Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa
File:                     5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa (raw, json)
Hash identifier:          ZtvTZRM89anGBdtRp3fH+6QtY19fN1ZeBJFXvTPe53Q=
Subject key identifier:   A9:2C:3E:AD:08:1E:63:84:D0:F9:EA:2F:03:45:2C:D0:FA:F7:D7:89
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584A74B5DEFC29786B7BCA89D000
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     198949
IP address blocks:        192.135.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:de:fc:29:78:6b:7b:ca:89:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=d03c1c3a-b26e-4435-8183-494472b07c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:45:c6:6e:1a:5c:11:e1:a3:4a:09:0f:a5:cc:
                    40:b4:48:4d:b7:5e:61:ee:ce:48:4d:1d:10:a5:a4:
                    d0:f9:fe:3d:c8:57:43:c8:67:04:cc:57:fa:60:77:
                    8a:37:3f:bd:39:85:b8:10:c2:db:fa:e5:c9:a2:bd:
                    2a:75:15:55:69:9d:d4:61:e5:f4:7d:60:e4:5c:03:
                    3a:97:98:2a:45:22:31:24:4a:9a:46:31:67:6b:95:
                    ae:3f:bc:65:ca:b6:82:23:77:46:08:79:f8:9b:4b:
                    7b:83:c7:ab:56:64:09:03:4c:a6:a7:d6:e5:6f:a6:
                    53:1d:ac:29:c7:cc:e1:7b:74:07:0e:5d:ae:b4:62:
                    73:2d:6a:96:5b:c7:6d:d8:6b:f5:6b:03:bb:48:88:
                    34:4e:b5:8c:bc:32:ea:47:a0:bd:fe:4e:fe:b0:a4:
                    42:af:e1:1f:9c:a0:d2:c9:40:7a:43:b5:23:0e:c6:
                    95:9a:03:06:3e:44:06:03:bd:6a:69:71:ff:27:64:
                    65:3d:14:3c:2e:fb:8b:49:65:73:8b:f2:5b:ca:3b:
                    52:e6:f1:f4:6f:82:bd:db:c0:a8:17:f6:24:0a:f2:
                    64:3f:f0:79:44:42:eb:a8:34:98:78:2b:3e:70:b9:
                    03:08:2f:50:b5:4f:3b:48:f9:79:3b:35:df:f9:69:
                    e2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2C:3E:AD:08:1E:63:84:D0:F9:EA:2F:03:45:2C:D0:FA:F7:D7:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:09:ee:c1:b6:7c:52:0c:ab:b0:94:ca:65:0d:1d:bb:da:8e:
         a7:d6:64:a9:56:ef:32:93:74:5a:11:f8:27:0d:19:b8:39:bc:
         6d:41:61:62:ca:57:28:a4:f7:a8:b5:ef:ba:4e:1e:37:18:fd:
         96:16:b1:82:04:75:40:1a:20:86:27:66:b1:04:e7:b2:29:18:
         73:57:95:8f:04:af:46:b8:4f:e9:0a:f6:26:58:ff:59:46:13:
         5a:b5:87:a0:a5:f5:89:3f:15:db:09:97:d3:0e:ce:a3:b0:de:
         4d:22:42:7b:7a:a8:84:7a:5a:b2:7c:6e:f1:6d:2e:84:61:38:
         fe:9f:95:47:c2:36:59:6b:5c:24:bf:0a:6b:94:d5:4b:ab:ea:
         f7:c7:8a:29:54:c3:31:a5:f9:f0:ff:d4:c8:eb:ce:59:09:15:
         f4:ad:7d:c8:26:b2:d8:85:7a:fe:89:6c:90:83:7a:ef:d9:cd:
         cb:9c:3f:c9:42:6a:e2:32:06:f7:cf:33:d5:9e:89:20:a2:dd:
         02:79:d2:72:89:08:bf:9d:92:5e:9a:49:99:54:6c:b2:3b:09:
         be:46:d0:8b:97:67:f7:ce:a0:7c:7d:9d:f6:2b:41:ba:95:11:
         25:49:fd:6a:e2:12:60:a0:7a:2f:1f:5a:7a:a1:14:5f:56:fc:
         31:57:02:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 16:14:59 2025 by rpki-client