Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/1c4ac0ef-0e8b-3b08-9ba5-d8d42dde484f.roa
File:                     1c4ac0ef-0e8b-3b08-9ba5-d8d42dde484f.roa (raw, json)
Hash identifier:          EC5e/ksM43ET9SBScR0PJEawOJV27KvZ+zP8GMyokGU=
Subject key identifier:   38:1C:29:EC:27:82:2F:91:D0:1D:21:B6:6C:DA:82:62:1F:2D:B7:5B
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584AECC12C448433244851333F52
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/1c4ac0ef-0e8b-3b08-9ba5-d8d42dde484f.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     53828
IP address blocks:        144.91.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:2c:44:84:33:24:48:51:33:3f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=bc620ce9-c11d-4f1d-8602-336831886efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0a:38:9a:9d:eb:c1:da:cf:79:dc:1e:9a:52:
                    ab:75:8e:1a:a4:a5:59:e9:9d:e0:1d:de:b9:d3:df:
                    03:c5:0f:de:9f:ff:c0:28:4c:65:12:72:da:a8:10:
                    3f:61:d8:ce:03:87:a3:b7:c0:87:7e:ab:47:3a:6b:
                    32:7f:74:90:b5:bd:52:70:b1:f0:80:6c:32:4b:b4:
                    2b:c9:47:ac:5b:2a:0f:7e:3e:b7:64:e6:c4:54:d3:
                    c9:f5:7b:01:c7:77:21:fc:35:be:4a:b5:0b:25:c8:
                    ba:8b:d2:1a:f5:4f:05:8e:30:3a:63:f9:4b:14:73:
                    e9:d6:3a:8f:09:e7:8e:22:85:ec:48:45:ee:40:cc:
                    7b:89:45:40:a4:e2:5a:8e:cc:b1:ab:07:b5:ab:45:
                    95:56:22:bd:c9:63:77:71:7f:8c:a2:8b:57:8e:95:
                    6e:90:f0:ee:e8:71:69:9c:f6:3d:56:1d:05:3f:c5:
                    d8:ce:1f:f2:09:f8:73:dc:d5:f5:2a:db:06:2a:48:
                    6e:5f:6b:e4:8c:ee:23:07:f3:43:42:55:d9:53:88:
                    0a:e8:85:7f:c3:ad:d0:57:54:da:a0:bc:f9:c2:18:
                    6e:d5:ec:fe:28:07:1a:5b:67:5d:e4:49:49:ae:32:
                    e4:8e:93:6e:4e:d0:8d:18:03:dd:62:ba:b7:ae:c4:
                    05:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1C:29:EC:27:82:2F:91:D0:1D:21:B6:6C:DA:82:62:1F:2D:B7:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/1c4ac0ef-0e8b-3b08-9ba5-d8d42dde484f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.91.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b5:a2:43:8d:5a:be:62:1a:c9:f6:35:f6:d5:d1:ee:69:b6:
         ef:c5:df:a1:ad:05:58:01:41:3a:20:44:86:52:fc:82:5d:29:
         84:1e:71:d2:25:9c:ed:c0:0b:70:88:e0:0b:ee:8e:71:7b:cc:
         e0:20:1d:a9:9d:7d:70:8d:10:61:af:50:06:2d:02:6a:84:d2:
         6d:3a:28:6f:4b:3f:5e:39:ad:04:33:a9:55:17:0f:92:95:7a:
         41:88:ea:a6:ef:25:57:d4:e3:05:52:3e:57:25:87:57:27:c7:
         ac:79:df:ab:67:f7:ab:c5:08:c8:62:cd:cf:13:9b:0f:35:32:
         cf:3d:a5:28:fd:e9:85:0d:27:27:d4:00:ab:b5:e2:6b:5a:60:
         8e:60:cd:45:0b:4d:23:2e:61:5c:e0:d3:0f:d8:4e:47:0b:4e:
         31:11:47:97:3b:d9:7b:95:a3:03:35:31:7d:9e:2c:1c:95:62:
         b8:9d:4b:3d:10:56:f1:8e:2e:cb:03:5a:1f:d1:7b:99:5d:6f:
         66:1a:e8:fa:58:ef:12:ea:1a:a5:cc:a2:87:cc:33:bb:38:11:
         98:c9:4d:4e:d3:fb:c9:a7:6c:ca:5a:79:30:1c:e2:b3:00:3f:
         6e:55:41:09:e4:8d:62:4b:b9:85:29:9f:5f:cd:15:7a:fd:a8:
         35:09:df:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:35:50 2025 by rpki-client