Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/886ac31e-0df6-30c2-9f41-bc0c4849c6da.roa
File:                     886ac31e-0df6-30c2-9f41-bc0c4849c6da.roa (raw, json)
Hash identifier:          lbBfWpw3F3L7dL8sD+wj06kPPm/1WGpjCEUiT/y5MyU=
Subject key identifier:   50:85:10:AF:D8:5A:B8:89:B0:BF:CD:34:87:97:CB:05:D3:45:1F:6A
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584AF0F12F9D2854BCBC8F044900
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/886ac31e-0df6-30c2-9f41-bc0c4849c6da.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     20055
IP address blocks:        23.157.48.0/24 maxlen: 24
                          69.28.32.0/20 maxlen: 20
                          141.193.60.0/22 maxlen: 22
                          162.213.180.0/22 maxlen: 22
                          199.127.112.0/22 maxlen: 22
                          2604:3b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:2f:9d:28:54:bc:bc:8f:04:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=63c1c631-322f-4208-af89-d6e6a94cce21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:7d:ca:53:e5:83:d1:da:06:93:bd:bf:a4:
                    08:4e:7f:d2:ed:29:ec:2b:de:da:5f:60:43:f2:46:
                    a0:8b:ce:42:c7:3a:4e:ea:b0:61:05:68:2c:21:a8:
                    59:93:31:99:5a:58:d4:9a:b3:eb:c6:4a:9c:60:fd:
                    be:4e:31:e4:5b:6c:d1:a0:38:56:ac:21:60:3f:d6:
                    9d:e1:b4:90:ae:0e:45:9b:e1:d9:23:80:4c:7c:fb:
                    57:17:27:e9:f1:98:40:c2:62:7b:e8:a3:36:32:66:
                    64:fe:da:30:74:79:31:45:3e:a2:0e:74:2c:9a:bb:
                    1f:34:32:8b:f3:a2:13:10:8b:02:0f:02:41:4f:c8:
                    e3:9e:71:4f:d6:49:f3:07:be:2f:d8:01:dc:da:d8:
                    14:29:37:34:47:8a:2f:69:66:36:13:77:dc:56:14:
                    f6:b9:74:e6:23:fb:4f:bb:e9:32:60:bc:32:cf:4c:
                    87:b9:61:7c:c2:f8:db:d1:7b:3b:22:a4:b0:84:a7:
                    f3:d0:9d:e6:94:1c:b2:f2:2b:e0:5a:92:e8:57:65:
                    d7:8d:d9:ec:59:81:35:69:b1:bd:56:46:d4:58:89:
                    b6:c6:c8:2c:30:65:95:0c:1f:e5:8c:74:98:c0:06:
                    d1:76:c0:68:76:03:09:5a:07:e8:b9:0c:14:a2:ae:
                    a7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:85:10:AF:D8:5A:B8:89:B0:BF:CD:34:87:97:CB:05:D3:45:1F:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/886ac31e-0df6-30c2-9f41-bc0c4849c6da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.48.0/24
                  69.28.32.0/20
                  141.193.60.0/22
                  162.213.180.0/22
                  199.127.112.0/22
                IPv6:
                  2604:3b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bc:59:f3:13:84:2b:7d:10:15:f7:39:13:c5:a7:3a:48:c5:
         f2:81:b4:09:4b:82:8b:9f:da:ab:84:eb:98:4c:3c:c6:d0:5d:
         0a:aa:d1:9a:ad:ed:cd:e4:89:cc:5d:a7:f0:7a:20:6d:5d:7e:
         bc:ef:bc:8b:68:34:fe:9c:bc:41:b4:92:40:12:85:6f:dc:f0:
         3b:c9:5b:93:1e:dd:3b:b4:6d:54:e5:81:63:b3:c0:ed:0c:70:
         b8:f7:7a:56:5a:30:ff:c6:d8:30:b4:a1:88:f0:11:d8:1a:01:
         28:49:55:bf:47:ea:5b:32:6a:54:d5:75:e8:33:23:fd:ec:54:
         28:63:fa:29:99:95:c5:42:87:fa:88:20:c2:2f:70:dd:00:2f:
         2d:c6:07:54:cc:28:00:51:e7:39:11:66:81:05:35:49:f7:77:
         8b:26:b8:39:77:93:ae:e6:48:a2:df:e1:88:55:f3:e6:54:50:
         d0:9d:89:bf:49:15:43:f5:40:39:30:4e:85:d1:7e:d7:49:ba:
         7b:75:04:43:c6:3c:63:32:93:c9:0d:51:e3:9c:58:cb:61:81:
         51:c4:e4:13:8e:2c:f4:b2:5a:cd:62:29:ba:ec:97:b7:78:8c:
         aa:fc:dc:d3:52:e0:27:2f:e2:52:b9:cd:7f:72:75:71:80:57:
         fd:65:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:14:50 2025 by rpki-client