Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/af2a2bd8-4a2e-3fdd-9d3f-7a49478f9ad0.roa
File:                     af2a2bd8-4a2e-3fdd-9d3f-7a49478f9ad0.roa (raw, json)
Hash identifier:          1LSn1+sczTHJuC5x017+Bj/wA5aASbhEH9/lmIDDS54=
Subject key identifier:   85:40:B5:A5:68:31:51:72:D7:52:8B:63:AF:D5:8F:50:D4:72:F0:C0
Certificate issuer:       /CN=ea869763-37d6-43fe-b16f-bd22be08a7c5
Certificate serial:       010D0C9F4328584ACB40EBAA9D2B228FA440A340
Authority key identifier: 86:EB:A3:1E:58:34:F5:2A:95:1C:9F:4D:11:8A:B4:A1:80:2A:2E:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/af2a2bd8-4a2e-3fdd-9d3f-7a49478f9ad0.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     132055
IP address blocks:        198.134.54.0/24 maxlen: 24
                          198.134.56.0/24 maxlen: 24
                          199.52.53.0/24 maxlen: 24
                          199.52.57.0/24 maxlen: 24
                          199.52.58.0/24 maxlen: 24
                          199.52.59.0/24 maxlen: 24
                          199.52.73.0/24 maxlen: 24
                          199.52.74.0/24 maxlen: 24
                          199.52.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/ea869763-37d6-43fe-b16f-bd22be08a7c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/ea869763-37d6-43fe-b16f-bd22be08a7c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:eb:aa:9d:2b:22:8f:a4:40:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea869763-37d6-43fe-b16f-bd22be08a7c5
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=8913d327-644f-4353-896a-4ccb8f73f831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6e:ff:7f:8b:a6:f8:f3:7b:c7:0a:39:2e:31:
                    90:d3:85:fe:13:13:84:7b:9b:7e:6b:18:ce:fc:c7:
                    8a:d4:55:ec:8b:86:63:2e:f6:37:5b:45:6d:e9:ab:
                    5c:e6:93:68:65:f7:3c:06:1f:b2:92:47:ba:16:ff:
                    49:ae:73:fc:ba:47:ba:b8:d2:8c:14:cd:1e:75:71:
                    01:ee:02:f5:0a:a3:bd:02:83:a4:eb:a2:5a:6c:06:
                    61:f3:07:a5:f2:79:94:c0:e9:f2:a2:b2:67:bd:ac:
                    29:bf:10:bf:30:5a:74:c1:a7:26:17:0c:66:86:57:
                    8d:a2:cc:79:2f:46:fd:4a:91:f5:1b:4c:31:2d:bf:
                    be:57:2a:d9:96:70:bb:92:cc:ac:9f:58:5b:65:3b:
                    91:fa:f9:38:b6:eb:d7:fc:57:7f:05:09:64:e7:1e:
                    98:0c:17:f3:5f:bf:e9:31:71:6b:a8:18:6d:92:8a:
                    aa:6b:d9:99:c3:03:82:cc:9d:f0:2c:ec:f5:92:17:
                    ce:51:c5:84:bc:c8:23:8a:90:f2:2a:09:5d:7b:ee:
                    df:59:99:e4:90:cf:5b:b2:fb:28:c6:67:14:58:e3:
                    5b:c6:31:12:8c:4f:43:2e:b2:65:7e:e6:dc:e6:11:
                    d2:e1:8f:71:a0:7f:23:89:d2:35:a2:32:25:a5:6f:
                    50:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:40:B5:A5:68:31:51:72:D7:52:8B:63:AF:D5:8F:50:D4:72:F0:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/af2a2bd8-4a2e-3fdd-9d3f-7a49478f9ad0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/ea869763-37d6-43fe-b16f-bd22be08a7c5.crl

            X509v3 Authority Key Identifier:
                keyid:86:EB:A3:1E:58:34:F5:2A:95:1C:9F:4D:11:8A:B4:A1:80:2A:2E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.134.54.0/24
                  198.134.56.0/24
                  199.52.53.0/24
                  199.52.57.0-199.52.59.255
                  199.52.73.0-199.52.75.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:aa:dc:f2:41:af:ad:09:8e:03:83:9d:e1:48:c3:56:e4:74:
         ed:c7:77:dd:e5:d5:6c:ba:b8:ba:ad:b7:a5:28:2f:23:7d:48:
         9e:64:a1:72:66:1e:f9:7b:86:5f:d1:a4:d9:1f:93:a3:11:30:
         b4:31:43:07:ee:f6:9a:4c:71:b0:2e:bf:cd:ef:bc:60:5d:07:
         cf:9b:5c:74:3a:6c:5d:46:d2:0b:69:06:a9:f3:f7:0c:05:56:
         86:2e:85:1c:82:bd:92:33:13:f3:72:16:3a:b0:8f:fa:5e:a5:
         46:75:22:91:cc:fd:82:2e:ae:3a:e9:5a:74:5f:cd:9d:6a:b1:
         a9:65:a6:a1:ff:3b:90:4f:22:76:24:bf:f7:b7:0c:3b:ad:c4:
         c1:08:a6:d8:6d:d2:a9:ed:53:97:df:9d:b7:d6:ee:b9:85:6e:
         b8:e7:34:28:ac:8d:e6:c4:ec:43:00:85:81:97:c5:a1:24:b6:
         ba:aa:8d:50:f1:29:52:d7:2b:6e:05:01:de:d2:ee:58:62:a4:
         6c:45:98:4c:e0:54:5d:be:ea:cb:4f:31:fa:40:76:f9:9b:3e:
         08:8c:e9:7f:5e:82:ab:21:70:0e:da:ea:39:8a:1c:91:8e:cc:
         31:e0:ed:15:4c:40:96:0e:2b:60:e4:04:5f:ee:5b:ee:50:ab:
         be:4f:d0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:53:31 2025 by rpki-client