Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/71691dd0-339d-3ff3-bd94-03c5ce6dbf23.roa
File:                     71691dd0-339d-3ff3-bd94-03c5ce6dbf23.roa (raw, json)
Hash identifier:          LfcGyVz8sN/SxkHeqekwG8XjbfHeJ3Axsx/3xQZJu/s=
Subject key identifier:   FC:8F:DB:13:88:B4:68:3B:19:F6:9D:09:0C:62:E1:67:80:40:9E:08
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584AE0311B4A46E466B550EC6C00
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/71691dd0-339d-3ff3-bd94-03c5ce6dbf23.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        108.179.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:1b:4a:46:e4:66:b5:50:ec:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=b46acbdc-7a00-4b43-8ce7-b9fb411af8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:da:9d:51:55:40:6c:79:81:47:a8:46:c6:
                    f1:18:04:11:d6:41:41:aa:ff:e4:21:c4:b8:3d:b8:
                    ce:af:84:a5:99:b7:9e:cf:2b:16:e2:cc:25:a4:17:
                    71:1a:a9:5d:6d:39:3b:9e:01:96:8f:e4:92:30:8f:
                    1b:35:71:4a:a5:f1:f5:1e:6b:cf:26:cb:2a:e6:c3:
                    cc:bb:30:5e:75:d4:bc:91:61:1b:c8:8a:8c:6e:bf:
                    b6:57:73:41:6c:8d:6e:03:0b:c5:fd:17:29:eb:89:
                    40:87:1d:a7:9b:27:ed:72:e4:0c:12:3c:e2:19:a2:
                    48:4f:11:c0:40:ee:d0:19:d4:8e:98:fb:44:6f:aa:
                    a8:33:de:50:26:7d:47:62:42:ef:dc:05:15:a6:60:
                    13:0e:d7:6e:c1:b7:b2:80:f5:6d:b9:7a:bf:83:82:
                    ed:d3:41:84:a7:b1:ce:01:d9:59:ce:b7:00:49:50:
                    2b:c9:a9:fd:d7:50:e8:f5:bf:ce:f1:95:74:ed:30:
                    ad:89:2a:e7:e7:ab:ec:a3:dc:f8:6a:2f:74:97:9c:
                    c9:75:e7:ff:d0:18:04:61:71:e3:a8:92:34:b8:2e:
                    60:65:ab:51:c8:8c:7b:53:05:2a:2a:7a:70:ee:ec:
                    59:0d:58:96:f4:97:36:97:da:53:1d:e7:8a:b6:e9:
                    12:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8F:DB:13:88:B4:68:3B:19:F6:9D:09:0C:62:E1:67:80:40:9E:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/71691dd0-339d-3ff3-bd94-03c5ce6dbf23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:80:40:fc:3c:d7:85:41:57:af:0d:94:96:c0:ef:00:7d:8b:
         2e:0b:24:e1:22:44:b2:d2:7c:b7:b7:53:ad:54:9b:45:2c:79:
         7c:8d:04:02:7d:c1:e7:f8:5d:73:3c:10:a2:87:60:e6:cb:b5:
         82:2b:30:71:9d:a5:c1:e2:2f:90:bb:f3:c3:85:92:7c:e4:cd:
         da:f7:93:19:10:48:1b:c6:a1:dc:95:ef:bf:6d:6d:60:54:a2:
         52:0b:69:c5:16:84:28:87:80:3d:50:ba:12:fb:04:95:b5:f9:
         a3:00:98:5a:2d:49:f8:92:f6:d8:08:7b:f1:48:a4:2d:bd:7e:
         61:3b:4c:9b:dc:45:18:8a:fc:b1:27:d0:d5:d7:73:aa:7f:7e:
         dc:31:fb:03:17:6b:b5:44:50:63:b8:c2:29:5b:60:ac:29:82:
         d3:c7:d1:75:4b:e3:3b:ac:35:f3:66:d7:f1:93:ad:68:a4:6c:
         84:51:81:7e:b5:89:89:86:62:cb:8a:d5:69:b1:06:d5:c1:82:
         35:20:ed:9c:4c:64:cd:23:d8:79:5d:68:fc:b4:9a:bd:a3:5f:
         09:36:e4:ac:23:db:8b:02:0c:f3:5a:b8:95:c4:bd:fa:38:82:
         a0:86:94:6f:ce:a2:fb:2d:74:32:ce:24:56:57:09:02:ca:cb:
         89:b0:cd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:01:22 2025 by rpki-client