Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/c830abb1-8081-3ae6-93ef-70c36f800c3c.roa
File:                     c830abb1-8081-3ae6-93ef-70c36f800c3c.roa (raw, json)
Hash identifier:          TN5OW/29Uj/yHvv3/Q/kzdKoF5y0BisoLte2d+MrNKk=
Subject key identifier:   19:31:A5:DD:FA:77:40:0D:A6:27:01:C8:63:28:35:E4:0C:2A:64:9A
Certificate issuer:       /CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
Certificate serial:       010D0C9F4328584AD7D115CC7A5570CBF2ADFB00
Authority key identifier: AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/c830abb1-8081-3ae6-93ef-70c36f800c3c.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     1299
IP address blocks:        104.245.248.0/21 maxlen: 24
                          146.71.16.0/20 maxlen: 24
                          160.79.80.0/20 maxlen: 24
                          161.115.16.0/20 maxlen: 24
                          192.30.160.0/20 maxlen: 24
                          2606:c440::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:15:cc:7a:55:70:cb:f2:ad:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=f21ecb75-fb50-4d47-a22b-cec866404230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:2e:5f:6d:75:13:f9:f2:0b:f0:5d:7a:10:
                    54:4c:a0:0c:23:f5:c5:b1:8c:63:fe:ef:f0:d5:20:
                    50:9d:9e:e3:dc:8b:b6:2f:16:b9:5c:e5:02:e4:bf:
                    83:d8:20:37:e0:cd:19:26:54:81:f5:aa:dc:5f:ca:
                    6c:ba:e8:63:41:ff:50:0d:4e:ff:f9:0b:51:e6:42:
                    fc:0d:b1:5a:69:f0:36:43:4e:86:54:83:0e:09:78:
                    be:05:da:14:7c:82:79:55:0e:9b:12:c7:ee:ee:49:
                    c0:0d:e3:cb:d1:5b:35:a6:26:83:f1:15:90:1c:18:
                    cd:3b:2d:14:ec:30:c7:76:5b:11:bf:57:15:34:de:
                    13:05:1b:98:b6:2c:1b:17:9d:e9:32:8d:cd:fc:b4:
                    7a:1e:c0:59:1d:b7:22:d3:42:cb:00:3e:bd:3f:be:
                    ac:3d:5b:c7:09:46:9b:ab:99:91:36:45:12:1c:16:
                    8f:72:b6:78:6b:5e:40:3f:1e:bf:67:dd:a5:9e:e2:
                    43:b0:90:4a:2c:c3:f3:b9:70:90:ee:2b:ab:cb:96:
                    aa:15:3f:f5:e9:e9:e8:08:24:09:ed:f1:0f:56:3a:
                    ff:55:35:43:8d:01:64:af:61:41:7e:f7:dc:7f:a3:
                    6f:c2:31:4d:fd:58:67:2d:42:3a:0c:36:77:5c:7b:
                    e3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:31:A5:DD:FA:77:40:0D:A6:27:01:C8:63:28:35:E4:0C:2A:64:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/c830abb1-8081-3ae6-93ef-70c36f800c3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl

            X509v3 Authority Key Identifier:
                keyid:AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.248.0/21
                  146.71.16.0/20
                  160.79.80.0/20
                  161.115.16.0/20
                  192.30.160.0/20
                IPv6:
                  2606:c440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:65:87:69:21:e6:05:26:27:40:29:82:7b:48:40:f8:d2:7a:
         b6:42:62:6b:0b:fc:4d:b7:3c:1f:62:27:99:14:1d:81:08:9f:
         d7:1c:92:6e:b1:ee:d9:8a:98:cb:56:8a:66:82:bd:70:92:1b:
         c8:3d:92:c0:79:1a:f4:14:fa:13:d8:64:2d:49:0f:14:da:57:
         27:a0:7d:08:f7:93:f4:f9:02:42:b2:ab:de:c7:7c:06:7d:e3:
         31:01:96:19:4f:2e:b0:66:5f:ab:20:84:9c:a4:4f:f3:50:fa:
         4a:99:cf:2a:12:5d:7c:0d:4e:91:d4:e3:a3:9a:7d:84:5a:98:
         89:d6:b3:9a:5e:f0:80:c1:6f:ac:f6:57:2d:90:ad:9a:a8:b3:
         cd:18:83:b2:ce:ea:e2:b0:18:a0:ff:4d:bf:34:ee:2b:a5:a6:
         bd:3c:e4:0f:f2:48:90:7a:01:62:39:47:9e:93:84:bd:0f:52:
         76:a8:cb:b2:15:58:54:19:fa:bb:bd:a5:68:a2:d4:26:c4:ab:
         1f:2f:a2:c0:2b:5f:29:16:32:89:10:fb:12:63:8c:7d:1e:d7:
         f6:37:bd:94:d7:be:1a:89:f0:12:cb:a5:ab:54:64:8f:22:de:
         c8:78:8e:ad:3f:a1:6d:2c:ef:69:50:a9:e8:79:cf:33:be:6e:
         f0:56:1c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:50:48 2025 by rpki-client