Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/c002fbe9-5207-3be2-a079-cef5745e622b.roa
File:                     c002fbe9-5207-3be2-a079-cef5745e622b.roa (raw, json)
Hash identifier:          Ylw+l+c/VgocabD1Ep6WMFchijtUEeRiJyT3weInsbM=
Subject key identifier:   95:10:6D:6E:48:EB:30:D1:B9:68:63:78:43:7B:01:D9:65:88:A4:6F
Certificate issuer:       /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial:       010D0C9F4328584A74298FF425280B089681C180
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/c002fbe9-5207-3be2-a079-cef5745e622b.roa
Signing time:             Tue 08 Jul 2025 20:18:16 +0000
ROA not before:           Tue 08 Jul 2025 20:18:16 +0000
ROA not after:            Mon 06 Oct 2025 20:18:16 +0000
asID:                     11659
IP address blocks:        169.147.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:29:8f:f4:25:28:0b:08:96:81:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
        Validity
            Not Before: Jul  8 20:18:16 2025 GMT
            Not After : Oct  6 20:18:16 2025 GMT
        Subject: CN=134376e5-222b-42ca-9e8c-e8d7dbe8a620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:20:39:86:88:02:96:ac:bd:cc:6e:55:50:37:
                    23:2c:36:ba:fb:ce:20:e6:48:f1:ba:b6:db:54:12:
                    52:21:80:4f:f1:dc:1e:8b:b4:e5:eb:ea:fc:d4:9e:
                    ec:3a:b4:81:59:2a:de:e1:58:cd:2b:87:82:a4:01:
                    3d:00:59:3c:c0:0a:79:4e:ae:3b:15:78:d8:b9:a6:
                    0f:c9:44:df:f6:d6:26:33:5d:50:1c:89:a0:59:62:
                    5f:de:a4:f9:09:bd:8d:a2:0e:cb:3c:78:fc:47:83:
                    33:e6:26:52:a5:82:96:63:51:f6:be:a8:b8:1f:9a:
                    6d:ac:fe:6c:ca:81:60:b8:9f:af:a3:7e:d5:b0:fb:
                    01:dd:2a:a2:55:23:28:dc:03:e9:90:4c:27:a6:9a:
                    8c:f6:ca:c9:fa:e1:f1:42:f3:96:d9:36:d1:d0:97:
                    d5:7e:33:03:f6:48:6b:f5:7a:95:e6:8f:a8:71:bc:
                    a6:9c:73:f1:f3:32:ea:de:50:f0:65:ae:a3:0b:17:
                    8a:02:08:fb:31:1e:38:d2:ea:ca:75:ce:f3:df:88:
                    62:76:7b:32:f5:61:6f:e9:d1:8e:2c:83:9a:cd:8d:
                    e2:66:10:1b:ff:21:9d:8c:90:47:0a:13:33:86:3e:
                    e2:84:33:88:57:e8:0e:bf:7a:ce:45:e5:81:f8:46:
                    52:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:10:6D:6E:48:EB:30:D1:B9:68:63:78:43:7B:01:D9:65:88:A4:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/c002fbe9-5207-3be2-a079-cef5745e622b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl

            X509v3 Authority Key Identifier:
                keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.147.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3d:f6:38:1b:e8:f2:49:d5:16:a8:d4:d6:11:a3:ab:29:02:
         56:a8:1a:d6:e9:c6:cf:52:39:26:b3:17:41:5e:47:93:6e:c9:
         03:36:30:74:a7:b2:12:88:8a:f4:5e:b9:15:1d:4d:67:95:40:
         e3:98:c5:e1:6a:15:e5:76:a7:6c:08:19:31:7f:3b:27:de:96:
         cb:28:6b:c0:63:9b:fd:29:ea:60:e6:68:b4:ff:d2:74:73:72:
         df:6d:ee:8f:f2:b0:7e:5c:0d:83:a6:98:39:c6:52:c7:90:e7:
         97:07:48:f7:83:7a:1d:9a:57:a9:4b:15:20:45:33:cd:c9:6a:
         c6:82:ff:fb:ed:51:1e:4f:9e:b0:15:f9:d3:a4:5d:32:0f:21:
         db:12:46:70:b1:f4:ec:6b:6f:a5:c2:d6:0f:15:ad:bb:7f:78:
         ea:80:b8:4a:3d:1f:89:2a:cc:67:96:49:77:8b:2a:7c:57:4e:
         d5:64:11:23:89:b3:fc:6c:50:05:9b:05:c2:e4:93:d1:91:1a:
         29:cd:aa:26:96:7d:fb:dc:a4:bf:09:25:23:52:6b:89:99:96:
         a6:e9:90:1c:ca:3e:19:3d:c3:65:5e:ad:f5:5f:c6:9c:d4:f1:
         26:14:4e:d2:29:9f:a7:cf:98:55:9b:7a:11:14:59:00:20:3a:
         72:57:77:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 20:07:57 2025 by rpki-client