Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d5d135e7-1096-3bd6-adb5-319d4160d1e0.roa
File:                     d5d135e7-1096-3bd6-adb5-319d4160d1e0.roa (raw, json)
Hash identifier:          ET/HMOOX/O8LslTLqx6pEw4NEm8yytPbHkQfecUPrFM=
Subject key identifier:   5D:D8:60:BF:35:CF:B8:0C:A7:B0:58:AD:D2:82:05:C4:34:3C:4E:7A
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584AD66B9B6DEEFA6F228D461F40
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d5d135e7-1096-3bd6-adb5-319d4160d1e0.roa
Signing time:             Wed 13 Aug 2025 01:00:32 +0000
ROA not before:           Wed 13 Aug 2025 01:00:32 +0000
ROA not after:            Tue 11 Nov 2025 02:00:32 +0000
asID:                     33598
IP address blocks:        148.86.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d6:6b:9b:6d:ee:fa:6f:22:8d:46:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Aug 13 01:00:32 2025 GMT
            Not After : Nov 11 02:00:32 2025 GMT
        Subject: CN=c62449ed-f4ea-4768-9b88-8230e83de08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:84:66:1f:26:37:cf:2a:2a:4d:7d:18:66:37:
                    60:31:dc:5f:61:c3:fb:ee:8f:77:fe:99:6b:99:31:
                    9b:cd:c0:70:fc:0c:d6:de:f5:a7:b9:82:22:dd:24:
                    90:83:13:fd:86:96:16:fc:bb:b9:b7:ff:f7:f9:db:
                    0d:15:0f:23:93:b4:d8:55:b3:7e:a4:01:68:f9:1e:
                    30:d7:d4:f2:da:3a:d5:57:02:9d:dd:92:f1:8f:f2:
                    1e:50:b8:16:f6:6a:1c:98:38:d5:6e:65:db:b3:42:
                    b4:18:4f:15:e6:73:25:08:d5:be:39:17:4b:75:c7:
                    12:cd:b0:c1:a7:8e:e0:03:28:58:89:b9:11:f2:d3:
                    56:a3:c4:0c:71:dd:1d:a4:ab:29:46:e8:06:e4:87:
                    66:89:af:01:66:89:39:e2:5f:c7:dd:d1:87:10:0d:
                    48:f8:0f:1d:eb:cb:ff:de:d0:2d:0b:3f:cb:05:53:
                    34:5c:b5:45:e9:15:89:83:aa:42:7e:17:4d:e8:b9:
                    80:53:7e:a3:86:1b:ef:65:1a:69:3a:9e:97:82:6e:
                    61:9f:0f:c0:48:a4:33:c5:3c:f4:e7:15:6e:1f:67:
                    5d:15:9b:f6:31:38:59:8d:bc:c1:17:d3:c5:30:a1:
                    23:58:3a:c2:b1:49:67:d2:bb:a1:ad:84:d0:f9:94:
                    50:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D8:60:BF:35:CF:B8:0C:A7:B0:58:AD:D2:82:05:C4:34:3C:4E:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/d5d135e7-1096-3bd6-adb5-319d4160d1e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.86.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b8:a3:ed:42:62:9f:0d:f6:92:48:9e:40:b9:85:eb:c8:79:
         f3:a5:97:03:b7:e4:8d:82:aa:46:dd:cc:2e:a6:62:5e:22:17:
         e2:04:ce:1a:3f:4a:04:0f:5a:65:fd:58:44:03:25:b8:12:a0:
         f3:b7:7d:64:2b:fa:63:aa:8a:f6:73:4b:e4:e8:05:dc:38:b2:
         65:da:c4:ca:97:59:50:e6:0d:56:00:01:b6:e8:35:c5:48:4e:
         ee:c7:17:fd:aa:ae:98:8a:f1:62:4e:99:79:5d:63:ba:2e:8d:
         f0:9f:7e:04:b4:a7:1d:54:cc:71:61:13:2a:a1:65:a1:a9:0c:
         9a:60:18:e0:c8:c5:bb:a9:a1:51:2c:b6:71:0b:ef:8b:51:26:
         d9:93:8f:05:15:80:07:6b:28:af:52:d5:60:18:94:04:7c:29:
         1f:4b:5e:a5:ce:d1:9a:f6:dd:9d:f5:3b:4f:c7:ce:25:c1:e2:
         75:ac:76:50:1e:8d:2e:1c:f9:cf:48:82:92:29:a2:5c:33:81:
         91:b0:eb:ba:28:b9:6b:ed:c8:6e:4d:b4:7c:b2:3b:e8:41:39:
         67:f8:47:02:49:96:c7:3e:50:aa:17:41:e1:c8:99:57:65:49:
         71:0c:f5:85:35:8c:1b:72:01:ab:1f:37:92:fa:da:b0:c3:92:
         a1:54:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:24:46 2025 by rpki-client