Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa
File:                     4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa (raw, json)
Hash identifier:          mSE5fectqhg17yzS81bTy+6EmpwJvCR57peqY8XoLNw=
Subject key identifier:   8E:DA:8A:6F:47:61:63:73:95:02:B7:A9:3A:90:7E:5B:0D:68:6D:17
Certificate issuer:       /CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa
Certificate serial:       010D0C9F4328584AD7D1223CC4C78637E0522BC0
Authority key identifier: 40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     46960
IP address blocks:        104.255.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:22:3c:c4:c7:86:37:e0:52:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=73ade24e-ef02-4b5a-8606-6f3e821b2d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:15:a2:c5:58:d1:d8:08:82:9b:b0:5b:6e:a2:
                    cb:de:4c:f8:59:da:79:2d:62:f8:39:19:87:2b:aa:
                    40:e8:7a:dd:19:aa:47:65:fa:ea:f2:f4:59:fc:8c:
                    12:69:e3:7b:06:00:28:f0:48:ce:bb:e0:12:b9:66:
                    2e:17:7c:54:ff:0c:f8:71:8a:e2:b8:11:5f:9b:60:
                    5e:d1:5f:11:34:a8:5e:90:80:21:d6:67:6c:4a:8d:
                    8f:4e:a4:72:79:db:e7:06:68:aa:80:9e:84:28:76:
                    b2:ea:93:8d:ee:11:94:ed:40:04:de:e1:97:18:95:
                    1a:7a:c9:28:af:dd:4e:5e:e8:32:df:60:59:cf:1d:
                    bf:03:66:c2:82:ef:fb:1a:95:9b:e5:a3:c6:35:8e:
                    81:03:21:7f:0f:90:0c:5d:47:07:01:33:ba:8d:b3:
                    8b:d8:4a:f0:5c:25:d4:31:b1:a1:f5:33:23:0e:16:
                    5c:ea:d0:59:b2:e4:a3:f5:c6:44:4d:6f:6f:ac:75:
                    f1:97:63:8e:ff:c6:6c:49:da:de:90:cd:c5:35:60:
                    7d:e9:0a:fb:e1:9b:41:d9:11:f3:c7:43:f6:83:3c:
                    a9:1e:fc:49:27:a9:7d:41:e7:60:0d:4b:14:b3:2b:
                    b2:a8:37:29:05:83:16:85:d5:13:c9:2b:fe:85:f0:
                    17:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DA:8A:6F:47:61:63:73:95:02:B7:A9:3A:90:7E:5B:0D:68:6D:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl

            X509v3 Authority Key Identifier:
                keyid:40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d7:c2:8e:71:42:0f:dc:8e:67:f8:19:bc:cb:2b:0e:ac:2a:
         03:85:39:fe:c3:e2:c6:d6:04:b9:87:85:b0:d1:8e:fa:dc:cb:
         72:4b:90:22:a7:a0:b4:06:71:08:84:42:ed:a2:53:be:2f:cd:
         8e:41:32:d2:05:42:56:df:3a:8c:ca:cb:26:8c:65:15:8f:1b:
         dd:e6:6b:b4:07:b1:b7:ea:fe:e9:2d:2c:c4:84:3f:9c:65:a9:
         28:2b:01:8f:20:d7:ea:98:91:df:5c:d9:87:00:2f:ae:08:93:
         f8:bb:a4:e7:23:03:2d:10:71:4c:28:21:ec:34:85:0c:cb:71:
         05:36:0d:4d:37:98:7f:e1:f5:6a:d5:6d:c2:a4:4d:30:02:04:
         42:59:f6:b5:bf:f7:1b:5e:88:56:66:c1:a8:38:d6:44:8e:74:
         e6:2f:b9:9a:79:7f:9d:06:b3:32:ac:ef:a6:8a:5d:5f:9a:7f:
         78:8b:85:d7:02:f7:ff:00:9b:86:a3:ec:24:7a:25:7e:55:11:
         b9:0d:65:ed:2c:7e:62:ef:e1:7b:ff:13:f1:a7:52:53:32:be:
         b7:ac:d2:23:85:61:38:0a:67:13:26:30:d0:99:bb:59:90:a4:
         cd:4b:3d:1b:64:34:13:42:2d:24:80:5c:36:54:df:ee:1a:2d:
         89:92:a2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:14:19 2025 by rpki-client