Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa
File:                     0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa (raw, json)
Hash identifier:          Wkdjmu9FcihRoejP/cOO1YOzrW6cWrwMR/G+D8RLCUM=
Subject key identifier:   F1:04:BB:1F:06:34:7C:AE:60:B7:B3:97:5D:37:34:54:04:9F:62:59
Certificate issuer:       /CN=4ed81831-d382-493b-b622-f4fb0157e101
Certificate serial:       010D0C9F4328584A2ABADBD67C340F1567312080
Authority key identifier: 2F:E1:5E:47:8D:8C:6C:AF:87:A0:D3:19:00:87:BD:37:DA:B7:CC:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     53871
IP address blocks:        199.188.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/4ed81831-d382-493b-b622-f4fb0157e101.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/4ed81831-d382-493b-b622-f4fb0157e101.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:db:d6:7c:34:0f:15:67:31:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed81831-d382-493b-b622-f4fb0157e101
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=64787b73-78ac-47b5-a4c9-4d8478715b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6c:a8:b8:d7:4b:52:cc:ce:d8:f1:95:cf:e3:
                    e1:1d:dc:09:1f:d8:bf:23:f3:63:84:aa:bb:ce:d6:
                    ff:52:ab:d3:51:95:c2:2b:e2:bc:bd:36:33:71:28:
                    be:03:8c:98:6d:e9:65:99:27:d9:1f:80:1a:d0:60:
                    09:63:a6:df:86:dd:37:a8:69:c6:ea:74:f6:0e:a8:
                    40:cb:0b:a8:d0:ab:20:11:17:40:1e:68:e2:e5:e3:
                    64:a7:db:dc:97:fd:6d:a8:05:11:91:cb:6d:38:40:
                    81:43:9f:61:4c:3f:3d:0c:55:a2:0d:d0:bd:3c:7d:
                    07:70:63:0d:00:00:0f:14:d6:ba:33:e7:44:4d:3a:
                    03:c0:2f:ca:2e:7d:f7:23:d7:e1:af:68:75:c2:12:
                    38:53:9c:2a:8e:a6:ee:b8:37:6c:3b:fb:f6:10:0d:
                    ae:3a:7e:a0:09:1c:ca:d8:33:9e:93:a2:5f:c6:b5:
                    8a:1c:03:a0:5d:c6:33:d6:01:7c:18:8b:63:97:8c:
                    3a:2c:8d:48:97:95:5f:9e:63:7f:07:f9:af:e9:62:
                    12:3f:86:6d:84:9a:bc:77:1c:cc:da:79:72:1b:bb:
                    f3:a3:1a:a4:bd:d2:e2:ec:70:d9:08:ad:04:62:df:
                    52:15:ae:e4:69:d7:83:72:0f:8d:b0:6b:30:0c:48:
                    67:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:04:BB:1F:06:34:7C:AE:60:B7:B3:97:5D:37:34:54:04:9F:62:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/4ed81831-d382-493b-b622-f4fb0157e101.crl

            X509v3 Authority Key Identifier:
                keyid:2F:E1:5E:47:8D:8C:6C:AF:87:A0:D3:19:00:87:BD:37:DA:B7:CC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:cd:a0:07:e2:3d:7d:4f:e8:10:de:7c:84:20:54:cc:e0:86:
         3a:75:64:d5:62:dd:e9:09:f4:99:2c:4c:49:26:48:22:2c:81:
         ae:f4:31:6b:18:24:fb:f0:71:eb:7c:4e:5d:f9:b8:e4:f9:e0:
         f9:7d:de:94:78:c9:ba:df:af:cb:d4:35:42:80:d1:fe:fd:8c:
         3f:2f:ed:08:70:32:0f:1c:98:4a:7b:c6:6f:4e:36:56:72:24:
         4e:7b:ba:c0:ef:15:1f:a8:7e:b8:40:81:be:ee:a2:4d:f5:c6:
         37:dd:28:96:24:a3:af:87:9a:33:38:75:80:4e:14:34:9c:a6:
         a3:dc:df:d2:df:c1:1f:f6:8e:b4:86:37:de:c9:bc:46:1d:4a:
         90:d9:9e:1b:ef:61:3a:53:60:d3:3d:83:13:e5:63:be:48:93:
         0e:72:03:bd:67:0c:1a:fd:95:71:28:34:8e:34:8d:14:cb:da:
         1e:2a:9f:13:e0:a5:ba:89:06:3e:f6:ea:42:ce:1e:1f:61:6b:
         1d:59:c8:6e:ce:91:63:fb:14:a0:d5:31:c4:c4:32:39:d2:26:
         ca:7b:07:2f:51:fe:14:40:24:45:a6:b5:cd:4e:8d:1c:c2:43:
         a4:cd:31:66:07:fb:46:48:6c:4f:4f:65:20:42:1f:a8:f7:09:
         24:83:e6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 00:49:25 2025 by rpki-client