Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4aaba14-e935-386d-a66a-5f8a5674acb5.roa
File:                     c4aaba14-e935-386d-a66a-5f8a5674acb5.roa (raw, json)
Hash identifier:          H/8U22pg4S+BNaPXaPYVDY6pU8GRWWvMRvbDQ7DGKGM=
Subject key identifier:   8F:EE:F8:C7:D6:DF:07:16:A5:97:73:A8:B1:A3:0A:24:38:6B:EB:B5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AECC58EE2902C320B67B10400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4aaba14-e935-386d-a66a-5f8a5674acb5.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     6939
IP address blocks:        143.109.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:8e:e2:90:2c:32:0b:67:b1:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=86f0b734-9215-4102-bffd-a8b4f430069b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:c2:b3:49:b4:09:d0:59:d6:ed:1a:e4:6c:
                    c3:e0:97:39:13:bf:3d:7c:7b:bb:34:42:3b:17:c9:
                    fe:d2:7c:8b:63:9e:d3:7b:64:4c:9a:ad:83:a7:9c:
                    4f:01:1e:c0:a7:94:75:4b:4b:a9:40:d6:74:9f:a8:
                    47:60:87:ab:1f:41:39:af:f2:88:c5:18:7e:79:0b:
                    a9:43:da:8c:e6:09:56:9e:a1:2e:37:e1:29:db:55:
                    2f:0c:75:ef:a0:c9:db:a8:f6:03:ed:25:50:01:82:
                    2d:08:bf:44:44:dc:7a:76:5a:19:62:bc:0a:a2:a8:
                    85:54:b0:88:42:cf:b9:d5:35:3b:e9:e0:c4:1a:4a:
                    16:8d:e5:e1:77:2c:c7:72:e8:97:e4:ff:44:07:71:
                    54:a3:4d:fd:bc:5c:5d:9c:c2:dc:d3:3e:85:e0:0a:
                    38:28:ed:f0:cb:56:42:7c:89:a4:31:a5:8a:95:0c:
                    e3:b6:73:99:62:65:17:04:b6:ed:db:23:7a:1a:a9:
                    dc:da:d9:6d:07:0b:fc:17:a9:ef:d1:a9:94:a9:a9:
                    19:04:9e:40:2c:c8:6b:f5:0e:b7:2a:9a:5d:c9:3c:
                    35:23:53:6d:e2:ae:37:de:24:89:d0:92:33:dd:2e:
                    cd:db:a6:e0:3b:08:09:9f:29:36:79:cf:11:1d:c0:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EE:F8:C7:D6:DF:07:16:A5:97:73:A8:B1:A3:0A:24:38:6B:EB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4aaba14-e935-386d-a66a-5f8a5674acb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.109.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d2:b6:06:e8:45:e1:1b:3d:4d:26:5a:79:94:f5:0b:3f:a0:
         eb:f3:b6:ce:85:84:e7:3e:00:59:62:d3:8d:61:3f:de:9f:88:
         e8:c6:84:41:02:7f:46:b2:93:ff:35:e4:74:d5:99:ec:38:8a:
         52:7e:8f:c0:fe:9c:28:e4:96:62:69:c5:f7:24:13:ae:e5:43:
         38:e9:8d:32:67:09:b4:51:80:b6:48:28:49:6c:70:9d:75:23:
         5b:b8:03:1d:b4:b9:59:b3:2e:32:e7:e9:a8:44:8a:fb:a2:5a:
         63:2b:bd:00:c4:97:fb:b7:e7:5b:57:69:0c:a7:c0:4a:df:c7:
         55:88:27:97:fd:57:db:d9:5b:3b:6f:7d:ef:7e:5f:a1:7f:9d:
         17:e6:f7:db:14:49:0e:31:a6:bf:f7:ec:64:62:36:66:8a:88:
         d8:2c:99:2a:48:00:db:bb:bf:8d:bd:94:f8:b2:14:fc:c0:b6:
         9e:d4:05:f0:f0:03:f8:d5:f8:fe:d2:da:50:f7:d8:55:6a:68:
         66:5d:4f:50:a5:f6:78:26:ed:46:d7:78:17:0f:39:de:94:99:
         d1:c7:59:b7:1a:16:ae:41:d7:90:f3:37:5c:da:47:c1:2b:fd:
         92:09:28:e8:21:f3:7e:85:7a:45:98:0a:89:a4:fe:16:76:f9:
         a8:54:1c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:34:11 2025 by rpki-client