Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/31237730-031c-3a34-8009-f2ad063f0d88.roa
File:                     31237730-031c-3a34-8009-f2ad063f0d88.roa (raw, json)
Hash identifier:          bVBjTdi3nhfTKHZkgmmN0msvVgGQvY/1AFjK+dA9Y7s=
Subject key identifier:   B7:17:98:7C:D3:65:58:05:A5:23:7D:7A:86:BC:6B:F4:F4:CD:F5:7D
Certificate issuer:       /CN=85154141-f81d-4a16-94db-ba21a7f28a12
Certificate serial:       010D0C9F4328584ADD66824E82A174695B156E80
Authority key identifier: 48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/31237730-031c-3a34-8009-f2ad063f0d88.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     53464
IP address blocks:        64.20.212.0/22 maxlen: 24
                          216.38.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:82:4e:82:a1:74:69:5b:15:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85154141-f81d-4a16-94db-ba21a7f28a12
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=6d32a557-0b93-4faf-8e52-86546280d880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:03:1e:d7:fa:8e:5c:ba:92:32:bf:8c:ec:
                    30:19:24:2b:d3:e3:70:91:5e:4e:82:a4:9e:2d:61:
                    26:02:b0:c3:1c:97:ba:ff:b3:52:2e:9f:1c:95:ed:
                    ea:87:b1:2d:3c:ad:4a:5a:88:f7:ba:03:3c:aa:0d:
                    69:de:bc:2f:0b:f0:71:c7:2f:54:13:24:6e:80:96:
                    54:9f:b9:6f:e9:6b:7d:be:f8:70:6d:34:9f:72:bf:
                    f4:ef:7f:75:6e:38:dd:55:74:f3:47:41:a6:50:dd:
                    7d:89:ec:00:b3:2d:94:f3:43:a7:ff:e0:f8:67:cc:
                    4d:58:b8:6b:d6:f8:a3:e4:0c:54:02:29:38:28:cf:
                    ab:16:c3:1f:b0:2b:8c:6c:2b:57:64:e1:fd:a2:43:
                    7a:b7:44:68:7c:61:95:ac:5b:53:60:d4:45:5a:26:
                    7c:40:8e:94:79:d5:36:92:10:2d:f8:e8:43:39:49:
                    c7:db:b3:cd:0e:83:c2:c5:ae:74:ff:db:33:fb:54:
                    2b:67:9c:d0:cc:c8:2a:42:80:9b:6f:ab:53:98:7e:
                    24:79:09:4a:5a:78:43:84:6d:79:f8:b5:4e:e5:20:
                    57:ba:ca:7f:81:fb:7d:70:fd:81:84:bb:53:48:00:
                    9c:46:0a:af:b3:88:27:4e:a1:99:cb:91:a9:67:14:
                    ff:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:17:98:7C:D3:65:58:05:A5:23:7D:7A:86:BC:6B:F4:F4:CD:F5:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/31237730-031c-3a34-8009-f2ad063f0d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.crl

            X509v3 Authority Key Identifier:
                keyid:48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.20.212.0/22
                  216.38.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:5c:f8:c3:7d:66:d8:20:d0:9d:ed:b5:df:b4:3c:52:70:0b:
         d9:34:d1:cc:21:e2:6c:42:70:b6:f7:66:30:15:61:bc:40:df:
         7b:a8:2f:ab:61:12:f7:97:8b:f0:52:b9:02:b8:a8:36:28:8b:
         c2:70:81:bf:74:cf:cc:2e:4a:ce:76:a8:b2:02:b1:39:74:41:
         e8:0c:0c:4f:2d:b2:33:94:33:6c:96:24:78:51:05:3b:81:18:
         af:fb:c6:38:3a:e0:d4:a9:72:80:31:d8:51:77:ed:11:7b:ba:
         e2:bf:01:b6:9b:00:5e:d2:1f:61:57:91:6b:2e:d6:b5:ce:be:
         d6:6f:9e:ff:bd:6d:0e:60:f9:aa:87:0b:d3:5d:16:dc:57:d9:
         f6:0f:32:ab:d2:9b:c5:43:c7:ff:3e:b7:95:65:52:84:1f:35:
         1c:96:dc:3a:e3:16:a9:96:83:4d:46:1c:2d:ca:2b:21:19:b7:
         ae:07:d2:b5:cf:29:02:ca:4b:3e:55:f4:b6:ae:ec:51:fa:2a:
         05:63:6f:47:6d:d9:27:63:94:c3:c1:60:6c:b9:57:f9:08:58:
         b3:4d:b7:5e:1e:4b:83:80:87:94:aa:4c:e8:2c:df:19:98:17:
         b7:a1:85:04:c1:5b:cc:c6:eb:07:ad:17:c1:de:85:71:e4:0d:
         dd:c3:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:06 2025 by rpki-client