Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/e1165abb-cade-3c1b-99f7-08510de1fef6.roa
File:                     e1165abb-cade-3c1b-99f7-08510de1fef6.roa (raw, json)
Hash identifier:          aA/c4fPgJBxDnT2rSM5f7SKJnKj3GTlCQXfiNq4t6OM=
Subject key identifier:   AB:29:24:DC:38:E0:0C:FE:C8:3B:FC:66:F0:D6:5F:3B:E9:13:00:CC
Certificate issuer:       /CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
Certificate serial:       010D0C9F4328584ACB40E6A65D8C6EB4E4E6CB80
Authority key identifier: 57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/e1165abb-cade-3c1b-99f7-08510de1fef6.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     11904
IP address blocks:        24.204.160.0/19 maxlen: 19
                          24.204.160.0/20 maxlen: 20
                          24.204.160.0/21 maxlen: 21
                          24.204.160.0/22 maxlen: 22
                          24.204.164.0/22 maxlen: 22
                          24.204.168.0/21 maxlen: 21
                          24.204.168.0/22 maxlen: 22
                          24.204.172.0/22 maxlen: 22
                          24.204.176.0/20 maxlen: 20
                          24.204.176.0/21 maxlen: 21
                          24.204.176.0/22 maxlen: 22
                          24.204.180.0/22 maxlen: 22
                          24.204.184.0/21 maxlen: 21
                          24.204.184.0/22 maxlen: 22
                          24.204.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:e6:a6:5d:8c:6e:b4:e4:e6:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=6f75f620-c96a-40d0-a870-3ad34684d862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7a:96:e2:95:ae:f2:ab:80:25:9c:24:78:ed:
                    6b:c0:d9:d2:9e:dc:f9:e8:3d:30:34:60:6a:b2:02:
                    45:b6:2b:f4:e4:d6:b7:ff:fa:2e:fa:96:ed:ca:17:
                    44:0f:0d:df:3c:d6:0a:cc:af:3e:a4:6a:ed:55:1a:
                    21:27:d6:e1:e4:21:91:3e:60:95:b9:b8:23:63:fb:
                    f7:a5:b5:0e:60:68:bd:71:1a:82:10:07:c6:27:13:
                    0e:51:1b:34:61:2a:bf:95:38:cc:7a:cd:08:f9:d1:
                    dd:85:75:f2:e9:f2:d0:fc:58:85:53:01:e7:75:a3:
                    1d:f4:45:c4:66:0f:a5:4b:ff:0d:77:b0:7a:4b:c4:
                    35:25:42:48:5e:c1:a2:71:c7:f8:7c:d5:0c:59:f4:
                    85:f6:aa:09:8a:9c:24:d4:d6:3a:b9:47:0d:f0:00:
                    8d:75:9c:e6:8d:65:7c:0f:1b:72:f6:cf:33:80:21:
                    8b:6f:31:f7:21:9d:5b:6a:ed:ec:5d:be:37:8c:99:
                    b9:4f:6e:69:54:46:1a:8b:b8:dc:1d:1a:98:ff:15:
                    4e:1c:09:2a:c7:67:4e:ef:5c:e5:8d:8d:61:af:06:
                    3c:73:c9:7b:3d:bb:f7:8d:f8:cb:f3:d9:a9:9c:d7:
                    ae:3e:08:d0:dc:34:21:d8:5a:ca:e2:2b:41:7d:e0:
                    38:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:29:24:DC:38:E0:0C:FE:C8:3B:FC:66:F0:D6:5F:3B:E9:13:00:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/e1165abb-cade-3c1b-99f7-08510de1fef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl

            X509v3 Authority Key Identifier:
                keyid:57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.204.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ba:96:56:ae:8d:c1:14:77:07:1b:27:a3:54:06:2e:dd:5b:
         f9:c8:8a:18:9e:95:33:42:71:02:da:67:b4:e1:05:12:e5:a1:
         50:e7:c2:3b:59:23:7a:5f:a3:84:b3:04:3e:2a:b9:81:dc:49:
         97:46:26:1b:5d:8d:39:8e:9e:61:b9:d5:3a:e1:bd:12:68:bf:
         90:b2:8d:8a:a2:72:83:01:56:5a:53:16:6e:2e:91:40:71:12:
         6c:b2:6c:56:6b:3f:ac:9b:8a:0a:01:f3:55:f7:08:fd:4e:a9:
         51:87:21:22:8d:f6:21:16:cc:14:f2:3b:8b:c5:2b:d5:68:61:
         f3:92:7a:c2:6b:31:7b:ae:fa:f4:a6:4e:4f:65:47:b2:6d:f5:
         4b:a8:d7:83:96:ea:7a:38:7c:e7:ab:8d:be:81:10:c9:f1:e7:
         75:29:dd:70:32:b3:1c:c2:50:0e:c3:03:2f:31:37:3e:e0:c4:
         0a:e6:d5:33:75:1e:5d:e1:4a:dc:ae:f0:11:cf:fc:71:2e:07:
         b4:a4:2b:26:c6:4a:31:7a:ca:0a:99:53:a7:06:e5:00:e2:5c:
         42:be:b0:54:1c:f0:39:d9:0e:e5:06:3d:cd:06:f4:6b:c4:14:
         4d:6f:4c:9b:9b:c7:1e:5b:71:62:3a:a1:9b:8e:06:7f:32:ad:
         2d:cd:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:22:58 2025 by rpki-client