Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d6a3954a-281e-3441-b4f0-d432435afda3.roa
File:                     d6a3954a-281e-3441-b4f0-d432435afda3.roa (raw, json)
Hash identifier:          +bPMENBF7g+meFt+E5CTeeEaLVbrhu1+FON0re0SX+Q=
Subject key identifier:   AE:39:B4:EE:56:E0:E2:F0:3D:67:6B:80:2B:32:79:CF:EF:A4:85:59
Certificate issuer:       /CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a
Certificate serial:       010D0C9F4328584A6DBB3BD9738279B07CE42580
Authority key identifier: F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d6a3954a-281e-3441-b4f0-d432435afda3.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     31898
IP address blocks:        192.35.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:3b:d9:73:82:79:b0:7c:e4:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=6b0d5499-6c1f-423f-8f2f-f5cf6746730e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9d:af:fb:2f:fe:69:a3:94:fb:05:63:67:df:
                    52:16:2c:8f:e9:3e:8e:1a:c0:77:56:be:b3:6f:e4:
                    74:ef:b1:86:6c:c6:8d:d7:3c:a4:b4:1f:41:21:b0:
                    3d:41:0c:78:14:53:0a:cc:45:c4:5e:b0:69:1c:d6:
                    09:19:d8:56:55:e0:46:26:5f:51:8e:47:6e:87:9d:
                    3e:b9:a2:f7:00:2d:d1:d1:e8:de:0d:9f:9e:97:98:
                    9b:af:a5:a7:da:e8:18:13:ac:4e:de:71:37:34:60:
                    9d:14:fd:7c:c5:6e:7b:c8:1e:d0:97:0a:56:fd:bd:
                    77:af:13:eb:65:61:2c:8a:10:6e:de:5e:8c:42:42:
                    46:a0:a4:31:79:2f:0f:9f:26:e5:c4:8a:8a:e3:6d:
                    2f:db:25:06:33:d1:f3:c5:46:25:5b:af:59:5b:17:
                    cf:ae:b1:b1:fa:e6:51:1b:79:5e:a2:d0:ea:6c:45:
                    3c:88:9c:4b:b6:a3:ad:14:57:a3:11:ff:5c:14:b1:
                    e9:53:a9:7f:7f:77:ac:f8:58:70:4a:1c:35:98:e6:
                    20:49:08:d6:31:2c:05:7b:78:af:97:3f:59:00:48:
                    b4:9f:a2:aa:72:a4:09:3f:06:98:00:45:9b:c9:94:
                    9e:87:a0:fe:82:d7:3a:14:5c:bc:ed:1c:ce:d1:d9:
                    67:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:39:B4:EE:56:E0:E2:F0:3D:67:6B:80:2B:32:79:CF:EF:A4:85:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d6a3954a-281e-3441-b4f0-d432435afda3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a0:a4:fa:a5:9b:9d:da:95:a1:a5:18:06:27:8a:25:fb:3e:
         dc:0f:26:3c:db:79:50:97:2f:f5:ca:f9:9a:5e:ec:8e:be:af:
         6f:cf:2b:db:6e:bd:ee:85:ed:0a:1e:a9:48:db:21:07:ab:d2:
         72:15:be:64:67:90:07:c9:a8:57:27:ce:95:cc:a4:cd:00:ce:
         61:55:70:c5:be:7e:b7:e8:01:9d:64:80:e5:b8:e2:9e:50:d0:
         e6:1f:76:d2:57:59:81:b5:17:30:32:2d:8e:2b:fe:f5:8d:d6:
         3a:4e:b5:e5:a9:f2:bf:05:17:0b:3f:09:4d:46:5f:84:6b:1a:
         44:35:9e:06:3c:93:dd:c1:8a:63:02:20:29:74:3f:67:a3:75:
         5c:38:0d:63:16:0b:b3:3e:d4:9a:96:d3:2e:8a:13:0b:08:7a:
         da:d6:36:0b:9a:79:4e:a6:c6:2b:b0:41:52:4c:7e:9d:34:9d:
         01:e2:37:53:74:40:30:96:e9:01:18:8b:f1:7a:53:60:69:f8:
         5e:95:b7:01:71:68:f1:ce:51:73:64:c7:8f:17:f1:45:d8:b4:
         2e:63:34:16:cc:90:a9:6c:0f:40:55:31:38:47:b7:16:0b:95:
         b4:71:0d:ad:4b:01:a3:ae:35:f8:52:c2:7c:8c:e2:a5:7b:aa:
         e3:69:a6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:34:14 2025 by rpki-client