Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa
File:                     9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa (raw, json)
Hash identifier:          oNyEqLloXGgm/z3yl950gKB6Fuu0n1KOSFhE5XkGpkc=
Subject key identifier:   D9:B4:16:0F:70:8D:EE:20:78:6C:70:4B:F2:C1:32:6B:8F:3C:F5:67
Certificate issuer:       /CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc
Certificate serial:       010D0C9F43285849E225226D6E3697117BCF2400
Authority key identifier: 4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     62490
IP address blocks:        136.175.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:22:6d:6e:36:97:11:7b:cf:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=e6d06ddf-72ef-4774-bba1-da3fc93f6ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:10:83:ab:80:99:dc:75:c5:26:c4:46:c0:
                    09:0e:8a:45:a6:6e:dd:94:c5:b3:c4:30:ce:98:a9:
                    9d:b4:dc:12:d0:58:0c:b8:c5:cf:33:a3:83:e4:d3:
                    d8:39:87:89:28:6d:35:e0:bf:a1:e3:8a:55:1c:bb:
                    03:52:57:c1:d3:fd:b9:5f:ef:3e:95:9c:08:d1:b3:
                    e3:2a:31:6c:79:5e:8a:67:48:b0:3e:7e:df:31:e2:
                    b3:1a:17:4b:e7:52:87:58:5b:55:ae:ec:ec:c5:ad:
                    70:a6:82:f3:9e:40:2a:c9:93:3d:d4:d9:bb:b8:6e:
                    a8:a5:39:a4:63:88:0e:39:c9:7d:d6:88:c4:9a:92:
                    8e:8d:c9:1a:67:1b:f5:75:2e:80:7f:99:01:7a:ba:
                    1d:f0:19:fd:41:bb:a8:cf:a5:bb:31:9d:de:72:32:
                    f0:e2:01:49:97:f2:f1:58:1c:bc:b8:43:71:d7:5b:
                    ed:e0:30:38:ad:2b:63:58:5c:7d:79:bd:22:ee:4f:
                    0a:fc:9d:61:d0:57:92:5c:a8:f7:6a:ab:66:fe:71:
                    32:1b:1c:71:1a:b9:ae:b8:b8:69:fe:53:8d:c3:0e:
                    d7:3b:df:e9:28:0c:80:b3:34:29:07:75:ec:39:7e:
                    e1:9d:b5:24:5f:11:71:f5:1f:be:2b:e5:ee:e4:48:
                    a9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B4:16:0F:70:8D:EE:20:78:6C:70:4B:F2:C1:32:6B:8F:3C:F5:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl

            X509v3 Authority Key Identifier:
                keyid:4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:0e:3d:15:fe:41:f1:ae:03:1a:7a:91:3a:00:26:61:9a:0d:
         f0:0e:0e:ba:4a:12:e9:8f:74:0b:5e:54:c7:26:4f:a3:d7:ef:
         dc:35:b1:d8:02:5a:cb:b5:94:b2:7e:a1:ce:e4:a2:61:66:36:
         ed:7e:24:8d:21:41:53:8a:34:d4:72:68:f3:6a:74:eb:40:e8:
         9c:38:c1:7a:1c:ea:e1:0e:92:58:38:bf:5a:3a:9e:8a:59:b7:
         34:4c:04:99:49:37:d5:01:97:df:8c:f5:52:ef:15:34:40:53:
         f2:41:3d:c6:46:5e:bd:95:de:05:5b:4b:bf:da:2d:84:44:df:
         02:8d:b6:30:a3:83:c6:c2:70:cd:97:71:22:f9:db:ba:f5:56:
         12:b3:76:8c:fd:8a:13:94:e5:ab:be:96:d5:12:bb:14:da:29:
         fa:71:ed:b0:e7:c5:ce:98:70:9b:3a:b4:96:8b:eb:e5:06:4f:
         dd:a1:d1:16:1f:92:26:9e:e2:c0:52:3d:d3:f0:37:f2:61:04:
         fb:d3:6d:34:43:b9:96:a4:8b:c3:07:c6:51:d1:a1:95:78:78:
         71:8d:97:75:fc:3f:57:f0:57:8f:e1:ee:74:1f:e2:35:9c:5a:
         b7:5e:b2:22:35:8c:68:d6:97:06:77:ee:a0:9d:87:1e:1e:6e:
         f7:5d:97:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:46:13 2025 by rpki-client