Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/fbdb4fb6-f252-35e8-a11b-4dbcea574ad3.roa
File:                     fbdb4fb6-f252-35e8-a11b-4dbcea574ad3.roa (raw, json)
Hash identifier:          mQmNrXb+F0EaBgkLDJZLadXs2+m49GleilZpIfjfY9o=
Subject key identifier:   75:A5:B9:AB:46:AC:36:E5:60:9F:E1:CC:C2:BC:2E:19:8B:DD:41:24
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F4328584AC0162837E57154952C520900
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/fbdb4fb6-f252-35e8-a11b-4dbcea574ad3.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     49915
IP address blocks:        162.43.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:28:37:e5:71:54:95:2c:52:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=e8aeaf8c-92de-4ca9-8c29-a5c568eb494c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:34:94:e1:b9:15:b0:e6:d6:36:ae:a7:57:9e:
                    3c:73:66:92:39:05:3e:cd:f8:1d:66:07:80:5c:fe:
                    ba:eb:5a:75:a4:6c:de:b6:6d:3e:4b:f7:cf:3a:61:
                    4f:97:96:b9:5a:0c:bd:ce:dd:66:42:03:de:28:94:
                    a5:9b:7a:5e:08:33:f5:92:ab:33:33:f4:4f:f0:af:
                    a1:c1:83:7c:13:db:18:22:22:d7:46:5a:ed:d6:ee:
                    4c:8b:7f:93:31:63:74:68:ba:36:80:4e:d8:87:25:
                    c0:21:57:17:97:07:dc:c3:e1:bc:bd:21:c8:d0:42:
                    48:63:9d:43:53:92:7c:91:e4:0d:9a:12:a2:39:6a:
                    93:1d:f3:6f:de:73:3a:1f:6b:4c:ea:d5:43:2f:63:
                    f4:7e:6d:60:ae:43:b3:10:d6:f8:a9:07:06:9e:21:
                    fd:d6:a7:8e:6a:11:9b:5e:b6:63:67:83:1e:af:a7:
                    ec:d9:31:a3:25:53:b1:41:82:94:c9:a5:e7:c9:b7:
                    02:20:56:b6:74:b1:5c:d5:b6:df:ee:a3:de:e8:94:
                    a4:0c:32:c6:a9:50:e1:e5:d1:f3:b4:a1:f7:2e:10:
                    5f:60:27:ad:c2:d9:4b:31:62:e2:6d:a1:bf:ac:ab:
                    8a:18:41:a6:65:e8:f5:bd:31:9e:95:8e:2a:dd:4c:
                    a8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A5:B9:AB:46:AC:36:E5:60:9F:E1:CC:C2:BC:2E:19:8B:DD:41:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/fbdb4fb6-f252-35e8-a11b-4dbcea574ad3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.43.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:9b:28:e2:72:20:f6:ad:28:b6:a0:af:c7:14:81:8c:ef:2c:
         c2:85:ba:ba:ef:1b:68:8b:a9:6a:5b:29:47:30:ee:ae:a1:2d:
         28:31:ec:4f:47:38:3c:00:9f:72:fc:75:f5:cc:f6:ee:96:91:
         75:23:be:38:d8:12:b8:64:ed:4e:bb:6e:fd:ba:68:c2:02:87:
         e4:9c:cd:b6:7b:86:fd:6e:cd:db:03:cc:63:cb:c8:e2:b1:9f:
         26:b7:b3:42:2c:e7:13:90:40:ea:e1:aa:90:3c:58:44:08:94:
         15:82:2b:0c:a2:3d:06:84:9a:99:42:98:d4:7f:24:13:54:8f:
         91:21:c9:ba:45:ab:c3:df:9b:97:95:44:7f:bb:fb:e3:43:72:
         60:96:36:6c:83:65:7b:75:7f:4f:0d:1a:d8:78:46:fe:2e:d9:
         3f:9b:71:79:2b:77:16:d2:78:96:ae:98:99:80:66:6d:cd:37:
         5c:4e:a1:b2:9b:61:e0:39:13:d6:47:57:8b:b2:20:a1:0e:09:
         0a:77:1e:f5:ac:bb:2d:bd:09:06:2b:3b:f1:b7:a4:60:ed:96:
         99:13:f2:9f:6d:07:fc:e1:f7:a6:f4:db:fb:94:72:36:83:c2:
         79:43:45:77:78:9c:36:d2:8f:17:6f:ac:00:47:0d:e6:f1:cb:
         f1:cd:12:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:54:14 2025 by rpki-client