Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/4c84f840-5512-38ea-ab51-9bcc058dfef4.roa
File:                     4c84f840-5512-38ea-ab51-9bcc058dfef4.roa (raw, json)
Hash identifier:          ZKaKXR/FbQxlqcTS2bCs044ujjB0XOeiT0v4ha/bV2c=
Subject key identifier:   6D:1E:B4:E6:0C:1C:11:74:91:69:62:0E:D4:8B:AE:21:90:73:97:FC
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F4328584AB91B8FE7524D2BE8D02FFBC0
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/4c84f840-5512-38ea-ab51-9bcc058dfef4.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     64236
IP address blocks:        142.147.96.0/22 maxlen: 24
                          162.251.120.0/22 maxlen: 24
                          172.96.8.0/21 maxlen: 24
                          192.188.88.0/24 maxlen: 24
                          204.10.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:8f:e7:52:4d:2b:e8:d0:2f:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=1277355c-c970-487b-9e1f-31ccb96ec6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:bb:5a:de:2d:8b:a4:5f:67:10:64:50:9d:
                    99:24:c0:d8:f1:94:69:c9:d5:28:70:ab:9b:cc:81:
                    e6:e5:60:24:9c:3a:a8:80:33:77:cc:3a:ec:4f:54:
                    2c:53:12:b2:0f:28:65:7d:42:5e:84:3e:f7:2f:09:
                    05:fa:75:08:54:35:2f:66:c0:22:49:c6:5c:fc:39:
                    d3:c8:60:fd:e7:2e:7b:a0:cf:df:45:b4:11:26:f2:
                    4a:83:4e:5e:51:ea:6e:01:1c:e3:87:3a:2b:c8:a6:
                    71:fb:6f:87:83:dc:9c:3a:d5:83:08:2d:29:67:1e:
                    d4:dc:0b:e3:ab:bb:2e:8c:62:12:bf:98:74:9a:d0:
                    d2:a1:5c:0e:17:fc:0b:20:0c:d5:6c:d3:45:dd:e6:
                    dc:62:cf:7d:67:ab:c7:9c:62:9b:a4:3b:3c:d4:e9:
                    78:06:2d:dc:6d:b2:22:d7:ac:d0:bd:60:2d:05:5e:
                    e4:10:9d:f2:7a:f8:8f:b6:5f:56:d8:dc:e5:a0:dc:
                    57:ea:7a:6b:d8:59:53:7d:03:31:91:96:e3:3a:40:
                    76:b4:33:9a:7c:2f:ec:25:90:fd:4c:95:32:80:e9:
                    bb:53:b0:4b:2c:40:67:9e:9c:88:b3:0b:43:d7:eb:
                    15:12:85:84:0a:f0:9b:f7:65:20:bf:7f:36:d5:0c:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1E:B4:E6:0C:1C:11:74:91:69:62:0E:D4:8B:AE:21:90:73:97:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/4c84f840-5512-38ea-ab51-9bcc058dfef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.96.0/22
                  162.251.120.0/22
                  172.96.8.0/21
                  192.188.88.0/24
                  204.10.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:04:82:60:f3:43:44:2c:25:17:13:e0:25:8b:64:53:e5:03:
         60:78:96:9c:b1:8a:f2:7c:d2:1a:b0:1a:52:3e:5c:28:63:5b:
         61:cd:5b:1f:00:8b:ea:50:b3:30:a2:2d:7d:de:be:37:b7:07:
         6a:e0:d8:8b:23:52:27:c1:f4:b6:d1:25:28:f0:e9:6a:cb:8f:
         67:a1:86:3e:8e:68:8b:c1:73:48:f7:7d:88:f7:f2:f8:3e:12:
         78:4b:3c:ce:eb:ae:05:a8:47:6f:cc:f0:84:35:0f:dd:c1:e9:
         a4:e5:c9:2b:e0:83:07:f4:80:a2:e4:dc:b3:ed:09:4b:3a:74:
         be:19:8f:19:79:9b:e4:89:6d:b6:88:1c:ef:71:90:7e:6d:4e:
         dd:8d:7d:4c:66:88:d0:96:4c:04:60:14:68:cc:1b:7d:9b:f7:
         dc:d4:b8:92:88:d3:46:62:b0:fe:48:80:70:1a:90:7c:00:f9:
         97:ea:5d:a7:ae:4a:cf:bd:be:2f:7d:4b:6a:55:f9:4c:42:6c:
         ed:b0:b1:32:67:ce:9a:87:14:71:b3:f8:73:95:1c:60:00:04:
         02:39:e4:09:47:48:79:52:01:15:98:1b:e5:30:80:2a:a1:02:
         b5:92:03:da:3f:61:b6:eb:2f:ac:85:73:d7:4b:f6:60:9b:97:
         fe:51:f7:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 24 06:29:59 2025 by rpki-client