Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/889605e8-b381-38e4-9042-117f16829cdc.roa
File:                     889605e8-b381-38e4-9042-117f16829cdc.roa (raw, json)
Hash identifier:          YdUOx2ISUzdd4L/+vJkAQ0o9Umjdcm6hnQxXvgQQsYM=
Subject key identifier:   57:7E:DE:56:4B:0E:70:87:77:9E:15:E1:12:D1:53:98:9F:BE:DC:E2
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F43285849C904E776B7194373A83D6280
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/889605e8-b381-38e4-9042-117f16829cdc.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     55095
IP address blocks:        192.173.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e7:76:b7:19:43:73:a8:3d:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=9e80a513-e0aa-4350-b6ab-3a3571a4f1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cc:3d:40:4a:d9:11:92:71:e8:51:cb:e0:f3:
                    fe:26:3c:7e:dc:f5:7f:40:9d:60:08:63:9d:99:8f:
                    bd:6d:bc:97:66:48:26:cc:0e:9b:8c:50:25:f2:54:
                    51:ee:a0:1f:93:89:03:9a:f0:60:5f:c0:ab:a1:14:
                    f9:e0:db:8a:03:db:e7:64:64:40:82:0b:3c:c4:50:
                    f6:be:a7:a1:50:f7:b1:1a:e0:78:87:d2:45:91:4f:
                    15:cc:d0:fa:5f:9d:6d:17:1a:d8:07:a0:92:3a:86:
                    ef:01:24:e2:6b:44:32:8e:9e:1d:f5:e4:cb:7b:45:
                    ce:22:8a:b4:06:77:6e:38:ff:29:cc:36:e4:b7:2e:
                    ae:cb:49:18:c4:92:e0:4d:17:af:f9:ef:c3:db:77:
                    19:b4:dc:bc:67:51:a9:2a:d6:79:e5:14:24:57:96:
                    ad:ea:6b:cd:be:7f:07:6d:6e:bc:a9:53:8e:5e:bc:
                    85:9a:db:0e:e0:18:24:05:b9:d4:55:1c:75:87:70:
                    e1:46:4b:ec:bb:5e:92:0d:81:21:54:45:f4:31:f4:
                    f6:c9:73:6c:e7:22:3d:ec:33:cc:91:46:d9:da:d5:
                    e3:f8:b7:aa:d1:b2:91:18:76:9a:02:4f:0b:77:15:
                    d7:57:81:ee:42:28:14:f3:c6:c5:44:24:28:4c:e9:
                    d5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7E:DE:56:4B:0E:70:87:77:9E:15:E1:12:D1:53:98:9F:BE:DC:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/889605e8-b381-38e4-9042-117f16829cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.173.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:81:2a:7a:39:7b:03:9b:7a:ac:59:e8:44:b4:12:cd:e6:53:
         bb:eb:37:2b:1d:de:c0:70:97:ac:e0:24:3f:92:a3:6e:70:61:
         e4:46:fb:96:b8:c4:81:c7:de:2d:c4:d6:72:ba:65:7b:2f:1a:
         32:66:cf:2d:2e:8f:6c:de:1e:bb:45:fd:a2:18:6e:2a:2d:86:
         56:82:0a:9f:b8:cd:1e:10:f9:d0:52:32:02:dc:0a:a6:8e:64:
         6c:88:83:24:7f:ef:9c:5b:86:f0:9d:94:7e:8f:2d:3a:e3:53:
         7e:35:4c:92:85:03:57:27:92:5f:ec:0e:30:89:13:c4:37:b4:
         fe:43:09:7a:40:1f:4e:4f:e3:b8:fd:93:40:d6:d2:2e:25:af:
         c3:29:79:25:01:a4:50:ca:0c:40:1b:23:1a:44:62:5d:b1:f2:
         ed:db:8a:91:57:9f:6b:cd:0c:28:c6:81:e4:95:ff:fc:a1:8c:
         c5:57:03:f2:bc:6a:b5:74:bb:7c:5f:92:c7:9d:70:78:b8:a6:
         1e:9c:05:ea:71:12:90:6b:7f:f4:61:29:47:5d:02:d1:00:a6:
         47:d5:d0:8b:16:57:25:c8:d9:cc:ed:12:dc:19:8b:3f:56:ae:
         f9:ec:b9:dc:8e:11:50:c3:92:5b:b9:86:54:1a:39:19:45:68:
         9c:8e:0e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:26:14 2025 by rpki-client