Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/3daa9504-2bdb-32bf-a3b7-989249f38e37.roa
File:                     3daa9504-2bdb-32bf-a3b7-989249f38e37.roa (raw, json)
Hash identifier:          C0KdSDB9aBuJoIbey2lSG3KjfU/s6KWDQ8e7EjAUlBY=
Subject key identifier:   DB:19:BC:54:4D:6C:60:15:42:7F:8D:6A:F1:40:46:E8:E7:0F:8B:85
Certificate issuer:       /CN=5800ea8d-189f-4c54-a7db-ac5337e035b5
Certificate serial:       010D0C9F4328584A5FC5F563C055BACB480744C0
Authority key identifier: 01:6D:F7:C7:02:F6:27:93:96:61:54:16:7B:6B:C1:26:2E:67:D8:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/3daa9504-2bdb-32bf-a3b7-989249f38e37.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     7922
IP address blocks:        165.137.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/5800ea8d-189f-4c54-a7db-ac5337e035b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/5800ea8d-189f-4c54-a7db-ac5337e035b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:f5:63:c0:55:ba:cb:48:07:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5800ea8d-189f-4c54-a7db-ac5337e035b5
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=e8ec5d94-11fb-4f4d-bbd8-428155121ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4a:0e:a3:c2:fe:1c:9e:c5:35:40:f3:ce:e6:
                    58:e7:a4:13:c4:cb:4b:1d:ac:2f:dc:98:42:8c:b7:
                    81:4a:e9:d9:24:b2:2f:69:52:4d:e8:f1:b8:88:3b:
                    97:fe:71:9e:b2:58:40:00:62:26:08:4c:ba:ff:a1:
                    5f:54:f9:4f:f5:6e:90:0e:4e:63:84:ed:1e:f2:2c:
                    10:18:56:41:a9:c2:37:92:32:9d:3a:f1:23:79:0d:
                    bd:eb:c7:8a:21:8f:83:66:fb:a9:bd:8f:67:f3:52:
                    34:32:95:42:df:c1:55:c6:11:c8:0a:dc:92:92:18:
                    3e:ad:20:21:30:6f:8b:02:49:cb:d5:fd:a1:e7:89:
                    4f:6a:9f:93:04:96:8e:59:11:59:91:70:9c:77:98:
                    b4:9c:ad:a6:a2:87:22:86:8c:21:8c:b4:2d:8b:b5:
                    ff:72:75:f9:74:09:f3:c8:77:eb:a1:7e:41:b5:b6:
                    ba:ac:80:d8:58:e8:75:e3:94:06:b5:92:ea:bb:77:
                    41:46:86:1e:f6:74:96:74:e5:4b:6e:ae:3c:c7:de:
                    5e:80:e6:8f:0c:eb:26:9d:04:a4:d7:44:60:26:80:
                    3f:2e:bf:60:05:12:c4:45:55:df:ac:09:eb:6f:ca:
                    af:d9:e2:21:fd:aa:a1:47:cb:73:55:4d:8f:4d:3c:
                    10:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:19:BC:54:4D:6C:60:15:42:7F:8D:6A:F1:40:46:E8:E7:0F:8B:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/3daa9504-2bdb-32bf-a3b7-989249f38e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5/5800ea8d-189f-4c54-a7db-ac5337e035b5.crl

            X509v3 Authority Key Identifier:
                keyid:01:6D:F7:C7:02:F6:27:93:96:61:54:16:7B:6B:C1:26:2E:67:D8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5800ea8d-189f-4c54-a7db-ac5337e035b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.137.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:11:47:f6:91:97:c7:b7:a0:bd:da:70:1f:7f:0a:a0:7a:36:
         24:74:cf:d8:1c:9f:67:ee:11:97:4c:71:6c:3f:00:62:da:5d:
         69:d0:7b:4f:b4:78:e5:08:34:4e:f4:ea:cb:2b:5e:9c:29:54:
         23:7e:ca:09:da:42:1b:a6:15:a1:31:29:35:c7:4e:e0:17:98:
         e0:92:65:d5:c0:0b:3b:63:de:7b:cb:e3:47:c5:70:4a:b6:99:
         97:81:d2:bf:12:21:56:0a:7f:69:fb:40:2e:be:27:2a:57:6b:
         3a:b6:3b:4a:d5:e1:12:c8:f4:ce:eb:1d:f1:6d:9a:eb:fc:94:
         f2:b4:3c:a0:e7:7f:6b:e6:f0:52:ed:4e:1b:49:a9:3b:97:79:
         91:7a:83:71:dd:c1:87:e7:14:13:2f:5a:95:33:3f:21:09:ec:
         a6:9b:1d:f4:4d:b4:ab:44:9d:64:73:5d:2c:bc:34:93:27:4e:
         72:d5:99:87:72:0c:de:1c:9f:83:6c:ee:2c:ae:49:e5:13:fa:
         04:0c:ef:16:9c:a5:0c:b8:52:0e:84:39:33:39:70:d3:74:00:
         6f:76:84:04:80:a3:d1:03:5e:bc:5c:3f:c2:85:75:ce:41:cd:
         32:be:37:18:eb:3b:02:a4:99:6e:c6:bd:f9:15:78:35:cc:ef:
         ff:16:96:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:29:26 2025 by rpki-client