Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/487572cc-5dfc-3688-b80b-974e65fad34a.roa
File:                     487572cc-5dfc-3688-b80b-974e65fad34a.roa (raw, json)
Hash identifier:          fndrdrHKqeWIASG1j2DIH9W3BIpnfM2eKzAzVCZyf1c=
Subject key identifier:   1E:70:CF:74:9F:8A:FA:04:7D:0E:DD:6C:28:73:FA:97:31:E0:FE:79
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584AF256774FB5898094F3F92400
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/487572cc-5dfc-3688-b80b-974e65fad34a.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        155.226.208.0/20 maxlen: 24
                          155.226.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:77:4f:b5:89:80:94:f3:f9:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=30ff7752-ed57-4fb9-87a9-de79817fbdc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:d4:74:8e:23:92:aa:a7:d9:d8:06:ef:b7:
                    49:f0:85:7d:df:fe:19:99:8e:3f:79:74:9f:02:39:
                    ac:ca:a7:3c:e8:36:af:59:29:fd:53:09:5d:ad:4b:
                    c9:b8:02:9c:65:3b:de:5e:59:ae:3d:0e:0e:c6:57:
                    81:f4:de:6f:42:19:69:ea:b5:d3:5e:9a:78:e0:7e:
                    f5:d7:87:98:f7:44:aa:fc:0c:d2:a7:a1:d6:98:11:
                    d6:e7:0d:43:2a:2c:9f:9a:a7:8c:b4:34:6d:b9:7b:
                    b9:92:55:de:d8:c8:5f:49:df:bc:a2:be:13:98:5c:
                    84:bf:b9:6f:d0:01:bd:ce:a3:32:c4:21:a1:96:a9:
                    7c:eb:0e:5b:2a:e5:64:da:1a:16:b0:35:f9:10:96:
                    0b:36:e7:5a:0e:de:e7:2b:8f:62:d5:6f:a7:94:1e:
                    23:9d:17:e6:97:14:c5:10:00:e3:46:90:50:3d:6f:
                    d7:a6:d5:a9:a1:86:22:f0:b0:27:d6:db:80:ca:8f:
                    17:8a:c0:25:2c:5d:5f:72:8a:9d:cc:a0:74:89:c6:
                    34:81:b6:7c:62:94:a8:81:90:8a:86:a5:84:56:36:
                    d8:f1:19:3b:f5:f0:88:ea:41:7f:fc:a9:98:3b:51:
                    14:a9:f6:36:c9:56:00:db:a7:c3:a5:9f:46:8a:e4:
                    b1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:70:CF:74:9F:8A:FA:04:7D:0E:DD:6C:28:73:FA:97:31:E0:FE:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/487572cc-5dfc-3688-b80b-974e65fad34a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.208.0-155.226.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:53:40:6d:5a:a3:4a:a1:dc:00:f0:4a:10:e8:8c:c5:0c:eb:
         b2:84:cd:59:51:b1:02:d5:01:77:a1:7f:88:71:3d:ff:12:16:
         cb:b8:71:0e:52:5b:22:56:ec:54:4f:ef:74:ea:7d:58:5c:57:
         e2:fc:00:aa:49:08:f9:0a:1c:bd:18:cc:59:e5:03:ac:32:93:
         a1:4f:af:de:eb:55:6b:29:59:fc:42:a7:c3:29:db:9f:6f:91:
         dc:59:f0:d5:12:4e:bf:f0:07:f6:bf:8f:e5:fb:a4:41:a2:a1:
         7c:47:37:d2:7a:ad:ed:a5:70:81:da:7f:a2:98:5b:47:b0:8a:
         4c:33:bd:fe:aa:7c:65:41:d7:49:65:fd:34:3f:ab:56:b3:36:
         f2:43:f8:a5:ad:89:a3:78:3a:27:cc:07:81:f8:c3:65:ab:f3:
         7a:be:eb:33:31:05:cd:dd:cc:9a:fa:cd:be:fa:3d:b3:06:5f:
         16:8d:4e:d1:52:23:68:b5:3c:6a:52:d1:47:4f:1f:2d:ea:9a:
         08:99:60:a7:99:fe:e0:34:8a:49:2e:9d:82:4c:73:9d:2d:d4:
         1a:da:65:25:c4:c5:11:9b:c7:e1:e4:f6:2a:d0:e4:ad:42:af:
         f1:12:81:1f:7e:5b:73:3b:c4:ed:0e:78:d2:cd:78:2e:6c:f6:
         b2:97:62:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:08:02 2025 by rpki-client