Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/eafebb6c-5ed0-3e04-bdb3-38f0e1ca7bb4.roa
File:                     eafebb6c-5ed0-3e04-bdb3-38f0e1ca7bb4.roa (raw, json)
Hash identifier:          vIiNsh1mQMWLwkNDIm2L4DCf603xjTz+nlKwT3Ab7tw=
Subject key identifier:   3B:62:0D:5D:2D:85:16:70:A7:00:F4:06:21:0A:2A:03:B6:02:6E:01
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A162C9AD9758ECBE232740
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/eafebb6c-5ed0-3e04-bdb3-38f0e1ca7bb4.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        128.109.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:62:c9:ad:97:58:ec:be:23:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=ab4b06af-bc58-4d44-9073-d6009b80db7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4b:59:63:0b:cf:cd:ec:a0:2a:ee:89:ee:8f:
                    0e:9a:41:31:e6:19:ef:d6:60:93:ce:54:26:d0:74:
                    79:c0:a8:d3:b3:d3:fb:9e:35:70:45:72:ed:ba:ec:
                    07:be:85:54:39:f6:93:57:d0:64:c7:ee:1a:fd:66:
                    a9:ce:8b:1b:5b:9b:df:b0:01:d0:bb:45:07:13:61:
                    bd:48:d4:46:ef:e6:40:c9:13:f1:c7:4f:6b:3b:16:
                    05:24:48:67:66:7a:a0:ac:fa:60:ad:34:1b:85:73:
                    67:85:6a:74:da:28:15:db:c0:3c:05:43:c1:a6:50:
                    32:9a:ab:3b:38:f5:55:6e:97:7d:f1:0c:02:3f:40:
                    c3:f4:e2:20:34:c6:3b:97:2d:6a:6c:e1:54:be:2f:
                    d2:a7:dc:f6:f3:9c:18:85:fb:42:0e:66:d5:83:45:
                    b4:cd:c6:30:07:13:67:b4:0f:21:e2:18:38:2d:2b:
                    49:6b:e8:fd:bd:e0:a3:45:8d:9c:24:1a:23:d3:0e:
                    01:77:4b:9b:dc:ca:1f:40:e0:2f:3a:27:c9:2f:2c:
                    88:41:00:f9:7f:31:bd:fd:16:e7:e7:46:65:8a:43:
                    e0:c0:ac:67:c7:1e:4d:28:96:de:69:36:95:fe:8b:
                    45:07:17:aa:d7:75:7e:65:0a:1d:fb:77:9b:10:16:
                    9d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:62:0D:5D:2D:85:16:70:A7:00:F4:06:21:0A:2A:03:B6:02:6E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/eafebb6c-5ed0-3e04-bdb3-38f0e1ca7bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.109.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c2:04:df:8e:00:ad:3d:b2:e3:d1:c4:29:56:ed:75:78:53:
         2b:dc:cf:6c:8a:c6:fb:f4:53:2a:41:d5:cb:ef:3f:8f:45:e5:
         20:6c:80:a4:6f:04:58:db:fa:92:5a:2c:3f:ec:ea:d9:b1:7e:
         20:a4:48:9f:26:8b:6e:5f:95:e6:29:03:fb:40:4b:67:33:a9:
         ba:db:ce:ac:45:d3:97:ba:72:aa:de:6d:9d:b6:b1:84:34:a5:
         21:30:0c:88:c0:5f:0d:63:3a:29:23:13:99:f7:28:e7:36:f9:
         41:5a:6f:c1:f0:df:11:0e:e0:b0:81:f1:25:28:78:ea:e1:f7:
         f2:35:6e:e2:c9:67:26:bf:2d:88:04:68:9f:f6:0a:78:d8:88:
         ee:a7:75:e4:05:97:fb:e4:44:c8:27:d8:7f:1b:41:c4:d2:70:
         d8:90:d4:7f:a4:da:81:fd:48:8f:2b:d1:77:ba:38:d6:fb:25:
         d3:dd:3d:93:bf:80:70:93:a2:98:38:2f:c7:9b:cf:ac:06:71:
         48:c5:05:04:0c:8e:c6:ce:f5:63:4d:f9:5e:26:ed:ac:45:a2:
         45:b4:be:28:48:f5:0a:44:0c:3c:1d:5a:74:ba:70:0e:a8:e7:
         4a:5c:f0:aa:6b:af:21:4a:bb:1b:cd:22:c0:f0:35:7f:43:c5:
         23:76:6e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:58:30 2025 by rpki-client