Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7df5ac20-fb24-3d08-9e0c-c415cbd5c2cd.roa
File:                     7df5ac20-fb24-3d08-9e0c-c415cbd5c2cd.roa (raw, json)
Hash identifier:          PIgLtjhagb7j2jV9rDNHMIt4LL9FLL3lm3TNLBDjwSM=
Subject key identifier:   5F:23:8D:1E:A7:BF:0A:17:44:6E:D5:A2:C9:59:E4:A8:E9:C0:76:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031247F6073D06A87E71000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7df5ac20-fb24-3d08-9e0c-c415cbd5c2cd.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        174.163.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:24:7f:60:73:d0:6a:87:e7:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=dceefee5-013d-448d-8c11-0da088d4646b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bf:66:39:56:1b:c2:2c:7c:b7:54:52:09:41:
                    b6:50:3e:ff:e5:56:a2:7d:fe:8e:5e:81:2c:17:19:
                    dd:18:ad:a3:5b:46:a8:8a:bb:5e:36:82:69:30:49:
                    31:f4:d8:7b:c7:3c:46:3a:b5:b2:d2:11:c8:b6:19:
                    a3:d7:f2:24:0a:d8:b2:09:ad:8a:e2:7c:b2:5f:9b:
                    66:c4:23:01:be:24:e8:68:ac:89:f8:17:b7:04:67:
                    43:c2:38:a4:4d:83:fa:d0:b0:46:96:14:ae:d6:f5:
                    24:27:15:6a:ef:8f:b4:49:cd:7c:ce:bd:33:c0:44:
                    05:8d:18:87:d2:9c:f0:ba:5e:45:8c:b1:78:49:b6:
                    33:a5:98:79:64:0f:0a:f3:ee:5e:8b:29:e8:7e:81:
                    c8:53:46:c5:70:92:31:4d:d4:88:c4:3d:4c:3e:ab:
                    9f:65:b7:4f:d7:12:58:4c:af:80:31:6c:0a:3a:ef:
                    ca:e4:0b:fa:23:ac:cd:5d:00:e7:d7:7d:31:17:3b:
                    94:56:32:9c:f9:75:8a:01:a6:f9:2e:0a:1d:56:db:
                    d1:d3:cd:be:8b:54:5b:af:79:58:bc:39:c3:53:b3:
                    24:37:19:c5:3e:30:ed:92:22:ba:5c:b1:b1:08:c4:
                    7d:36:74:e7:9d:6d:8e:09:1c:19:3d:49:b1:5b:70:
                    60:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:23:8D:1E:A7:BF:0A:17:44:6E:D5:A2:C9:59:E4:A8:E9:C0:76:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7df5ac20-fb24-3d08-9e0c-c415cbd5c2cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.163.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:cd:ad:f0:83:aa:25:60:d1:b0:0b:5c:79:51:b9:0e:39:5d:
         0f:00:38:87:35:d9:98:6a:28:b5:ea:9c:26:9a:1e:4c:78:02:
         65:21:43:b6:8d:b5:fc:33:bd:cf:de:ee:e2:97:8d:df:61:46:
         e2:16:dd:98:cd:50:50:d4:59:fb:1d:1a:0e:49:9b:45:f1:16:
         67:ca:07:90:7a:f3:81:ce:71:21:48:c3:dc:e7:7f:0e:95:dd:
         6f:44:38:fc:ff:bb:07:e6:0c:5f:0c:a4:c4:5c:f5:95:fe:8f:
         ec:45:07:24:9e:a1:40:fc:cc:d1:bf:ed:74:e2:36:42:18:f8:
         92:cc:7c:4d:43:70:57:e5:64:3d:da:07:0d:13:00:3d:a4:1f:
         f4:3d:80:c8:99:47:e1:b9:79:11:34:3c:0d:a6:a7:c9:e5:96:
         fb:4f:6e:eb:65:15:b7:fa:5a:c0:ec:4f:87:6d:0e:90:00:04:
         e6:b8:a3:78:d6:51:a5:67:bd:2b:04:c6:49:32:62:72:9a:35:
         4d:af:b3:76:e3:d9:6d:c5:f6:30:00:19:79:a6:34:96:9e:71:
         76:80:db:53:d5:46:eb:2f:50:22:74:49:f6:79:5a:07:9e:06:
         fd:c9:ea:cb:de:6a:5f:28:c6:4b:51:bf:38:68:40:81:e8:93:
         75:37:e7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:25:07 2025 by rpki-client