Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/40ad0a93-af7a-3b7d-97fb-c434cb896384.roa
File:                     40ad0a93-af7a-3b7d-97fb-c434cb896384.roa (raw, json)
Hash identifier:          WRcxD3OZwOXCPvkFILC4w0ca/H0CU8Eu7l338wFOKfU=
Subject key identifier:   71:57:C8:4B:4D:A6:A4:B0:46:9B:EF:38:48:CC:C7:92:2A:87:CF:D9
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFC8DB614A93E9F04674B0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/40ad0a93-af7a-3b7d-97fb-c434cb896384.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     17088
IP address blocks:        159.18.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c8:db:61:4a:93:e9:f0:46:74:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=e838e5bf-ecbd-4c4e-9aa2-aa30f4a55c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e6:85:cc:06:8f:c9:a2:d6:28:ef:41:60:45:
                    f3:1f:16:61:ad:8b:ab:6c:f9:e2:6f:a3:dc:9a:99:
                    60:1b:45:3f:4f:9d:45:41:81:16:82:1f:fd:53:44:
                    15:17:e2:d7:9d:e6:d1:77:a2:3d:50:9c:13:c7:31:
                    1e:50:a5:e5:26:34:1e:a3:fe:a3:96:23:62:af:d7:
                    2f:dc:72:2f:23:ec:73:03:77:ba:3c:90:af:60:29:
                    34:cb:4b:63:2b:f5:65:c2:7e:68:34:38:7d:2f:f9:
                    59:a0:b3:b6:de:c7:e0:b7:75:26:20:fc:25:e1:e9:
                    54:4b:cb:7b:14:d2:7c:70:cd:60:ea:cd:7a:78:ae:
                    6d:9f:35:79:34:e1:9a:b0:aa:9f:de:c8:da:de:74:
                    9f:02:b0:0c:6f:a5:bc:a2:d6:67:f6:b0:0a:ed:3d:
                    09:0f:f2:76:8f:1b:ee:26:e5:56:67:55:6d:da:bf:
                    21:81:ad:6d:93:c5:62:e3:93:ad:98:f8:54:38:aa:
                    3b:e1:87:7a:9d:43:7c:da:ac:a8:24:d3:ed:f9:c2:
                    d2:c8:5f:10:ed:24:29:6e:9c:be:c5:fd:b3:b4:99:
                    13:46:59:b6:ca:2c:ec:d6:fa:36:2c:94:d2:55:31:
                    37:e1:1a:a5:c6:73:42:8e:ed:5b:f4:1b:ba:6d:7e:
                    f3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:57:C8:4B:4D:A6:A4:B0:46:9B:EF:38:48:CC:C7:92:2A:87:CF:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/40ad0a93-af7a-3b7d-97fb-c434cb896384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b5:65:ea:86:f3:66:d8:bb:2b:78:97:d4:e4:cf:2a:83:1c:
         5e:76:bf:1d:00:6d:d9:4a:f7:c7:1b:67:63:14:ac:f4:b6:e7:
         36:38:87:02:a8:b3:0d:d0:54:d0:4d:3a:8b:a0:f4:ab:fb:b5:
         f2:d2:b4:17:24:6d:fc:bb:d7:f9:81:99:d5:6e:4d:4d:6b:0e:
         fd:ba:0a:57:0e:18:0a:05:ef:11:20:3d:17:a3:80:83:bf:34:
         19:4c:72:3b:5f:15:c3:5f:f6:49:72:67:b3:d0:b5:ad:ed:0c:
         a8:7f:f3:08:d1:9b:9b:6e:ed:71:a1:07:6a:49:8d:11:83:e0:
         e9:22:49:77:8b:f9:f6:1c:fa:7e:32:aa:84:cc:c0:7a:57:b8:
         dc:f7:ea:25:c1:f1:ad:28:76:47:9b:f7:27:da:64:93:01:93:
         75:4f:e5:09:68:af:73:0b:d2:7b:90:3c:02:d1:dc:58:5f:71:
         7a:45:69:fd:a5:b4:63:c1:81:07:4d:84:d5:4a:28:1b:59:b9:
         21:8f:98:50:e6:0a:16:b4:bf:4e:f7:b5:6e:37:60:0f:6a:38:
         23:af:3a:11:0d:4a:78:06:fa:95:e3:6a:03:e9:f5:81:44:bc:
         91:b5:82:9f:59:a6:03:cb:2f:e6:76:77:ef:a3:f8:e1:9a:a9:
         b2:e4:50:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:12:00 2025 by rpki-client