Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/6e3bdd4e-23da-3ea7-a98d-f3367e185dc0.roa
File:                     6e3bdd4e-23da-3ea7-a98d-f3367e185dc0.roa (raw, json)
Hash identifier:          DVHoIHG0/k/9rHQAW1hw2e2bYwVYKEwE70GIrgLgs3M=
Subject key identifier:   3D:7B:B6:35:1C:D0:51:FE:02:5C:BD:D3:A5:88:A8:2C:F9:6C:48:BB
Certificate issuer:       /CN=d0677001-b062-4999-89f9-d882893f5a1c
Certificate serial:       010D0C9F4328584A612B1F8587E48D3BEE8EFEC0
Authority key identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/6e3bdd4e-23da-3ea7-a98d-f3367e185dc0.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     27628
IP address blocks:        198.169.125.0/24 maxlen: 24
                          198.169.127.0/24 maxlen: 24
                          198.169.132.0/24 maxlen: 24
                          198.169.133.0/24 maxlen: 24
                          198.169.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:1f:85:87:e4:8d:3b:ee:8e:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0677001-b062-4999-89f9-d882893f5a1c
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=b886ed3c-ecfd-401b-9572-3fef31977f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:b9:0c:0a:fb:f9:66:da:5c:60:90:ee:92:
                    a9:3f:47:be:1a:f9:64:97:56:cc:92:bf:12:c9:12:
                    e5:d3:8b:03:b1:5a:74:b3:db:f6:96:0b:17:ec:5d:
                    a2:92:cc:fb:33:2f:a0:2f:38:a5:03:d0:14:95:d2:
                    40:b5:00:af:4a:af:d9:56:96:91:3e:b9:6e:8a:df:
                    53:44:2e:c5:ed:0a:71:b6:46:53:e9:65:0d:48:77:
                    68:d0:7b:a9:e5:5c:e6:61:fc:6c:bc:cc:a7:80:01:
                    7c:82:f6:98:a3:8d:23:3c:85:b8:77:a4:6c:a8:d5:
                    49:89:dd:bc:50:2c:2f:2c:27:96:a1:ac:be:b2:e5:
                    97:3a:57:7a:ef:78:d1:b8:99:ff:6d:28:0f:e2:dc:
                    62:f1:e9:61:c5:e2:b8:d7:69:ca:18:62:89:8d:16:
                    27:68:55:63:44:6c:36:7e:86:d0:30:67:83:f2:fc:
                    dc:ed:80:0d:35:97:6b:c0:bc:29:de:ed:b3:01:08:
                    ec:f6:14:0c:b1:97:a3:3d:d9:69:7b:b3:59:c7:ee:
                    2e:22:28:d5:f9:8b:42:dc:9f:0e:e1:1c:24:a1:f2:
                    1f:32:cd:01:6f:33:3d:8f:45:61:71:ef:20:47:cd:
                    c6:fa:a2:b1:c9:92:76:22:f4:91:1b:3d:04:9f:e6:
                    15:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7B:B6:35:1C:D0:51:FE:02:5C:BD:D3:A5:88:A8:2C:F9:6C:48:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/6e3bdd4e-23da-3ea7-a98d-f3367e185dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl

            X509v3 Authority Key Identifier:
                keyid:2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.125.0/24
                  198.169.127.0/24
                  198.169.132.0-198.169.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:bd:ee:97:63:a4:be:cb:f9:aa:b1:6e:99:21:48:c2:c5:35:
         3a:98:af:c6:e8:b2:bd:89:57:ba:87:6a:c1:14:e8:95:06:c0:
         c2:a2:a4:20:a8:6f:11:a1:8a:f3:0d:79:86:59:16:16:3c:10:
         dd:8c:c5:84:06:d0:07:9f:31:e2:5c:b4:e4:ef:41:68:1e:54:
         c3:ad:de:58:aa:8a:db:db:cd:31:19:92:52:51:1d:27:2a:7a:
         6a:0f:ef:1b:d9:5a:98:66:c8:f3:e4:17:1d:e8:e0:65:fb:98:
         33:0e:01:1b:c5:b2:1d:69:7b:df:ce:15:55:10:0c:84:a8:2b:
         42:c0:3c:1e:27:86:1a:7d:78:e8:c0:90:5d:fc:2e:6c:d0:17:
         28:2a:dc:27:f5:fa:03:2a:52:af:3c:ab:00:d8:6a:5b:72:fc:
         e3:46:98:e9:89:9a:90:d6:df:32:39:dc:b8:5e:15:52:3c:00:
         a5:fa:ff:08:c0:4a:8c:16:11:70:db:ea:f0:c9:97:36:68:52:
         81:79:35:14:db:f7:1a:ab:61:bf:28:c9:84:b4:6f:a0:34:06:
         9a:39:51:61:7f:a2:b4:7a:ed:dc:db:92:98:f6:da:9f:84:c1:
         c0:5d:2a:3c:e0:c6:97:e8:26:57:4f:8f:6f:eb:82:89:e9:53:
         be:74:01:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:24:53 2025 by rpki-client