Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa
File:                     2f0b7f49-a633-3566-aa0c-7f199a78611a.roa (raw, json)
Hash identifier:          /oriMF8VJ9UG+TYVOySC6GJ0GtaYFsFaampGmyHWd4w=
Subject key identifier:   1F:CB:C8:F4:FE:32:67:8B:E0:F9:7C:4E:A0:F0:ED:B0:67:32:40:C9
Certificate issuer:       /CN=9c841696-0857-4d7c-8db5-21941a77450c
Certificate serial:       010D0C9F4328584A6AF0944D13571F7C1D36AE80
Authority key identifier: 62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     237
IP address blocks:        192.138.137.0/24 maxlen: 24
                          192.160.192.0/24 maxlen: 24
                          192.160.204.0/24 maxlen: 24
                          192.245.252.0/24 maxlen: 24
                          192.245.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:94:4d:13:57:1f:7c:1d:36:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c841696-0857-4d7c-8db5-21941a77450c
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=4ee5a8e6-b348-4da2-9950-5a7072cc6ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:81:e4:18:6c:49:81:69:57:5b:13:cb:b8:54:
                    50:fa:59:19:24:44:1e:c1:90:ab:a8:b1:21:bc:fe:
                    3b:80:bf:80:30:3a:44:f8:21:2b:57:d3:a7:78:e3:
                    e6:0f:96:42:91:71:c4:02:c3:4c:5f:30:5d:3e:4e:
                    b5:e0:c4:e0:0e:fb:82:78:26:49:4e:4d:9c:7b:a3:
                    13:ed:3d:c0:eb:59:fc:3b:89:da:5b:97:cb:b5:2e:
                    54:62:da:80:73:3e:e8:46:79:d5:3c:25:36:2d:3d:
                    2c:cf:4d:e3:ad:d1:ae:19:ca:88:2d:6f:2c:22:fb:
                    eb:fc:2c:7e:6e:78:35:14:c3:2b:ed:25:0e:53:fc:
                    ae:cd:21:34:c1:94:e7:9f:2e:b0:93:2f:bd:e8:da:
                    08:6d:f7:94:85:04:63:6d:38:78:86:3d:bd:a3:f4:
                    68:1a:ce:af:6a:6a:93:d3:f1:06:8a:9c:83:52:01:
                    ad:44:20:d1:bf:32:4b:e3:12:57:5a:56:21:2f:e1:
                    be:63:82:4e:5f:07:be:27:f5:4a:1e:14:f4:fa:6a:
                    ce:70:56:19:ba:0e:5f:aa:24:3f:44:16:9b:c3:6b:
                    ef:1f:f6:19:4e:bc:b1:49:6d:a4:1b:7a:a0:e4:c4:
                    15:37:9f:89:c4:74:23:6d:07:e5:fb:3c:13:42:c7:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CB:C8:F4:FE:32:67:8B:E0:F9:7C:4E:A0:F0:ED:B0:67:32:40:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.crl

            X509v3 Authority Key Identifier:
                keyid:62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.137.0/24
                  192.160.192.0/24
                  192.160.204.0/24
                  192.245.252.0/24
                  192.245.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ca:e9:a6:3c:df:ab:f6:8c:54:aa:f2:1c:c0:19:05:48:f3:
         ed:4d:8c:25:29:12:84:d4:8c:27:04:e7:8f:fc:c0:0e:9c:d8:
         b8:6f:b9:6e:58:7a:79:dc:b1:7f:64:ef:bb:33:ae:0d:47:61:
         a0:fd:5b:a4:23:73:5f:34:90:ad:d2:d3:7b:92:44:e8:25:c3:
         52:00:57:cf:03:f1:13:f1:b5:eb:05:51:95:6c:b6:71:2a:44:
         73:41:17:11:49:43:2c:99:93:db:cf:91:9d:aa:cf:65:2e:ff:
         be:3c:02:e5:c5:7d:0b:06:c4:c6:2d:95:7d:df:4b:14:0a:55:
         cb:a6:08:25:e3:2c:bb:5c:3e:77:36:1f:bc:dc:a1:97:7d:bf:
         8d:36:38:fd:d9:a4:a9:7b:f1:b8:a9:71:b4:3c:76:97:94:dd:
         f7:88:9c:79:c9:f8:fc:71:08:13:75:20:c0:3d:cd:0d:58:46:
         ca:9c:ce:7a:d2:4e:0c:b6:db:96:24:0e:2d:ef:27:0c:44:db:
         7b:f5:a6:0b:1d:bf:64:69:62:2d:9b:4e:82:ad:07:32:d5:fb:
         0d:e2:48:e2:14:fa:ee:05:4c:ef:44:fb:94:f3:28:3b:f9:ff:
         35:6e:02:d5:13:c6:b0:29:97:3a:63:11:e1:ef:e4:f8:57:ca:
         15:fe:d5:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 10 08:47:44 2025 by rpki-client