Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a89ccf3a-2e5c-374d-b90f-2bb83d96de24.roa
File:                     a89ccf3a-2e5c-374d-b90f-2bb83d96de24.roa (raw, json)
Hash identifier:          bSPECQyLS1LgXoe8jE1kLrtWkqRhe/PMLkBE134ZRss=
Subject key identifier:   A6:71:11:8D:22:0D:0C:BC:F6:02:DF:C9:3D:F8:77:59:B1:AA:29:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031A69BAE1865834EC5D580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a89ccf3a-2e5c-374d-b90f-2bb83d96de24.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        174.163.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:a6:9b:ae:18:65:83:4e:c5:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=796d1cb1-5a8f-4b53-87e1-92a7aea2b1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:63:b3:76:60:91:30:7e:ce:3f:6e:bd:cf:
                    dd:46:18:f5:05:c0:6c:67:be:04:89:14:8e:ea:53:
                    39:76:a3:85:a0:e5:92:92:84:91:24:30:79:03:dc:
                    4b:38:0c:82:95:7d:8f:ab:19:3a:dd:66:83:c8:54:
                    24:40:f2:44:10:e0:c3:2c:b7:9c:b5:3a:fa:66:75:
                    8f:04:83:73:74:65:5c:f2:da:fc:f0:d1:d1:e3:d2:
                    d5:3d:48:08:99:10:9b:6c:39:6f:69:a6:67:6f:e2:
                    af:d8:84:95:e5:8e:d5:39:30:62:ab:da:87:b7:65:
                    1d:28:f2:b2:bc:4c:ec:00:90:3e:31:fd:3d:88:9a:
                    c5:38:fc:61:df:33:67:8d:d8:8c:ed:6f:8f:1d:9a:
                    df:d5:26:71:a3:3a:66:af:9b:bc:2d:ad:c7:c1:87:
                    6f:db:5e:41:11:f5:a5:a3:62:8d:4a:37:22:28:4c:
                    fa:4d:8a:df:6f:c2:59:08:89:57:14:68:30:1e:86:
                    57:3e:19:0f:3f:c6:5a:23:ea:92:8f:39:87:ee:7f:
                    d2:31:d3:f8:1f:43:f4:e7:ba:ea:e0:c5:49:af:30:
                    50:88:59:00:fb:b1:aa:36:5c:24:08:15:69:7f:c5:
                    2e:a9:4a:69:d6:ce:81:cb:6d:4f:50:92:7e:5b:64:
                    11:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:71:11:8D:22:0D:0C:BC:F6:02:DF:C9:3D:F8:77:59:B1:AA:29:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a89ccf3a-2e5c-374d-b90f-2bb83d96de24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.163.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:aa:fd:dc:37:1c:14:e9:58:6d:98:07:c4:9f:ad:27:50:84:
         50:33:f6:17:7b:bb:c9:bf:ef:24:2a:a2:28:97:ff:f7:a4:3e:
         7e:91:91:68:ba:27:ba:ba:c5:49:8f:32:be:25:23:6d:71:8b:
         9e:4b:d7:64:d8:82:e2:a9:72:27:eb:89:fe:ec:13:da:9c:ce:
         bd:39:33:8d:92:f3:a2:68:5e:27:c6:f4:74:01:9b:c9:07:db:
         6d:bc:44:7a:80:20:21:e3:45:98:05:75:90:24:07:88:ea:cf:
         82:ac:2d:72:5e:58:55:2e:45:e7:d5:a2:d5:98:cb:2c:f2:d8:
         b5:34:4d:b2:cd:7b:4e:63:e8:ad:b4:92:a7:5f:79:ca:0c:3e:
         3d:d6:c7:45:64:93:35:04:7d:05:95:55:17:43:e1:fa:bd:9c:
         b6:12:71:3d:62:7f:ef:a6:27:2a:36:41:b1:aa:55:1e:f4:fe:
         a4:d6:8b:24:b4:b8:af:df:09:e0:48:3c:04:26:40:fe:6d:fa:
         42:11:a7:ed:cd:32:60:3a:cb:a0:7d:69:c0:2e:52:ef:49:62:
         82:61:47:81:9d:cb:f3:a0:aa:78:55:a8:05:bc:ab:28:ae:37:
         12:dd:45:c1:13:d3:d6:38:c2:32:da:e4:66:8c:bb:8f:4a:9d:
         13:99:5c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:52:54 2025 by rpki-client