Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa
File:                     95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa (raw, json)
Hash identifier:          jHi2DsBNoi0rBJgvrMbopMKvY9xN2Yd3pe2Pfepp1/Y=
Subject key identifier:   7B:8E:4B:D0:5D:14:82:19:4B:8E:9B:78:71:85:92:17:33:17:A0:E4
Certificate issuer:       /CN=d0677001-b062-4999-89f9-d882893f5a1c
Certificate serial:       010D0C9F4328584A63F5BF67814AC905BC936400
Authority key identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     393607
IP address blocks:        192.152.158.0/24 maxlen: 24
                          198.169.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:bf:67:81:4a:c9:05:bc:93:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0677001-b062-4999-89f9-d882893f5a1c
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=f0b17eb6-650f-4813-a83a-5b5eb561472e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:94:01:77:ef:6d:2f:f2:87:6c:cc:fe:96:90:
                    ae:e5:4b:e3:00:7e:89:a4:17:0d:a0:46:39:74:b1:
                    43:a3:9d:bf:ea:8d:d7:d5:24:98:3a:c4:23:d9:68:
                    c7:69:d6:07:ac:60:0a:bb:e5:64:d4:1a:a5:5e:24:
                    41:5e:fa:55:99:4a:e3:0b:31:92:b6:53:46:ad:b5:
                    22:72:58:27:b3:76:c9:5c:67:ae:0e:12:32:14:92:
                    62:3b:63:ea:d2:2a:3e:9d:7b:7f:14:ed:72:e7:63:
                    1d:e5:2f:99:80:2b:26:2f:d5:89:57:2d:94:c5:a4:
                    02:ee:ab:15:f4:ac:0e:a9:78:9b:64:32:aa:11:eb:
                    9a:1b:5b:4f:df:86:7a:ab:77:8c:c8:98:ae:38:00:
                    65:9b:b0:0b:9d:ea:fa:21:bd:7a:80:d0:11:04:4f:
                    b0:ad:9e:ec:b1:b9:bc:45:0b:7a:7e:43:c8:45:da:
                    f9:2f:96:26:63:8e:bf:fd:2f:dd:29:47:bb:47:6a:
                    2f:ff:61:17:27:3a:85:64:4f:69:b0:0e:35:04:4a:
                    c8:b4:ec:52:b4:7a:d8:5d:34:15:3f:ae:d1:06:12:
                    f4:a5:ec:9e:6c:9b:31:36:33:cb:dc:c3:c3:65:9d:
                    a7:29:33:87:24:15:09:dc:bb:a4:56:84:31:84:36:
                    e1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8E:4B:D0:5D:14:82:19:4B:8E:9B:78:71:85:92:17:33:17:A0:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/95106316-a0d1-3dbf-8ab2-c498c70f6c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl

            X509v3 Authority Key Identifier:
                keyid:2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.158.0/24
                  198.169.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:6b:f2:01:d0:c4:2c:2c:c3:2d:f1:1e:4b:2c:d4:12:8c:01:
         8a:6c:0b:55:c0:e1:88:01:0d:5d:16:38:90:3b:1a:53:04:aa:
         d2:e7:55:68:f4:53:09:3a:87:ac:d2:d0:66:2f:d3:6f:9b:ff:
         4a:fc:7a:f1:4f:fb:01:7a:f9:a6:78:af:99:00:e6:b1:bc:5d:
         95:c0:c2:3a:74:86:20:49:ca:0c:db:0f:9b:ba:b0:d5:c9:c3:
         a1:ab:d3:fa:6a:f8:2b:c6:d3:66:ed:ff:d9:60:62:b6:b5:95:
         16:a5:39:d6:b1:11:3b:be:57:f6:a4:1e:50:96:87:f3:ef:d3:
         e6:97:fc:10:0b:0c:22:60:87:bf:b5:36:69:fa:e5:45:1a:fd:
         e1:64:ad:09:fd:f2:8c:07:da:9c:45:d6:19:9a:f1:d4:af:a2:
         7e:b2:96:b8:52:17:d3:bc:7e:26:f3:8e:67:08:68:83:04:05:
         89:f0:ea:d0:99:78:c6:cb:36:1d:6d:12:34:a0:61:66:66:f8:
         e7:4d:38:ef:03:13:d1:e6:6d:80:e1:66:90:5a:a5:b8:f3:3d:
         b1:13:ce:a8:59:1c:32:1e:f0:d6:b5:e6:44:19:9f:9a:20:78:
         6f:a0:4a:b6:c5:b3:ef:41:d8:2d:38:ab:36:40:1c:ac:97:61:
         7d:fe:df:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:39:11 2025 by rpki-client