Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/f7c99da2-ce1a-3fc3-bcb8-6b593f801ee7.roa
File:                     f7c99da2-ce1a-3fc3-bcb8-6b593f801ee7.roa (raw, json)
Hash identifier:          9KDvPRkxRS0liQxvUIV80g/p1kRMdUNWLPCu1PaA6XE=
Subject key identifier:   A0:9D:9A:04:EA:A5:1C:1D:D3:3D:3B:43:B0:96:80:15:93:54:B8:CF
Certificate issuer:       /CN=0db2f5ee-ec6e-4a75-95c8-cf2da57bc020
Certificate serial:       010D0C9F4328584AECC11EBE1E1E425ED9C0B45C
Authority key identifier: 76:A1:F9:A2:16:A7:A8:0D:A3:1A:DC:A9:A6:27:4B:AE:30:82:9C:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/f7c99da2-ce1a-3fc3-bcb8-6b593f801ee7.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        63.141.158.0/24 maxlen: 24
                          104.195.120.0/22 maxlen: 22
                          192.200.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:1e:be:1e:1e:42:5e:d9:c0:b4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db2f5ee-ec6e-4a75-95c8-cf2da57bc020
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=aeeb7cad-a55f-482f-a0bb-55891456bbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:24:27:8a:46:11:0c:f4:fe:0b:b3:98:e1:99:
                    27:57:38:75:0f:b9:00:ba:21:82:c1:2f:28:36:51:
                    d5:ee:ca:57:1c:2f:27:bc:f1:e1:9f:35:94:7d:9d:
                    52:23:2c:9d:ad:16:cc:44:1a:d2:8c:e3:57:b0:8b:
                    91:c2:f2:84:6b:b3:6e:a7:88:85:b8:34:fb:dc:3d:
                    60:f5:55:8f:23:90:ba:aa:e5:33:cc:74:04:43:f3:
                    64:33:26:1a:a6:dd:c5:90:d9:4f:6e:48:66:0f:4f:
                    9c:fc:80:fb:45:db:ac:48:a3:ae:5d:f1:d4:df:45:
                    a0:ad:34:19:7e:f7:eb:38:79:1c:3a:fe:b4:e0:6a:
                    23:87:ca:f4:1e:d0:4b:16:e5:ba:c0:86:77:11:0c:
                    35:fa:39:27:90:0f:18:25:3f:ec:ff:58:3e:42:f7:
                    a0:5c:bc:b8:9f:bd:c8:07:f4:a0:6c:5b:63:a3:80:
                    47:79:ce:ac:f5:42:68:16:29:a1:66:41:f0:11:fa:
                    ed:8e:de:e6:69:6d:74:05:72:44:ef:3b:89:1b:b7:
                    26:c6:3d:0a:eb:ab:1c:1e:00:0a:ba:6c:2b:3f:18:
                    82:0d:07:16:56:8c:25:4b:7c:82:25:eb:57:d5:c1:
                    e5:5e:66:c9:6e:22:b8:d8:28:d8:99:30:ef:b1:dd:
                    cb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9D:9A:04:EA:A5:1C:1D:D3:3D:3B:43:B0:96:80:15:93:54:B8:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/f7c99da2-ce1a-3fc3-bcb8-6b593f801ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.crl

            X509v3 Authority Key Identifier:
                keyid:76:A1:F9:A2:16:A7:A8:0D:A3:1A:DC:A9:A6:27:4B:AE:30:82:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.158.0/24
                  104.195.120.0/22
                  192.200.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:48:cc:ed:34:56:ba:bb:c7:f0:c4:01:d2:f7:30:f4:98:5e:
         0a:4a:0f:dc:cc:dc:24:7e:16:d8:ae:31:0b:ed:ef:0d:24:7d:
         6c:02:e8:4d:d9:cf:ba:7e:f2:6d:52:10:9f:91:95:6f:ad:ce:
         c4:85:e3:a8:7b:d0:9e:2f:25:e8:c5:b5:39:b5:41:c0:03:dc:
         73:c0:f7:d3:cb:e6:3b:e1:25:62:de:8d:32:d9:7a:0f:ae:92:
         c6:29:ea:26:8a:09:d7:f3:9a:d5:aa:4e:8c:c7:0b:ea:40:a2:
         7a:e3:c1:1b:ae:64:9f:9a:2f:35:a8:b2:cf:6b:b1:41:46:24:
         0c:ca:a9:36:58:13:de:de:4d:71:3e:53:6f:c0:60:27:94:3a:
         a5:3c:e5:79:3a:fa:8d:4f:59:09:d1:d4:15:ec:78:c0:8e:c8:
         71:d1:ea:6a:c5:66:6f:03:0e:02:38:43:db:f6:3a:07:57:fc:
         cc:d1:58:5e:59:02:99:fd:0e:3f:9c:eb:82:72:47:a0:11:d3:
         2a:22:1f:ef:4c:4c:55:87:c2:1c:ea:e7:5f:a7:c3:e5:a8:db:
         1c:33:46:f5:76:76:d2:46:e6:9a:73:49:32:0f:a6:54:d4:b6:
         f0:18:de:fe:64:b9:b7:02:d1:c2:21:71:ff:9d:40:90:5e:8c:
         05:06:63:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:21:36 2025 by rpki-client