Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/41149ca8-84ee-3c37-b491-83ba1a424870.roa
File:                     41149ca8-84ee-3c37-b491-83ba1a424870.roa (raw, json)
Hash identifier:          +BVOj8rcVNdjJ0BleW9liYQkdAz/1IQxuSN2+FMfOHs=
Subject key identifier:   AE:66:5E:8F:66:F0:EB:D3:16:5C:44:77:FA:2F:6B:39:9C:1D:D2:FA
Certificate issuer:       /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a
Certificate serial:       010D0C9F4328584ACF70FD8B18946F3EA1815600
Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/41149ca8-84ee-3c37-b491-83ba1a424870.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     22413
IP address blocks:        69.173.192.0/19 maxlen: 24
                          69.173.224.0/21 maxlen: 24
                          192.96.23.0/24 maxlen: 24
                          192.124.126.0/24 maxlen: 24
                          199.66.96.0/22 maxlen: 24
                          199.68.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:70:fd:8b:18:94:6f:3e:a1:81:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=5192f531-cb7f-4c74-92cc-253ae8642a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5d:e6:38:d4:0c:74:de:10:ef:d9:20:f0:81:
                    1b:8f:8b:19:22:c1:ee:03:8a:33:cf:58:16:fa:ce:
                    06:7e:57:5b:3e:65:ab:16:49:57:fa:be:86:9e:36:
                    80:6b:48:5c:c1:f2:af:70:05:2f:ee:c6:d4:12:53:
                    a7:2f:62:36:b5:01:3e:6c:75:18:a5:2d:59:a6:f1:
                    16:ac:3f:97:98:69:50:82:ef:cd:be:3a:21:16:09:
                    3a:26:de:07:4b:c8:e9:b1:c7:4b:6d:65:94:ba:56:
                    5b:a9:44:fc:f3:2e:e3:07:6b:78:6f:ad:a3:6f:54:
                    53:53:63:c1:b6:20:10:7b:0b:5d:df:81:a9:9d:5e:
                    76:95:5a:f6:8b:0e:32:c8:5c:36:91:3d:23:a6:aa:
                    04:24:39:31:85:20:26:53:f3:21:4d:9f:3b:3d:8d:
                    19:cd:cd:bf:74:1f:88:8e:12:b1:0e:e0:9e:e4:37:
                    f4:b7:ed:06:d9:dd:a4:a7:b5:25:ca:f0:ee:4c:92:
                    9a:18:0c:95:9b:97:53:c6:90:ee:16:19:b5:a6:cb:
                    74:98:37:23:3b:e2:d9:54:56:53:58:5c:3c:1f:df:
                    5b:93:33:92:f7:1d:d2:a1:67:50:9a:f8:3f:69:9e:
                    7f:1d:e8:67:91:6e:d5:91:d0:d6:df:02:9c:04:ab:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:66:5E:8F:66:F0:EB:D3:16:5C:44:77:FA:2F:6B:39:9C:1D:D2:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/41149ca8-84ee-3c37-b491-83ba1a424870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl

            X509v3 Authority Key Identifier:
                keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.173.192.0-69.173.231.255
                  192.96.23.0/24
                  192.124.126.0/24
                  199.66.96.0/22
                  199.68.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:32:f8:10:78:8e:6b:5f:81:0a:a0:3d:5b:be:4d:c5:80:f9:
         c6:76:7d:a3:f5:98:e2:d1:48:52:24:d0:ab:19:ea:76:b6:f2:
         60:a7:81:c6:c5:fb:7a:a8:c9:0d:11:9a:e7:52:d2:a6:38:c2:
         11:b9:5a:6f:47:89:e3:85:bf:01:9c:3b:c4:39:48:f9:46:68:
         68:bd:e5:99:ca:9c:a2:1e:de:17:72:e6:40:7d:cd:94:a6:24:
         2e:3e:a4:99:f8:93:f1:41:94:a1:a4:b3:1b:bb:7e:5b:bc:4a:
         48:90:8b:4f:d4:8f:30:d5:6c:f1:07:55:90:ff:dd:4e:ce:f8:
         ef:ce:c8:40:d0:15:8e:bb:a5:bc:f5:ad:48:9e:1e:27:ba:f0:
         6f:d3:ae:2a:3d:1d:6b:23:9d:59:88:77:09:dc:a0:a5:19:13:
         4b:e6:3a:68:7b:89:b8:c1:ea:b0:54:2c:ed:1f:25:d8:29:f1:
         bd:cc:02:84:3b:a5:b8:2b:92:30:bd:2b:c7:6e:ff:d2:1e:00:
         b6:33:74:f9:87:2d:32:9a:a1:0b:86:d8:bf:c9:f9:73:a6:3d:
         c5:38:2f:17:8c:b7:99:41:42:05:35:82:15:49:75:3f:74:a0:
         43:3f:bd:4f:00:52:8a:86:7a:40:d9:88:2f:06:68:75:b5:72:
         74:a6:4d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:23:46 2025 by rpki-client