec:1a:2d:35:61:6d:77:1a:b7:7e:
         2d:88:8c:93:93:2e:f3:a2:2b:fa:86:dc:e8:3b:d0:0e:2b:4a:
         77:97:6c:f5:9a:c2:32:7d:30:28:e5:26:c5:1e:50:6e:14:f6:
         a1:0a:ee:bf:5e:fb:f9:b3:72:62:66:c7:11:cb:36:d7:a3:f1:
         09:15:fb:8c:3d:79:f5:f2:3d:68:fd:28:b6:fd:68:1b:f9:58:
         1a:db:7e:4a:36:4a:e1:45:5b:b0:0c:5c:d6:cd:53:aa:41:d1:
         6f:d4:dc:a8:e5:b8:86:88:e8:c1:f1:e7:a1:fc:2d:5f:68:a2:
         74:d8:99:55:0b:dc:2a:61:96:7b:b0:bb:d5:99:2c:e2:49:2f:
         be:a7:f7:a3:7e:62:a2:c3:35:47:36:a7:94:51:96:3a:59:15:
         c8:f7:15:ae:9e:88:36:f5:0b:3d:64:83:d6:2e:da:bd:47:1e:
         f6:74:23:d8:59:18:49:38:85:6b:fb:14:46:37:4e:eb:5e:1c:
         3b:51:57:f0:d8:e2:01:40:58:be:5e:77:24:e5:81:f3:9d:79:
         0f:87:7d:9c:1c:0e:1c:6d:6c:93:c8:6b:26:ec:a4:f9:17:dc:
         9f:58:d1:ab:63:4d:b4:c7:33:08:93:8f:af:3c:dd:ac:54:e8:
         15:6c:49:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:49:02 2025 by rpki-client