Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa
File:                     8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa (raw, json)
Hash identifier:          DeQ4UNdfnCrx4bXW0P4liqH3uJfnGJn5o52qV8qGbcQ=
Subject key identifier:   81:4E:86:58:F2:9A:C6:6F:E0:A0:44:7A:BB:9B:4D:6E:97:28:64:1C
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584AC01628ECF19E8280A5A37520
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     1239
IP address blocks:        104.171.160.0/20 maxlen: 24
                          162.250.96.0/21 maxlen: 24
                          162.254.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:28:ec:f1:9e:82:80:a5:a3:75:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=55cf592b-c5af-4f05-80c0-a59310543f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:ca:14:5e:47:1b:46:f9:bc:18:89:5e:a2:
                    c5:48:4e:70:2c:c6:15:a5:50:3b:c5:77:36:69:78:
                    cd:b0:e1:b7:05:7e:6d:41:0e:6f:81:89:29:11:bd:
                    36:25:a7:9a:3f:61:fc:ba:23:03:58:b9:2c:36:39:
                    ba:02:9e:84:4e:40:81:d6:56:d9:ce:87:a6:2e:4c:
                    79:5b:27:c8:6e:1e:4b:d2:77:dd:d9:10:40:2e:ab:
                    df:a2:19:05:c3:08:c1:13:84:1d:c6:73:83:01:7f:
                    10:94:fe:83:d9:be:c5:a7:a1:e0:b1:f8:e1:56:6e:
                    ae:69:9c:5d:bd:b8:db:78:f3:3f:93:24:a4:1a:4d:
                    e8:52:41:5d:41:ff:20:bf:53:30:e3:d1:50:6a:bb:
                    38:44:b2:0c:e7:00:d8:82:01:ab:78:4d:24:41:c4:
                    5b:66:9f:85:90:85:81:2f:92:4d:3f:bf:ce:a4:30:
                    97:2c:b7:7a:de:33:8d:ba:96:e3:84:22:92:42:2a:
                    5e:41:78:7c:1f:23:38:f9:72:2c:a8:3a:a3:11:2c:
                    6f:75:3e:e4:ee:e8:a0:a3:d0:9e:d8:61:37:26:22:
                    5f:39:8b:c1:89:00:cc:3b:37:09:a8:07:62:96:2d:
                    94:9b:af:42:a1:a8:0f:48:a8:b5:fe:3b:6b:1c:bb:
                    a8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4E:86:58:F2:9A:C6:6F:E0:A0:44:7A:BB:9B:4D:6E:97:28:64:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.160.0/20
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:47:29:3d:da:d2:5c:2e:cb:12:45:d8:6a:ad:e4:3c:0a:df:
         db:07:e3:46:c1:ca:0e:bf:c7:94:77:2e:2a:bf:ad:fa:ad:ff:
         f9:99:26:8d:c1:d1:c6:2a:4e:38:5c:88:d5:a9:76:f6:0b:cc:
         bf:ee:bf:7c:cb:7e:d2:67:3e:de:75:37:03:cd:b7:99:b3:3d:
         49:c8:32:20:78:4f:36:89:ae:62:df:13:d6:9e:c4:5a:d6:3c:
         3f:5d:18:bb:ba:e1:6a:81:41:0e:56:b1:f0:fa:01:ee:fc:4e:
         7a:0b:cc:c8:ed:d5:09:06:26:b3:43:80:86:01:0a:ea:da:91:
         47:d0:bb:8e:a2:27:66:49:41:3e:8b:7d:18:80:27:5c:75:35:
         54:e5:f1:4e:8d:68:52:81:3f:1c:75:eb:c1:dd:d3:e3:ea:41:
         d3:d2:e4:58:7c:28:8c:1c:04:24:d3:c3:dc:ea:b6:8b:24:11:
         7c:8c:ba:02:47:dd:e2:b0:40:2f:c3:59:ed:ba:83:d6:11:ab:
         52:55:62:07:d9:f9:02:54:a5:c7:0f:d1:58:36:3e:9a:7a:04:
         02:08:65:58:09:0e:eb:17:be:49:95:2e:b5:ca:6e:86:04:fb:
         6c:cd:6c:97:b2:c4:33:60:bb:4b:75:f9:d8:a6:72:d6:33:d8:
         f4:c1:5b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:40:38 2025 by rpki-client