Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/a9d478a0-dd28-3241-80ee-f78ae660038e.roa
File:                     a9d478a0-dd28-3241-80ee-f78ae660038e.roa (raw, json)
Hash identifier:          bs7L7otsChX1d6yBisTgYiQA8sYSF6pTjUrSTc+gJqI=
Subject key identifier:   6A:38:98:00:3B:77:AA:7A:95:78:52:61:01:D6:55:4F:4F:A6:4E:B7
Certificate issuer:       /CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d
Certificate serial:       010D0C9F4328584AECC13E2355B74C85986DA300
Authority key identifier: 20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/a9d478a0-dd28-3241-80ee-f78ae660038e.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     32121
IP address blocks:        142.152.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:3e:23:55:b7:4c:85:98:6d:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=15c1c274-1362-412c-bbb4-19d132597ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:c8:79:f7:d6:fc:0d:eb:6b:4b:e2:12:bf:
                    e8:b9:a1:97:a3:63:9a:9e:c3:f0:92:dc:46:60:bc:
                    6e:77:38:7e:dc:cd:52:e5:b2:87:9b:4e:61:25:87:
                    85:45:82:a4:4e:e4:53:dc:24:23:03:b2:66:87:57:
                    92:71:f2:43:8a:0b:bd:b3:e7:ef:98:a0:0f:b9:dc:
                    99:0c:b0:c2:81:e6:5c:3f:ba:82:8d:04:70:db:1e:
                    89:8e:f8:9a:26:fc:2e:fd:cc:d3:6e:71:c0:f1:c9:
                    00:4d:51:dd:16:83:83:33:8f:16:ec:91:96:ac:a4:
                    74:c3:7a:da:c7:d4:78:b0:d3:e0:ce:be:22:65:ff:
                    e2:60:63:6c:a6:58:76:01:e0:35:6a:d6:a1:64:82:
                    01:04:6b:d1:7d:43:60:f2:ba:13:9f:98:73:a0:d4:
                    96:60:2e:26:0e:2f:46:31:69:c5:bc:f9:17:64:f7:
                    4b:e7:88:39:fd:60:6e:73:3c:63:a5:ec:c1:4a:78:
                    31:71:14:94:58:21:7e:13:3d:3e:bc:01:e4:eb:9b:
                    fd:37:bf:bd:ad:a4:d5:70:fe:00:44:ea:d2:fc:0f:
                    02:60:7f:0d:94:d3:6e:99:ad:4c:3c:08:69:6b:d8:
                    8b:70:86:01:22:c3:6e:a7:c3:45:61:dc:d3:10:ce:
                    21:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:38:98:00:3B:77:AA:7A:95:78:52:61:01:D6:55:4F:4F:A6:4E:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/a9d478a0-dd28-3241-80ee-f78ae660038e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl

            X509v3 Authority Key Identifier:
                keyid:20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.152.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:bb:fc:07:4c:b8:25:74:e1:87:fd:3c:3f:f0:cf:38:e8:64:
         23:93:17:09:c6:0f:e9:91:69:50:08:43:a3:f3:a9:0e:a4:27:
         ea:83:16:1c:a5:bc:90:e3:3c:54:d5:8f:41:ed:cf:5a:16:51:
         19:94:cf:e5:38:f3:84:cb:57:74:d0:59:83:c2:d8:d0:d8:a5:
         e7:8e:15:84:4a:19:a0:b5:7d:6a:82:0d:c5:32:4f:c6:f4:9c:
         81:7f:b7:41:fe:0f:ba:24:0c:91:5e:aa:be:5e:f2:2d:a8:40:
         fb:b3:9d:b6:42:9e:e4:ff:a4:ef:0d:75:e3:6b:65:69:67:e3:
         f2:59:5c:79:73:d0:d0:de:2f:f1:ce:c7:4d:1a:f5:b1:b2:f0:
         62:e7:1f:01:7e:0d:3c:d7:7c:42:31:db:b1:6c:21:9b:74:86:
         6d:6c:88:2d:02:cb:17:a0:99:e8:70:aa:86:cd:0e:6e:ac:b3:
         c5:a8:fe:9d:5e:69:ee:19:ad:32:0b:32:d0:a1:50:07:92:68:
         24:d2:79:24:09:82:0a:b8:c5:5d:8b:97:e9:c8:93:d8:67:ee:
         0a:62:b2:5f:2f:e7:3c:41:ce:87:e9:e8:1f:33:3b:a9:11:25:
         f8:70:39:fc:35:c8:20:c7:c5:4e:63:f3:dc:1b:58:3f:00:64:
         72:a6:3a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:55:41 2025 by rpki-client