Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/bbd2730f-955f-3f75-9182-9e1055563ba1.roa
File:                     bbd2730f-955f-3f75-9182-9e1055563ba1.roa (raw, json)
Hash identifier:          j8cmjRE3ylZj/LMJD3O1bbggEqh8/yG52XXZEBYKcWI=
Subject key identifier:   54:03:16:AC:6F:28:FB:91:A1:7F:B5:0E:85:B5:41:A0:DE:25:02:93
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFC72E0E53E7AC659C9880
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/bbd2730f-955f-3f75-9182-9e1055563ba1.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     26753
IP address blocks:        159.18.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c7:2e:0e:53:e7:ac:65:9c:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=4003d99b-9233-46a7-b2c5-34b35dc22023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:12:a2:30:4f:8e:a4:9e:94:43:6f:0f:9b:
                    d8:d8:ec:19:0b:0e:cb:32:16:f6:eb:73:c1:89:f1:
                    14:3a:46:82:cd:b9:6c:84:d6:f4:76:06:e5:be:53:
                    c5:17:6f:07:38:74:f7:95:ac:51:e7:a1:17:79:87:
                    9c:15:c0:6e:6b:fb:d8:9b:0a:e4:b9:5a:da:41:b4:
                    ed:f2:43:90:1c:90:aa:94:fe:50:fa:13:e2:5a:c7:
                    25:ae:44:ff:76:3f:2a:3a:87:23:0b:42:ee:61:64:
                    da:ad:eb:88:02:f3:86:9f:eb:0e:22:32:ce:8a:09:
                    97:07:16:30:c6:f7:0d:bd:0d:13:55:e2:1f:97:84:
                    f7:2b:4a:95:ba:a3:9f:aa:a2:9c:7d:98:a2:87:13:
                    b7:f4:a5:45:07:3e:18:78:cd:b6:98:5c:0a:58:12:
                    ad:5a:8d:04:5b:df:7a:a0:15:09:63:3c:ec:4d:6d:
                    41:08:71:33:0a:94:b8:02:2d:f4:45:0d:12:82:7a:
                    3b:7b:3a:f7:8c:94:f9:46:ff:6d:7d:1f:f6:c7:27:
                    4f:c6:1b:8f:97:de:81:f8:d5:e0:e3:14:dd:68:e5:
                    1e:06:2a:c4:93:21:c9:56:13:89:41:0e:05:c6:4f:
                    20:d3:22:0c:3b:3c:9f:66:8e:fc:8f:c1:4b:e4:04:
                    19:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:03:16:AC:6F:28:FB:91:A1:7F:B5:0E:85:B5:41:A0:DE:25:02:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/bbd2730f-955f-3f75-9182-9e1055563ba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:97:ad:25:43:05:6d:f7:7c:e4:14:6e:3c:a0:89:e5:4a:22:
         bd:4e:1a:a6:6b:7b:76:64:74:2c:20:91:1e:ce:14:31:ad:89:
         e0:b3:3b:c7:d3:0d:63:c5:cd:c4:80:7f:3b:c0:a8:3d:4f:5d:
         36:b9:03:2d:97:49:46:fc:37:03:69:39:d2:ae:27:cd:83:ea:
         a4:5c:c3:26:bd:5d:3c:96:30:40:e7:8a:56:40:b9:c9:58:42:
         6d:21:02:e2:94:05:28:44:f0:35:ff:eb:a6:3b:aa:1d:88:69:
         83:41:66:ce:62:81:39:15:8a:c0:01:34:02:cb:b0:21:ac:04:
         6c:4e:2f:a5:78:46:8c:d2:30:09:27:5d:b0:f7:84:61:68:dd:
         59:79:e3:6b:3c:36:ea:d9:db:d1:79:6a:a5:61:c6:90:1c:21:
         90:53:a1:f7:0f:1a:0f:19:42:5f:e6:c1:df:bd:a9:2a:2e:7a:
         24:a3:03:7e:73:9d:4e:67:9e:08:71:f4:65:9d:ae:8b:c1:bd:
         6a:99:db:24:ac:8b:74:1c:56:8f:05:0b:fa:6e:32:76:93:d6:
         2e:a2:2f:c7:ea:66:40:bc:e3:b0:9c:0e:80:28:d5:b4:87:25:
         1e:d3:31:98:9c:98:24:37:22:b2:b2:e4:13:3c:57:83:48:44:
         c5:94:2d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:12:24 2025 by rpki-client