Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa
File:                     8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa (raw, json)
Hash identifier:          SedXlCdRZrTWQ0/j83YRzJVdyDNCUq45Ldem66TE2kA=
Subject key identifier:   1F:AC:28:81:3F:E5:3B:12:A6:EE:84:AF:73:BB:A8:CE:54:4A:0C:B9
Certificate issuer:       /CN=9cc943d8-e468-4794-9399-2ba32cf0dad3
Certificate serial:       010D0C9F4328584AADF106332CE6C1FED9FB1A80
Authority key identifier: 88:6B:99:8B:24:2C:6A:9F:82:E4:47:37:A2:2A:06:D3:D5:4D:4F:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     397833
IP address blocks:        185.77.142.0/24 maxlen: 24
                          192.95.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:06:33:2c:e6:c1:fe:d9:fb:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc943d8-e468-4794-9399-2ba32cf0dad3
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=9a1d180d-f2af-474b-9c1f-851bba773138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e7:49:52:83:05:42:11:43:92:ae:b7:87:4b:
                    ce:ef:a7:ea:eb:35:e3:17:21:5a:8c:c9:06:04:b0:
                    7b:4e:c8:cf:cd:bd:fa:f2:ab:2c:db:1e:1e:54:ef:
                    c2:de:82:4f:26:51:3d:75:ff:3e:0b:7a:57:76:96:
                    2d:79:95:b8:1e:39:df:5d:a1:39:3a:d1:d5:f1:78:
                    82:ad:86:50:64:37:2e:c5:8e:a7:6e:fe:d6:24:d5:
                    3b:8a:13:3b:cc:ae:76:6f:a4:20:7b:d3:fe:e2:5c:
                    e0:46:1d:99:2a:2d:12:d1:f2:ee:b1:de:24:5e:fc:
                    19:54:ed:47:dd:a2:f6:ae:a0:3a:61:9d:8b:38:57:
                    5e:87:11:a8:f1:82:64:0b:d7:ab:c1:0a:7f:8f:a3:
                    3f:55:eb:3d:42:c0:08:47:d1:fa:99:a5:47:b6:9e:
                    b2:ea:8d:90:24:a4:26:91:cd:23:95:b8:fb:38:f3:
                    0d:ac:ac:d8:a1:9d:1f:c5:21:d8:04:e4:0e:30:a4:
                    f8:34:5c:62:c8:16:a6:9a:ad:a0:6d:2e:40:45:fe:
                    6f:dd:38:29:3e:d6:f4:69:68:c5:b3:b9:f0:69:28:
                    9f:da:13:1c:44:bd:d5:74:2d:17:0d:b6:4a:37:90:
                    ac:19:92:e5:f6:b6:42:06:83:42:ce:13:51:49:9e:
                    d8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AC:28:81:3F:E5:3B:12:A6:EE:84:AF:73:BB:A8:CE:54:4A:0C:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.crl

            X509v3 Authority Key Identifier:
                keyid:88:6B:99:8B:24:2C:6A:9F:82:E4:47:37:A2:2A:06:D3:D5:4D:4F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.142.0/24
                  192.95.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:79:1e:1a:45:df:3b:c4:4b:21:0d:b6:b8:e9:f5:dd:43:cf:
         c5:fa:b7:66:7f:56:f1:45:07:cc:34:51:a6:be:b6:99:59:89:
         ae:3a:02:14:f7:f6:74:a4:d2:96:2f:12:bf:ae:78:d3:6d:00:
         67:4a:a9:5d:21:cb:03:53:1d:90:5a:ee:16:49:66:fe:38:fd:
         b6:42:40:7f:15:b8:b1:47:1f:fd:ae:f8:af:f9:7c:4d:81:d3:
         00:aa:aa:e5:cf:a8:21:34:6e:c0:87:db:ca:2f:3a:77:95:4a:
         2e:85:80:02:57:78:ec:2e:f1:74:2f:fd:c8:93:70:d3:25:56:
         3f:2d:b2:ca:41:ab:dc:34:de:f1:b0:b3:ce:be:a8:8a:a0:f5:
         67:6b:7a:e4:01:00:05:5c:e8:ee:a9:de:b1:bc:2b:88:6f:eb:
         47:91:e8:46:ad:8d:8e:c4:60:4c:2d:3d:9a:ee:33:4f:cf:83:
         c7:17:15:69:c7:1a:fa:72:50:dd:7a:c5:a8:34:37:d8:a5:69:
         b9:19:bc:45:d8:62:e0:96:30:02:0c:11:43:4c:32:c5:00:47:
         30:5a:50:a1:1d:80:2f:28:b6:c6:29:9a:54:e6:55:26:65:98:
         e4:f2:ae:01:a9:8a:3d:0d:fa:ec:a9:c4:e4:12:79:4a:7f:aa:
         61:3a:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:41:21 2025 by rpki-client