Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa
File:                     576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa (raw, json)
Hash identifier:          /jWNq3jQOdG489Igu0gthTQD4w3hlYyGt8TmXHOyKAI=
Subject key identifier:   A2:77:AF:B0:E0:89:4C:A1:78:2B:AF:F2:54:9E:AA:2B:31:C7:79:5F
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F4328584AD23BB49DA4B630386FB1E780
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     8075
IP address blocks:        161.221.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:b4:9d:a4:b6:30:38:6f:b1:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=e1917354-96fb-4159-90b2-72b4e8ce5850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:81:40:9f:e2:ab:87:e0:de:28:b4:ef:3c:c6:
                    4f:12:84:61:55:2a:f8:98:a2:fc:2b:de:7e:f7:7d:
                    67:d1:04:80:d0:43:6a:ae:56:09:9a:b1:72:13:4a:
                    9c:1f:e7:93:08:d6:7c:33:41:96:9d:08:46:c4:a1:
                    fa:86:fb:c8:18:bc:e8:0d:d4:0c:16:52:69:07:96:
                    f5:b5:34:3b:eb:67:47:9b:ad:23:15:fd:63:a4:63:
                    4b:a4:08:d8:34:39:26:0e:4e:10:15:9e:42:d8:6f:
                    55:95:ae:27:59:02:0a:82:f7:c4:61:88:03:69:61:
                    84:df:27:3c:fd:f8:11:94:dc:cd:07:66:5c:c5:96:
                    53:df:03:6c:73:0f:dc:73:ad:ef:a8:2b:71:d5:ad:
                    84:7b:a2:3b:02:8b:80:94:a0:0f:fc:40:a8:73:ba:
                    c8:4d:b6:68:66:d2:15:48:6f:da:b9:ca:af:7e:31:
                    db:20:8a:bd:cb:2d:96:d9:c6:3c:55:55:b2:e4:31:
                    33:a1:4a:f1:6c:a2:e0:7d:91:df:81:78:66:63:47:
                    33:b5:4b:a6:d2:31:26:18:9e:c1:d8:9e:75:aa:9e:
                    df:85:11:de:15:cf:7a:aa:35:1b:f3:b7:9c:e7:e7:
                    62:fb:fa:96:7b:79:0f:c8:c5:8a:1e:cc:85:bf:dc:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:77:AF:B0:E0:89:4C:A1:78:2B:AF:F2:54:9E:AA:2B:31:C7:79:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:75:ce:67:7a:01:54:b0:4c:50:49:f3:af:14:18:58:eb:13:
         92:79:d0:7e:d1:5a:d1:65:79:c8:0e:c1:42:70:4c:fc:bd:af:
         12:a6:dc:9b:ca:4e:f5:18:f9:11:f6:85:d3:72:ca:13:c6:71:
         a0:7e:35:c3:db:94:d6:f9:01:b0:90:28:ad:8b:9f:03:a7:b6:
         35:b3:8a:a7:4f:fb:54:c2:11:90:4b:b6:b2:f4:a4:8a:b4:95:
         5b:48:e6:c8:d2:6e:50:d9:9c:f7:24:03:5a:e4:a7:3e:97:ff:
         9e:e6:d1:f9:a9:be:64:9b:12:5a:be:2b:84:6e:9f:32:01:f4:
         93:a7:8c:52:92:ab:38:1f:21:8b:d5:4f:7b:db:04:9f:3c:13:
         e1:f1:a0:40:fb:24:4c:49:69:cc:bc:b1:b2:49:d9:60:21:3d:
         d2:e6:93:2a:7b:44:71:f6:a5:30:a8:53:2e:00:8e:a2:a3:67:
         2a:e0:d4:f5:39:f0:e3:91:c1:51:67:95:80:43:5d:02:fe:e4:
         0b:dc:79:43:54:a3:b2:26:66:d7:0e:3a:ee:c4:f7:e8:bf:1c:
         7a:cd:b7:49:28:66:f4:15:e5:e2:30:9a:03:e2:33:af:9f:70:
         09:6c:f8:40:89:b9:b0:01:ea:24:7d:3b:35:0d:7a:02:b0:96:
         eb:a7:c2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:31:59 2025 by rpki-client