Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/36273f28-a723-33e1-a389-9416819cddb6.roa
File:                     36273f28-a723-33e1-a389-9416819cddb6.roa (raw, json)
Hash identifier:          pLdfprTuDQg2Vhwx1qExabJ3N385VIwTSnri8YHycKU=
Subject key identifier:   59:8F:2B:C3:A1:97:3C:95:65:05:B7:9E:A9:48:06:26:C7:02:8A:EE
Certificate issuer:       /CN=cea06048-7bc3-4b65-8443-4c600b73bc11
Certificate serial:       010D0C9F4328584AF25677E5E956A7118959AC80
Authority key identifier: 72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/36273f28-a723-33e1-a389-9416819cddb6.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     21976
IP address blocks:        159.91.0.0/16 maxlen: 16
                          192.76.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:77:e5:e9:56:a7:11:89:59:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea06048-7bc3-4b65-8443-4c600b73bc11
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=80b06d13-bb5e-46d9-91ce-323844c517bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1b:16:91:2c:4b:60:32:8c:d4:0e:4b:14:0e:
                    29:b4:51:60:ff:74:42:f0:bb:7b:53:d8:97:47:2f:
                    30:e9:6f:47:0c:bb:ba:88:05:90:ce:d7:56:64:c3:
                    eb:43:57:f4:aa:e0:67:56:d5:9a:dd:a0:96:0c:08:
                    7e:62:df:59:5b:16:59:cb:1b:a7:5c:7b:0b:b1:b4:
                    4c:96:b6:90:f4:d1:d9:a9:10:b3:f7:bb:89:a7:ea:
                    02:ac:00:81:e2:37:d4:72:50:e3:27:f8:96:d9:17:
                    3a:26:b2:f9:06:4f:50:08:3f:9e:fa:02:e2:d4:9e:
                    48:9a:e2:1d:54:37:7a:20:56:e2:32:e3:bc:99:5e:
                    29:34:1a:87:ac:39:4b:1b:a4:f2:d1:d2:f7:76:00:
                    c8:98:5c:b5:2f:4c:8e:b8:bc:10:55:5b:71:02:2d:
                    ef:47:b1:3e:b2:95:06:56:a6:2c:3c:ed:7b:53:4c:
                    7a:69:53:7c:3f:5e:6b:af:84:07:ee:70:2c:be:8e:
                    6e:b6:96:51:4d:ef:78:79:fc:0e:fa:1a:c5:a0:c6:
                    51:de:3c:24:55:f3:fc:b8:cc:ad:3d:97:25:9a:de:
                    f4:93:21:5a:f7:4b:18:f1:36:6a:99:d4:7f:5a:5d:
                    12:fc:ee:02:b5:65:35:6e:df:e2:7b:fa:f9:64:ae:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8F:2B:C3:A1:97:3C:95:65:05:B7:9E:A9:48:06:26:C7:02:8A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/36273f28-a723-33e1-a389-9416819cddb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl

            X509v3 Authority Key Identifier:
                keyid:72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.91.0.0/16
                  192.76.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:1d:09:0a:2d:34:1b:91:2d:99:13:f6:74:0e:a4:69:a5:2c:
         e2:e9:3f:e1:90:7b:a2:36:2c:78:cb:cd:b5:5a:e7:25:3a:ed:
         c0:34:b4:00:99:82:3e:03:5e:6f:14:41:44:e3:d8:73:b8:6b:
         2e:78:eb:3e:8f:94:44:87:10:0f:bb:35:2b:f2:5c:5b:fb:58:
         3b:9a:1c:c5:81:c8:2c:f3:b1:44:a9:29:ff:c4:01:fe:eb:1e:
         4b:87:71:66:15:a1:ff:2c:d5:e3:98:21:9d:d1:d7:fe:e4:35:
         e0:b4:0d:83:3c:a7:f7:36:8a:7d:14:5a:3d:5d:00:cf:61:c8:
         c7:ab:87:32:a6:16:c0:15:92:fa:22:3c:ae:86:0f:db:49:0e:
         e9:6e:52:6b:2d:37:a8:3f:05:71:1e:4c:f1:5d:29:0c:b0:72:
         73:31:88:dd:21:c4:9f:2c:a4:23:7f:35:17:8c:3f:2c:27:bb:
         91:b3:13:68:ef:43:7e:0b:7d:8b:83:0b:1f:27:45:a5:5a:5f:
         9f:47:e4:6a:f7:97:ca:44:78:a3:ed:28:0b:c6:c6:09:e1:7f:
         de:fb:fb:c5:44:6c:30:68:dc:40:f6:c5:8a:30:f5:01:01:4c:
         4d:78:ad:9e:d1:98:df:15:3b:21:8e:ce:11:9e:b7:42:59:09:
         87:35:2b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:56:14 2025 by rpki-client