Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/11cc0e0b-51a0-3df7-922c-3cb3413ba35d.roa
File:                     11cc0e0b-51a0-3df7-922c-3cb3413ba35d.roa (raw, json)
Hash identifier:          dPPS+hfMUBXV5wKF1ZCLwjadqwlPGYvKaje1qfIKFvY=
Subject key identifier:   CF:A4:AE:62:6C:A0:BD:94:CD:7B:13:4F:A3:BE:57:E1:7F:19:49:10
Certificate issuer:       /CN=00561825-d26a-4ad1-954b-7ae435a3f4a1
Certificate serial:       010D0C9F4328584AF0F142AAFA8BA23F33A56100
Authority key identifier: B0:0D:9C:45:A3:C3:AC:C4:5B:88:EB:6E:EF:E7:EA:71:C4:1A:CE:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/11cc0e0b-51a0-3df7-922c-3cb3413ba35d.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     40127
IP address blocks:        134.174.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/00561825-d26a-4ad1-954b-7ae435a3f4a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/00561825-d26a-4ad1-954b-7ae435a3f4a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:42:aa:fa:8b:a2:3f:33:a5:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00561825-d26a-4ad1-954b-7ae435a3f4a1
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=fd75cef8-4e0a-4d6b-9908-6d64e3fc985a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:d9:09:57:2c:98:a0:eb:89:be:45:6d:80:
                    af:7c:a0:b7:51:d8:aa:a3:13:44:9a:34:15:84:62:
                    11:99:0d:13:a5:07:7b:e5:56:1f:0a:2e:24:31:73:
                    b4:6e:25:ac:11:98:f7:14:49:61:55:0c:11:ab:92:
                    9d:ee:af:44:f0:ea:00:c8:ff:56:c5:9b:31:4d:e9:
                    02:48:12:e0:a2:6c:07:61:27:7b:04:3c:b5:15:c1:
                    8f:4f:55:ee:94:9c:e2:ab:65:26:5b:de:0d:54:2c:
                    a9:41:5a:94:73:fb:b8:cd:01:f7:06:f3:3a:19:e6:
                    25:ca:f2:f5:66:02:a0:1d:2e:3a:ee:a1:4f:ed:45:
                    89:9f:c0:0c:86:5c:4f:63:6b:4c:fd:91:1c:b0:b8:
                    c0:6f:94:1d:d6:29:be:8a:8c:0c:56:0e:b3:df:23:
                    ad:e4:a5:5d:94:0c:09:8a:cb:bf:1d:26:a0:2d:95:
                    23:96:f3:a2:a1:75:e9:f6:c2:75:aa:63:f7:b1:26:
                    f2:e3:0a:7c:26:51:dc:c4:f8:81:52:51:91:81:3c:
                    e5:ca:a5:06:5e:09:d1:f9:49:17:53:a5:82:82:5a:
                    d6:eb:25:c5:1e:40:dc:18:f0:32:68:af:e1:01:a1:
                    c4:c0:27:f0:ae:57:12:76:25:88:19:ab:24:d0:4d:
                    8f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A4:AE:62:6C:A0:BD:94:CD:7B:13:4F:A3:BE:57:E1:7F:19:49:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/11cc0e0b-51a0-3df7-922c-3cb3413ba35d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/00561825-d26a-4ad1-954b-7ae435a3f4a1.crl

            X509v3 Authority Key Identifier:
                keyid:B0:0D:9C:45:A3:C3:AC:C4:5B:88:EB:6E:EF:E7:EA:71:C4:1A:CE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.174.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ef:5a:db:d7:6c:07:6b:1d:30:9e:09:0b:db:12:86:f0:c9:
         77:2b:df:fd:d5:e6:f6:89:24:99:ff:8c:67:b6:b2:99:4a:69:
         85:be:a5:24:a6:be:9e:b9:04:19:8c:3b:22:64:6a:c9:f6:5a:
         19:f7:fe:2e:24:36:13:1b:de:19:f7:1e:2d:4a:73:be:24:7a:
         86:ba:75:f9:f0:5d:6d:e8:96:87:85:f2:61:e8:6f:ab:29:a7:
         fd:38:08:b8:a9:03:ee:de:dc:c0:f3:0e:ba:f7:9d:a7:00:ac:
         39:72:66:0a:b2:d3:d0:30:55:94:bf:55:12:6b:c0:bb:a8:1c:
         c6:e6:3e:29:71:95:67:8a:40:3e:cd:c0:69:50:7e:35:e1:af:
         d9:4a:33:90:c2:4d:2c:17:1d:af:3b:e8:a4:49:90:61:4c:8d:
         21:c3:12:74:1d:e4:53:69:a4:e0:73:0d:65:08:ff:39:51:60:
         e6:23:94:f5:89:f4:e6:0f:6b:c1:42:67:52:ef:b5:0a:dd:9d:
         c4:88:ae:c2:09:7a:d8:43:63:c5:2e:59:53:12:ce:b4:46:b2:
         ac:d4:c3:12:f2:0a:2f:2f:9b:9f:96:c9:13:05:a1:31:33:58:
         90:f1:09:94:62:45:d1:d2:b8:7f:bf:3f:b5:81:99:70:6f:c3:
         c8:97:24:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:48:16 2025 by rpki-client