Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/04779a26-700c-39da-b030-d13a28361f4f.roa
File:                     04779a26-700c-39da-b030-d13a28361f4f.roa (raw, json)
Hash identifier:          dh+e+vNZ5MrfVGDWf8WmPlZe64i1n9fANKlP6V1qNHY=
Subject key identifier:   93:FE:04:C9:B3:E9:73:A5:AD:84:24:25:D7:19:D4:1D:89:D0:F3:DC
Certificate issuer:       /CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059
Certificate serial:       010D0C9F4328584AD3A0F254332EB6F36263FAC0
Authority key identifier: 54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/04779a26-700c-39da-b030-d13a28361f4f.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     30165
IP address blocks:        205.144.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:f2:54:33:2e:b6:f3:62:63:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=7468e93f-3db4-4ceb-9492-fd7977c080b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:89:3c:36:41:7e:81:e5:bc:38:0f:be:b7:
                    45:ca:22:01:15:a8:0e:b0:88:5f:1d:54:86:d3:c0:
                    3e:dd:b8:5e:56:3c:18:30:a2:83:46:e3:35:ba:a6:
                    20:02:b5:ca:85:19:0f:95:2c:1e:8a:ef:81:e9:72:
                    1d:f3:3d:07:a1:6d:79:8d:4c:f2:5d:1a:28:96:25:
                    5a:b4:b5:f7:7e:d7:67:05:19:1a:1c:9c:ae:9d:fb:
                    8b:d6:e5:0d:50:11:be:4a:67:b2:86:1f:ba:24:76:
                    b5:63:02:26:b5:34:e7:47:88:4e:94:2f:81:ab:7f:
                    4b:fb:b3:06:72:d0:c0:03:0d:f1:19:5f:f2:8f:33:
                    5b:bc:60:8a:2e:76:b6:b1:4a:fd:08:ff:5d:62:88:
                    77:60:ad:a1:5d:53:cb:09:62:55:28:d5:f8:9c:05:
                    59:5a:63:07:41:31:15:6f:ac:f5:53:42:e8:ca:84:
                    d6:82:1f:50:64:c4:ac:ff:d4:e2:d9:f7:61:2e:d2:
                    69:0b:c0:a4:23:e5:27:f9:51:f1:58:ad:3f:6b:99:
                    57:e3:05:d7:59:07:a5:f1:0b:d5:a8:1a:b5:7d:2a:
                    61:f7:ef:c0:0a:a6:bd:80:5a:d5:0a:df:7a:62:c7:
                    cb:0d:91:12:83:75:92:aa:e8:96:86:b0:65:c5:02:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FE:04:C9:B3:E9:73:A5:AD:84:24:25:D7:19:D4:1D:89:D0:F3:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/04779a26-700c-39da-b030-d13a28361f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl

            X509v3 Authority Key Identifier:
                keyid:54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.144.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:11:85:66:a5:d8:2a:fd:e5:9b:09:86:83:4d:21:1a:83:70:
         b8:6f:c0:69:a4:b2:d9:9d:3f:ac:98:41:df:d2:36:78:17:7a:
         0a:ea:d4:9f:86:cd:53:a5:33:35:f4:47:bc:22:70:a7:63:10:
         02:dd:0f:ae:86:3b:99:b5:96:75:43:7c:11:37:77:02:f6:c8:
         5f:54:49:11:c1:bf:9a:c3:be:d8:0d:58:7f:21:70:01:ea:11:
         d5:31:61:97:dd:a0:b7:ef:9e:3c:85:40:3e:84:2e:84:01:a5:
         04:ff:83:21:14:7c:f8:1a:ae:d9:ae:cf:52:0d:cd:5b:10:dd:
         48:58:f0:54:31:7f:20:4b:2b:a4:91:5b:2d:7e:b4:fe:6e:fa:
         f6:76:0c:c8:cf:f8:51:1b:18:d8:22:05:ad:5d:8c:d6:3c:49:
         f2:b5:f2:fe:ad:7c:76:f5:f9:71:33:97:c3:7f:c7:07:0c:2c:
         43:eb:35:fb:9e:51:13:56:bf:37:96:20:10:8e:0d:e6:55:a1:
         62:cc:7a:0e:39:00:34:17:e4:2d:f1:cd:c6:16:3f:2f:97:f0:
         b2:e0:5f:43:b9:85:28:61:6a:fe:8b:88:83:e0:ec:fa:b4:38:
         ba:83:ab:75:9b:ad:2a:12:17:4b:48:09:4c:a7:7e:38:75:0e:
         a3:52:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:46:03 2025 by rpki-client