Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6987ceea-b04a-3ae2-a40a-d28cb3c0c962.roa
File:                     6987ceea-b04a-3ae2-a40a-d28cb3c0c962.roa (raw, json)
Hash identifier:          PqgBlYveFFrG7vEIK0Dc1ihF14+f54DLnhXprZxGQsI=
Subject key identifier:   9A:8C:4B:D3:85:A7:C9:0B:F3:EA:86:0F:5B:57:6B:A4:AA:A9:31:2B
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584AECC13FFB7B6018BB4E14FF60
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6987ceea-b04a-3ae2-a40a-d28cb3c0c962.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     395886
IP address blocks:        104.143.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:3f:fb:7b:60:18:bb:4e:14:ff:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=8fc81407-1eed-4dbb-9eff-0ffe18546d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:59:ae:0b:63:39:13:37:54:f7:90:b3:bd:93:
                    74:e1:4a:c6:65:e1:30:db:71:47:48:fb:a8:d2:4e:
                    92:c1:49:fa:e0:b2:2a:e6:a9:20:f0:3f:23:a5:57:
                    49:94:73:34:f9:af:ba:61:d4:19:2f:bc:b8:23:d4:
                    ad:65:f3:fc:f0:16:a2:20:aa:96:fd:98:0a:c0:ff:
                    01:fc:83:3a:83:cd:8d:cd:ce:ad:9a:cf:49:1a:80:
                    2f:e4:b0:cf:89:74:f2:3a:4a:f9:e9:a8:d9:f9:8d:
                    3c:e7:2e:1b:11:fc:f5:d5:56:2b:51:fb:11:5b:76:
                    3d:77:d1:5f:f8:c5:1c:f1:c5:db:55:fb:47:55:de:
                    f6:79:56:bb:57:01:1a:92:2f:0a:33:cd:09:2c:85:
                    7a:b8:e3:8a:bf:42:84:60:96:b2:0e:b6:b1:d4:6f:
                    39:6a:31:11:ef:07:78:1f:10:66:55:d6:55:98:cc:
                    8e:67:47:42:23:29:b2:59:36:d4:cf:99:90:a5:55:
                    a0:93:1d:7f:4e:45:5f:ff:7c:28:08:2e:4c:3f:ea:
                    0a:54:22:c1:16:46:42:dd:d6:45:b3:47:2a:74:93:
                    a7:58:92:e9:80:3d:eb:1f:11:9a:af:ab:f4:01:0c:
                    f1:0b:c3:a7:a4:99:ad:87:52:cd:6f:57:fe:59:84:
                    48:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8C:4B:D3:85:A7:C9:0B:F3:EA:86:0F:5B:57:6B:A4:AA:A9:31:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6987ceea-b04a-3ae2-a40a-d28cb3c0c962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.143.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ff:18:68:e2:47:6d:bc:a4:44:11:c6:07:71:61:ff:c5:18:
         ee:49:6c:80:e0:6e:0f:07:cb:dc:5b:26:48:6b:47:9e:94:41:
         c5:22:28:b2:4c:bc:53:14:96:2d:42:04:a4:02:90:85:50:85:
         98:cf:d4:c7:ff:a9:9e:e1:cf:75:ef:c7:f3:ec:d8:c0:c2:05:
         48:1b:bc:ea:3d:20:5d:58:d4:d6:13:b5:14:77:dc:e0:51:c6:
         f9:d6:a8:4e:27:a3:cc:8a:84:0a:a4:53:c7:c4:2f:91:76:e4:
         d5:67:88:99:1c:9d:29:2d:2a:7e:43:4e:c5:f0:e8:9d:17:3c:
         25:4c:4d:14:b6:2c:58:3a:b6:8a:fe:b9:c7:3e:41:17:2b:15:
         9c:a7:42:a7:e8:6f:d5:41:0f:d2:99:21:1e:8c:4c:1b:38:1d:
         01:76:8f:19:64:38:eb:0c:59:16:85:df:ee:ac:51:6e:ee:f0:
         c8:df:c1:ae:f6:85:0b:cf:94:22:c8:e3:68:dc:67:04:a3:41:
         ba:eb:4d:ee:d6:6e:9f:70:89:fe:7b:34:58:a6:60:6f:4b:de:
         91:43:55:d7:a8:82:20:52:9f:86:05:76:5c:90:df:e5:ee:13:
         a9:7b:5d:02:32:a3:62:e0:1b:f7:60:ad:ca:9b:0b:8b:fd:4d:
         d4:bf:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:06 2025 by rpki-client