Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/93834f65-a3ba-3857-b729-416fa6f923af.roa
File:                     93834f65-a3ba-3857-b729-416fa6f923af.roa (raw, json)
Hash identifier:          MLldEx4Y9Ca0/BTpIVJuLvy87MsBv7+Cu2W4Sv9HuHg=
Subject key identifier:   0C:DB:B4:97:18:F4:13:28:07:EE:35:A1:D8:EA:70:D1:59:A4:A2:3E
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584A606C675BE03EFBD320A53580
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/93834f65-a3ba-3857-b729-416fa6f923af.roa
Signing time:             Tue 01 Jul 2025 18:36:47 +0000
ROA not before:           Tue 01 Jul 2025 18:36:47 +0000
ROA not after:            Mon 29 Sep 2025 18:36:47 +0000
asID:                     20477
IP address blocks:        137.118.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:60:6c:67:5b:e0:3e:fb:d3:20:a5:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Jul  1 18:36:47 2025 GMT
            Not After : Sep 29 18:36:47 2025 GMT
        Subject: CN=dd302a06-1a94-42a7-90e1-9c9bef86b0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:65:5d:bb:87:6c:0c:37:f4:2b:56:53:35:81:
                    59:06:e7:96:f3:1c:a9:e3:e0:17:3e:7a:bb:ae:12:
                    8b:ba:ad:5c:ee:57:df:f1:94:ff:df:71:4e:ba:78:
                    76:23:41:c5:53:be:7a:61:78:6b:9e:c8:00:f9:7e:
                    58:68:b5:2f:8f:3d:1e:c5:38:20:7c:4d:ab:f8:b9:
                    52:62:74:c2:01:b3:8b:bd:55:30:63:ba:f6:22:bd:
                    ff:c1:d0:44:e1:94:a0:63:bc:11:c3:fe:94:43:a1:
                    16:57:c3:f7:85:bc:bc:a7:a9:34:17:05:dc:38:f2:
                    a8:23:04:df:c1:3e:8e:f1:b9:bf:5a:cb:ba:43:f5:
                    14:f8:87:dd:b5:fb:c9:96:5b:17:29:6b:a7:a6:28:
                    c7:ff:58:6c:9f:f3:00:1a:4f:22:88:14:d9:d3:b7:
                    54:44:ef:28:6e:b0:38:f3:7a:4a:00:83:16:88:b0:
                    24:a6:ca:f9:7e:93:09:a1:8d:b2:63:31:80:75:21:
                    64:b8:20:e0:41:a9:e8:76:39:42:8d:c5:b4:44:ac:
                    3e:49:1d:81:f6:74:e5:44:7f:c9:53:b7:59:77:f8:
                    f0:9d:e9:2f:67:e1:f6:f3:16:07:80:87:cf:c3:36:
                    d6:f7:e0:02:7e:7e:9e:bd:81:b8:38:bb:dc:6a:4b:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DB:B4:97:18:F4:13:28:07:EE:35:A1:D8:EA:70:D1:59:A4:A2:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/93834f65-a3ba-3857-b729-416fa6f923af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d2:56:0d:54:be:c2:c6:95:22:ae:4a:6d:f3:23:fb:06:7e:
         fd:a5:97:aa:1c:55:8e:ea:0f:2a:59:02:e7:09:1f:43:a3:3d:
         11:99:60:e9:5d:9d:f8:23:7c:13:ae:bf:e7:e5:ab:4f:86:58:
         49:50:ae:7d:fc:cd:75:7f:37:cd:5a:c5:02:66:4d:87:35:2a:
         6d:bc:74:e4:78:99:4a:10:aa:68:ff:a1:ea:a5:fc:92:5e:0b:
         bc:3c:4e:e5:d0:37:62:2f:ad:04:92:71:c2:47:0c:2e:00:f2:
         2b:52:2e:9a:1f:bc:3b:4e:d5:58:7b:a4:fd:c8:d6:e7:27:5b:
         8b:37:5a:38:91:f7:69:c7:e7:c9:d9:2f:07:f7:bb:63:e2:95:
         28:87:16:e2:1c:05:25:20:38:05:db:5c:08:eb:b1:cd:f6:8d:
         93:f4:fc:2c:e3:90:67:eb:4a:92:05:de:dd:ce:ae:7c:3a:33:
         32:af:92:3c:36:6b:80:88:52:32:6e:50:00:09:e3:1f:4b:d8:
         af:04:34:c2:e7:a9:c1:8b:a9:ef:8c:f2:3a:5b:d6:a0:c7:fb:
         75:ab:39:e8:d8:2b:5b:3d:b0:c7:14:4d:4a:6c:87:e7:dc:b3:
         f2:af:3f:f8:1c:83:c2:40:4e:70:c2:2e:42:15:dc:f7:8d:d7:
         86:b5:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 19:28:25 2025 by rpki-client