Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a0ee2dc-d772-3a6c-9662-b29647d34ae9.roa
File:                     1a0ee2dc-d772-3a6c-9662-b29647d34ae9.roa (raw, json)
Hash identifier:          DVzZlrDzs3CsdFTA6sw+FruzXebHKBdPbOGpHIk9w9o=
Subject key identifier:   0F:60:6C:CC:12:22:70:BD:9F:71:C0:B2:38:8B:8E:DF:51:53:72:E3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE196644F24016CFA0ABE5D60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a0ee2dc-d772-3a6c-9662-b29647d34ae9.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        184.145.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:64:4f:24:01:6c:fa:0a:be:5d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=42550a3a-3e8f-45fe-8c36-d443c407c18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:dc:f6:32:1b:23:63:7e:88:1d:e9:e2:2e:
                    4d:da:74:b9:02:ff:f6:90:de:2b:66:85:60:ae:0b:
                    6d:c1:d2:d9:77:62:c1:0c:5a:1f:c6:d4:1e:b7:bd:
                    4f:f6:96:24:9b:e1:55:fb:b7:ca:33:06:ec:4e:27:
                    7a:6d:93:3e:7c:fb:7d:42:a0:c9:aa:2b:79:77:3a:
                    ce:64:14:f0:e0:aa:70:0f:df:76:ea:28:83:e3:ac:
                    99:2a:5d:6a:79:12:d1:e0:47:78:27:f8:9f:fc:50:
                    41:1c:a4:43:57:65:55:93:b6:5e:68:e7:2b:4e:53:
                    b7:5b:46:d0:a5:57:72:f5:6a:d8:4b:1f:a5:42:79:
                    1c:f2:17:1d:8e:73:f9:a7:0b:f1:ee:e8:53:af:81:
                    41:79:bd:e5:0a:65:b7:9e:c7:93:e4:e9:3d:09:24:
                    ba:6e:f6:a7:ab:98:37:bb:ee:ac:19:f0:bc:53:28:
                    de:c4:ef:05:c8:aa:d7:f1:ce:18:ef:1f:7a:66:0b:
                    3b:b9:af:91:68:4e:d9:a6:a5:84:4a:a9:58:87:40:
                    cf:dd:57:70:77:dc:25:08:3b:9e:77:a8:d0:b7:b3:
                    a0:80:cf:2d:8e:a3:c2:77:b7:d5:a0:6b:81:8c:08:
                    76:c9:f4:1d:bb:c1:6e:fe:2e:87:05:32:88:66:cd:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:60:6C:CC:12:22:70:BD:9F:71:C0:B2:38:8B:8E:DF:51:53:72:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a0ee2dc-d772-3a6c-9662-b29647d34ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.145.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:4d:81:da:57:7a:4f:f3:88:ed:29:c6:06:37:64:d8:48:4c:
         48:1e:13:d1:42:46:e0:89:e0:d1:b9:a5:c0:bc:a1:e0:78:e1:
         6e:20:d8:d7:ff:7a:af:8a:a1:54:17:b0:b1:47:d5:ab:38:63:
         6d:ec:94:2d:4f:e2:bd:fe:af:49:89:5c:3c:8b:8f:95:e2:74:
         f7:4c:2d:81:9e:92:75:aa:fd:93:74:76:a2:bf:30:00:66:61:
         cb:27:e4:18:28:2b:11:89:4c:f9:4a:34:02:c3:e3:b3:21:b1:
         a1:01:61:50:a4:d5:06:9e:09:15:73:1b:a5:20:35:38:9e:8b:
         de:22:2d:43:ea:bd:b8:c9:64:be:14:5d:be:14:a5:f7:bb:70:
         9f:cb:43:a9:b3:9a:82:79:32:2b:7c:34:56:74:67:0b:de:d9:
         63:78:a9:c0:4b:cd:cf:8b:c0:9b:c4:e5:69:de:30:8d:39:ae:
         43:44:2c:40:ff:e3:63:c9:3d:e3:19:cd:c6:b5:c8:71:0e:39:
         2b:49:9e:0b:80:dd:ea:2c:ea:10:09:65:65:3b:b7:cc:27:da:
         e6:8e:5c:bd:26:ec:fe:22:20:18:a3:a7:d2:c8:ae:56:77:61:
         d0:5a:3d:a7:08:cb:b5:5a:16:1e:f6:32:fc:2c:01:38:83:d2:
         3a:e3:ed:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:30 2025 by rpki-client