Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/3992c86b-b11f-3d27-b70f-fb4f555c5ab2.roa
File:                     3992c86b-b11f-3d27-b70f-fb4f555c5ab2.roa (raw, json)
Hash identifier:          QBRi+9NhVhZPa18Qtxuxpgvy4x9kIUa/f8qAPQP5KXg=
Subject key identifier:   DF:70:A4:4B:CB:5A:A2:E2:91:E9:FF:88:8F:85:D5:D8:67:D1:8A:CC
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584A606C6552E93B95311375E700
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/3992c86b-b11f-3d27-b70f-fb4f555c5ab2.roa
Signing time:             Tue 01 Jul 2025 18:36:46 +0000
ROA not before:           Tue 01 Jul 2025 18:36:46 +0000
ROA not after:            Mon 29 Sep 2025 18:36:46 +0000
asID:                     20477
IP address blocks:        137.118.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:60:6c:65:52:e9:3b:95:31:13:75:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Jul  1 18:36:46 2025 GMT
            Not After : Sep 29 18:36:46 2025 GMT
        Subject: CN=6beb6906-c327-4446-8100-d09be7bb4266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:91:85:c1:d2:27:a4:65:ca:9a:81:eb:57:
                    35:13:da:9c:9f:0f:d1:da:bd:5d:d4:be:cd:61:33:
                    53:d9:05:6f:e0:4b:dd:e0:41:00:d4:2b:de:d0:cd:
                    55:72:a2:8c:44:6a:e7:c2:a3:58:a0:b2:0e:f8:8a:
                    a6:82:ef:ac:2e:69:9d:06:13:c7:2a:d9:d5:b2:27:
                    dd:a0:c9:e1:7d:2b:9d:40:9c:25:08:eb:4b:40:a1:
                    df:f3:fe:2c:ff:2f:52:86:ee:af:07:99:21:b2:f2:
                    83:a4:eb:04:e4:eb:03:18:f0:f4:6e:4a:f0:bc:5f:
                    7c:71:09:f8:8b:d9:a3:b4:be:4b:3b:c6:ac:43:9c:
                    db:8f:49:47:e7:be:c5:0c:16:ba:89:55:96:8c:76:
                    cd:c6:38:03:42:a7:f7:75:0c:16:e4:1b:f8:e7:a7:
                    b8:e8:88:f5:ea:06:af:b4:a0:a3:11:43:eb:91:44:
                    f6:43:43:eb:8c:77:7e:5d:8a:32:8f:35:2a:22:22:
                    89:41:65:aa:5f:a9:e4:a9:79:f0:a7:3d:f4:91:5f:
                    fb:1b:c4:68:99:9d:4d:1c:07:9b:de:cc:69:b9:45:
                    2a:c4:14:32:3f:b8:df:c9:b4:68:be:cf:e9:24:48:
                    15:7d:c8:17:ec:d7:d4:5a:12:d4:86:98:50:0f:e2:
                    2f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:70:A4:4B:CB:5A:A2:E2:91:E9:FF:88:8F:85:D5:D8:67:D1:8A:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/3992c86b-b11f-3d27-b70f-fb4f555c5ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:99:12:90:f1:12:5d:58:52:0b:98:55:d1:74:e0:3d:09:5a:
         e5:44:89:56:c4:71:e4:53:dc:a5:a8:59:e2:23:e1:bd:11:7a:
         79:2c:5b:72:01:77:98:56:c2:33:b9:e3:c5:36:e3:60:ff:fb:
         17:7d:be:f9:e3:d2:2a:b3:96:20:b9:30:ab:ed:b7:78:72:7d:
         bd:c2:23:d9:ec:9e:dd:ff:3e:ca:1a:88:28:13:37:c4:83:fd:
         e9:fe:f8:fd:c5:ec:e5:83:7f:b6:63:24:15:d2:ca:fc:8c:30:
         fa:27:2d:15:e1:e5:2d:34:45:46:9e:eb:53:b6:29:a3:d9:57:
         1a:96:1e:2d:70:30:d2:ae:2a:7f:9e:f2:05:d4:45:ba:f3:c4:
         31:66:04:d4:18:86:72:47:31:13:3d:70:72:eb:f4:91:48:a7:
         06:04:ff:c5:a7:0b:55:82:21:ea:ee:ae:e0:80:b0:0f:42:1d:
         28:ca:84:5f:74:e5:40:b0:e7:5b:80:98:9a:c9:87:12:a2:75:
         ff:e7:d7:5e:18:ed:8b:43:7b:6f:80:18:6a:81:d9:0d:91:a6:
         49:af:19:72:e4:dc:96:ce:2d:f6:97:20:32:3f:82:90:38:c0:
         0f:b3:b3:f5:f9:fe:30:cb:8e:72:fd:78:48:46:d4:1f:86:b0:
         3a:e0:65:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 18:49:47 2025 by rpki-client