Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/1e3d4f97-753b-354c-81de-02471daecfb2.roa
File:                     1e3d4f97-753b-354c-81de-02471daecfb2.roa (raw, json)
Hash identifier:          6wgbulhJNDIA6uYIoQSPBk+JlxcXjLGa5Q5KydOOM9c=
Subject key identifier:   C5:0E:B9:22:ED:DE:A5:0C:B6:81:37:2D:9C:D8:43:0D:59:72:30:6D
Certificate issuer:       /CN=2e8d8d1c-a3ef-40e2-991a-97642dddd6ac
Certificate serial:       010D0C9F4328584AE9F66E3DBDEE32B3EBEBD680
Authority key identifier: B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/1e3d4f97-753b-354c-81de-02471daecfb2.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     3477
IP address blocks:        137.75.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:6e:3d:bd:ee:32:b3:eb:eb:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8d8d1c-a3ef-40e2-991a-97642dddd6ac
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=7ad1ea4c-7f94-4cbc-85a4-ee653a74800f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:66:9b:5c:08:f4:26:d2:9b:5b:2c:ff:0c:c7:
                    95:9d:96:16:9c:c8:ef:d9:e2:a5:e1:34:85:06:7b:
                    1e:3d:a7:c7:f0:60:d9:b5:e3:e6:51:54:c5:0a:17:
                    0f:36:4c:dd:1c:da:bf:f0:11:1f:69:dd:b4:87:2b:
                    e1:15:eb:00:1c:68:ae:7b:db:19:e7:1f:8e:19:b3:
                    39:08:e1:c8:8f:7d:b4:d1:fc:93:6f:f0:7a:28:1e:
                    9a:9e:c5:19:49:57:68:86:8a:6c:94:82:b8:ea:0e:
                    c0:16:50:d3:ae:ce:47:7d:6a:49:5c:f6:2a:98:91:
                    63:dd:6e:64:50:c8:52:0c:8d:0d:26:2a:76:60:6d:
                    6f:84:18:d7:15:15:c3:8d:63:d7:a4:26:49:1e:89:
                    39:28:e9:1e:70:33:5e:7c:64:c0:bc:ab:5a:2e:62:
                    d8:ea:c4:93:8e:a7:2c:a9:94:ce:10:58:85:02:08:
                    7a:6a:12:b3:6e:6e:f1:25:94:b5:d9:d1:44:59:16:
                    0a:f2:cb:75:37:66:7d:d2:6c:44:6e:7f:cb:34:10:
                    7e:58:61:46:ab:b5:41:a7:be:dd:9e:69:5f:21:7a:
                    dd:5d:07:9f:32:57:90:43:4b:0d:cb:a0:c5:a5:cf:
                    6b:07:5d:ae:a3:16:90:e1:9c:30:8a:d2:af:cb:99:
                    7a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0E:B9:22:ED:DE:A5:0C:B6:81:37:2D:9C:D8:43:0D:59:72:30:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/1e3d4f97-753b-354c-81de-02471daecfb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl

            X509v3 Authority Key Identifier:
                keyid:B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.75.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:60:ea:c7:42:4c:58:5b:9d:75:88:30:3a:5c:05:8f:74:b4:
         d6:bd:9f:dc:45:ef:c9:a8:cd:82:1d:71:71:e8:5f:28:67:ea:
         da:09:ad:7c:e7:a6:62:12:30:30:41:8e:24:e8:a3:54:69:0d:
         68:de:8d:f2:91:89:6c:45:ea:65:ac:59:99:cd:1b:d4:84:9a:
         90:16:56:5d:b2:50:9b:51:31:b5:e6:95:90:41:8b:d1:31:08:
         75:3e:c3:ad:94:1c:d1:5a:26:64:f5:2e:56:02:5c:ad:25:61:
         10:dd:bf:06:e2:90:7f:9b:e5:3d:7a:0b:7b:8e:6f:23:d5:cf:
         94:98:b9:22:ec:87:34:4a:c7:42:bb:1a:dc:23:71:88:11:80:
         95:20:71:96:27:b7:21:f1:03:92:a9:cb:13:df:49:ce:fb:cd:
         99:aa:82:28:e8:46:b2:36:7e:ba:ff:4c:ef:47:5c:de:dc:89:
         6e:71:d9:83:c0:43:d8:31:41:1c:bb:f3:ee:f2:fa:f1:15:c9:
         45:6b:00:31:85:95:80:6a:49:52:31:f2:61:ea:0b:71:14:4c:
         ba:ab:9f:90:4b:c9:cb:c9:d3:36:9e:17:76:c3:00:30:00:a7:
         f0:00:af:25:d2:5e:37:32:2d:3d:ec:dd:da:ea:9a:99:dd:15:
         4c:ae:cf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:13:08 2025 by rpki-client