Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/791de0f2-89d2-3bf0-8407-e85b17cab367.roa
File:                     791de0f2-89d2-3bf0-8407-e85b17cab367.roa (raw, json)
Hash identifier:          4iAyA2y8/dX/LVx/B/R/bZ0WSf0uDRrc3urhMPr1l08=
Subject key identifier:   8B:FE:94:EF:DE:90:28:74:FD:15:2F:9E:9D:F8:FD:D7:DE:B0:DE:D4
Certificate issuer:       /CN=d84f9350-fc3d-4239-80bf-db10d2462a4f
Certificate serial:       010D0C9F4328584AE4610FE9A31900E1BA93E158
Authority key identifier: 67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/791de0f2-89d2-3bf0-8407-e85b17cab367.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     16545
IP address blocks:        192.74.220.0/22 maxlen: 24
                          2602:ff80::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:0f:e9:a3:19:00:e1:ba:93:e1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d84f9350-fc3d-4239-80bf-db10d2462a4f
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=1fea2a7d-42e0-4b56-ba60-7dc0562f4d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:46:c1:3f:b9:36:00:80:a4:cd:06:aa:83:
                    9d:74:2d:ef:e8:76:fe:09:ec:83:a0:7b:9a:89:f6:
                    7d:4f:3c:b6:0b:8b:b5:a8:51:6d:86:36:0d:04:9f:
                    63:8e:50:02:92:5e:c5:32:24:7c:e8:e4:ab:f8:84:
                    dd:7a:4f:3d:d3:43:b0:bb:7c:62:1f:7f:ed:60:50:
                    a8:6e:a5:8e:cb:56:66:56:e1:67:0c:89:fc:15:e4:
                    de:52:97:00:c9:3a:b7:e4:c9:89:59:48:d2:97:0e:
                    96:31:9c:73:b1:bb:d0:b6:67:b4:cc:96:1e:25:c7:
                    fc:ad:49:7e:20:d7:ef:14:6b:1a:96:c5:49:31:0c:
                    32:78:b3:fa:77:76:34:4d:2a:c0:5c:9e:58:67:eb:
                    f1:39:39:d9:dd:0f:cb:24:5b:21:99:ea:e1:cc:e4:
                    57:58:29:02:97:dc:61:bb:fb:5b:6f:f5:3e:10:d6:
                    a7:63:c0:a5:97:50:c6:39:86:d3:11:61:ae:68:17:
                    5a:b4:5d:5c:b6:65:8d:c9:3e:af:e3:4c:66:a1:33:
                    e8:f7:57:2c:98:e6:cd:0e:ab:2b:fc:f0:a5:21:29:
                    07:56:74:bf:3a:4b:bd:a2:5c:0d:a5:7d:e4:1d:67:
                    69:73:7e:0b:2b:c3:a0:4d:7d:05:43:ad:4f:45:3a:
                    91:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FE:94:EF:DE:90:28:74:FD:15:2F:9E:9D:F8:FD:D7:DE:B0:DE:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/791de0f2-89d2-3bf0-8407-e85b17cab367.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.crl

            X509v3 Authority Key Identifier:
                keyid:67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.74.220.0/22
                IPv6:
                  2602:ff80::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f6:be:e8:bb:52:43:c0:51:e3:98:9d:87:4b:53:b1:de:a7:
         89:e1:51:69:c4:cf:e9:41:3e:29:8e:6f:d9:ed:ac:4f:9d:50:
         15:56:d5:30:9d:73:cc:75:4c:5c:31:55:16:71:44:22:e3:1d:
         87:c3:9d:ee:2c:23:e2:8a:d2:08:4c:c5:b0:e3:8c:b0:2b:d4:
         86:4b:ef:70:be:09:5c:19:6a:63:73:63:cd:59:b6:98:11:cf:
         73:26:0c:07:4d:ef:1b:4c:cc:9d:b5:3e:6c:4a:5c:6f:d6:9d:
         ed:03:30:16:c7:55:6f:d2:c9:2d:5e:24:d0:a6:f6:4d:ab:7c:
         eb:8f:0a:9a:3b:70:c0:1c:12:b6:a0:98:47:d1:63:c8:07:e1:
         ad:7a:94:1a:6a:11:07:38:c1:5c:45:75:31:54:0d:47:cb:77:
         8d:f5:ca:e0:b2:77:04:a4:aa:a1:96:17:8f:68:be:97:24:18:
         ab:89:fc:ac:5b:9d:4b:3a:53:80:db:9f:99:b0:d0:50:71:d3:
         7c:01:41:f6:71:8a:c0:86:f9:61:c5:c5:24:6c:7b:ab:ab:97:
         91:2e:96:5a:f3:68:30:a4:c3:2c:55:4e:97:50:c7:0e:76:08:
         76:f9:3e:04:b9:0c:12:99:ab:c7:02:b5:d9:0f:84:2c:d8:bc:
         91:ac:db:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:05:08 2025 by rpki-client