Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa
File:                     87da4f25-f5c5-376e-a232-31fdb9491bd9.roa (raw, json)
Hash identifier:          vCjG2F3uePOTlqbz03HV0hPIO4CVPSiQ8P8qldY2Xgo=
Subject key identifier:   82:AA:31:5C:56:11:45:D9:DB:0E:F5:C8:5A:3F:98:DA:03:D0:9E:DA
Certificate issuer:       /CN=445d9dfe-8c66-4b5b-bc81-6ebebd514945
Certificate serial:       010D0C9F4328584AE4611A8B8C086D5E5C717F00
Authority key identifier: A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     15317
IP address blocks:        162.221.224.0/22 maxlen: 24
                          162.252.20.0/22 maxlen: 24
                          173.214.240.0/20 maxlen: 24
                          192.133.136.0/21 maxlen: 24
                          199.182.160.0/21 maxlen: 24
                          216.172.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:1a:8b:8c:08:6d:5e:5c:71:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445d9dfe-8c66-4b5b-bc81-6ebebd514945
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=93a7f127-4470-4a3f-8478-22e6bc373897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:91:08:0c:f7:78:75:bb:7d:86:48:ac:ea:
                    3c:ff:52:af:39:d0:fd:27:e6:2c:20:5b:07:45:5e:
                    8c:76:cb:22:90:5f:51:82:63:82:78:43:ed:9c:76:
                    42:0f:20:ba:c6:51:25:31:b2:fd:bc:24:78:12:78:
                    d7:8f:b0:26:df:74:a9:e3:35:3c:52:14:7a:2f:14:
                    56:33:3b:79:26:a4:16:aa:2b:ef:fe:60:56:2e:e0:
                    2b:8c:a1:ac:f6:3b:49:50:08:2a:e4:2e:39:5c:38:
                    ec:2b:ab:17:ad:6e:46:3c:53:00:2b:9c:cc:c6:82:
                    50:33:5a:6f:ba:10:61:ac:9a:48:98:31:6d:12:a2:
                    ea:f0:2b:bf:fd:db:97:08:d8:6a:ed:6f:ce:d1:40:
                    89:fc:19:b3:52:d9:92:ba:3a:fb:93:69:b3:c4:25:
                    07:cb:8e:56:0b:fa:01:5a:d6:2c:13:9c:77:1a:d1:
                    b1:a2:fe:e5:9f:8f:1b:8c:8e:97:e4:d3:84:ab:88:
                    b2:05:af:ca:a8:74:01:01:01:94:dd:0c:ab:d4:17:
                    cb:cd:1c:43:7e:89:83:04:37:c3:ab:da:21:c7:44:
                    ba:dd:a8:36:75:a3:5d:4d:91:6d:2d:2d:de:10:84:
                    28:07:74:2a:b0:af:bf:48:e6:3f:fb:3c:37:f5:c9:
                    1c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AA:31:5C:56:11:45:D9:DB:0E:F5:C8:5A:3F:98:DA:03:D0:9E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/87da4f25-f5c5-376e-a232-31fdb9491bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.crl

            X509v3 Authority Key Identifier:
                keyid:A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.224.0/22
                  162.252.20.0/22
                  173.214.240.0/20
                  192.133.136.0/21
                  199.182.160.0/21
                  216.172.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:80:54:7f:15:56:c4:70:f3:77:4e:ff:35:af:4c:bb:2a:22:
         df:75:21:b5:c6:a5:63:2a:60:ee:63:98:0d:6e:1c:f4:f4:9a:
         dd:3e:2c:c4:dc:42:7b:2a:d5:b9:dd:20:6f:cd:46:e1:9a:a9:
         a2:2d:1e:07:dc:d9:b3:36:5d:ac:0f:cb:d0:b6:b9:14:3f:51:
         9d:ba:a2:af:f1:6b:43:59:e7:28:31:7c:c4:e9:27:89:54:38:
         a3:71:54:58:6b:ed:5d:ab:7d:95:de:c4:83:dd:91:00:13:6e:
         92:fc:6f:df:b7:2e:a6:e6:80:bf:b4:d0:af:22:df:30:9d:16:
         8a:12:d7:1d:64:8e:2d:ae:65:68:e3:a7:35:16:0b:8a:25:1d:
         c2:97:84:b4:fe:67:93:a1:df:da:46:0b:73:9d:2a:35:53:8e:
         de:05:5c:74:a2:d9:8a:2b:7f:b8:fb:f2:1d:eb:67:a8:03:65:
         00:fe:42:31:89:6c:04:e0:a1:a7:cd:23:ce:2c:1d:48:37:02:
         2d:87:d1:a5:ea:d4:50:31:a5:05:1e:2b:d0:7a:76:eb:08:74:
         0e:aa:c9:f4:eb:74:b8:69:1c:5e:fe:37:7e:19:e4:d7:e4:94:
         f5:f4:bb:86:6b:59:ca:76:3f:69:2f:11:f6:d3:49:ab:98:f5:
         96:25:f2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:03:45 2025 by rpki-client