Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/9db46ce0-1d53-3135-bc66-09ce5b7fdf6e.roa
File:                     9db46ce0-1d53-3135-bc66-09ce5b7fdf6e.roa (raw, json)
Hash identifier:          j2+AqsZWmrG1aFka9wZ7CpmQneTjbzTeFmV5OLTRnjE=
Subject key identifier:   AA:9F:4D:02:46:5A:6A:81:2E:8E:30:03:A0:8B:EE:B6:4A:01:72:8F
Certificate issuer:       /CN=41025fc8-e6c8-4422-acea-8126840c20bb
Certificate serial:       010D0C9F4328584ADA9BCB1833E289A8ED728E80
Authority key identifier: C0:34:EA:77:A6:A5:DF:C1:6A:A0:D9:2B:83:12:84:40:E0:38:E7:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/9db46ce0-1d53-3135-bc66-09ce5b7fdf6e.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     14574
IP address blocks:        168.75.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/41025fc8-e6c8-4422-acea-8126840c20bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/41025fc8-e6c8-4422-acea-8126840c20bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:cb:18:33:e2:89:a8:ed:72:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41025fc8-e6c8-4422-acea-8126840c20bb
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=8205462d-dd0f-47f0-b052-1dde10019464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:f7:d7:8c:6e:19:bc:52:02:5e:73:af:49:
                    e4:a8:8b:f1:03:8b:37:5c:ec:86:2d:7c:ac:3f:21:
                    5f:09:39:e2:0e:83:2e:67:86:a2:c1:7f:66:0f:22:
                    74:b3:b2:49:05:67:65:41:a5:e7:ac:c5:ad:6f:64:
                    fe:23:3f:9d:80:71:f1:91:97:be:38:3b:29:22:f4:
                    e2:92:f5:5b:3b:72:01:66:85:84:57:f5:58:72:17:
                    23:6f:bd:cc:f5:77:fd:94:71:9c:55:9b:53:7e:4e:
                    27:e5:07:8c:78:ea:d2:8d:e0:ab:8c:f3:98:4e:cd:
                    99:b1:ef:90:b2:f7:47:a4:e6:dd:64:41:6e:2b:15:
                    f1:cd:eb:07:b2:ee:80:7a:87:00:0d:88:c1:1d:f3:
                    29:a7:b0:8b:eb:f8:78:5e:94:56:80:3d:96:e6:f5:
                    5b:78:0e:d2:5d:a1:ce:81:8a:8e:e2:cd:1f:20:ca:
                    05:dd:27:71:7d:4e:b6:36:43:dd:1f:c2:ae:fb:83:
                    f2:44:b9:9e:a7:23:12:cb:74:2a:9b:21:75:0c:fc:
                    cd:88:34:92:d5:e5:3a:df:50:de:49:e7:65:40:9c:
                    b8:05:0b:b1:e9:d2:ce:76:54:c5:87:5c:64:70:38:
                    bb:7b:86:ce:06:d2:c5:52:24:ac:54:95:32:41:db:
                    1b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9F:4D:02:46:5A:6A:81:2E:8E:30:03:A0:8B:EE:B6:4A:01:72:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/9db46ce0-1d53-3135-bc66-09ce5b7fdf6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/41025fc8-e6c8-4422-acea-8126840c20bb.crl

            X509v3 Authority Key Identifier:
                keyid:C0:34:EA:77:A6:A5:DF:C1:6A:A0:D9:2B:83:12:84:40:E0:38:E7:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.75.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:93:44:37:91:2b:12:3d:c9:b6:2b:29:be:94:c0:e2:32:4b:
         5a:95:56:bf:54:0b:b1:40:08:f4:d9:d6:74:4e:47:da:f3:be:
         34:03:42:a3:6b:c5:78:9b:12:01:5b:a9:67:30:28:86:e7:e2:
         0d:5e:50:a6:55:8c:9a:d1:d9:7a:91:1b:0e:30:8b:8a:fc:14:
         58:39:ca:d1:8e:60:19:cd:db:8e:a7:57:34:a0:c1:b0:d8:4a:
         8c:4b:e4:c7:70:63:4b:0c:10:f1:05:bb:d9:65:fc:dc:81:30:
         41:08:92:cd:69:f4:9f:8a:88:76:59:df:9e:cd:0e:b4:37:fa:
         81:df:06:94:76:60:ac:27:0c:63:27:7d:73:d5:a0:9a:16:3a:
         3c:d9:3d:4f:2d:c9:4a:e8:8c:cc:ab:57:8c:20:ea:4d:82:77:
         68:08:7c:6f:90:b4:2d:b9:2e:27:d3:7b:5d:f1:e7:97:d1:3d:
         09:22:ff:00:ff:4d:63:d3:4b:b3:74:06:e2:2f:5e:5f:d8:c1:
         a3:ce:de:14:96:1a:52:b0:0a:13:ab:71:23:13:dd:61:ac:9a:
         a1:e5:50:51:60:86:df:c7:6e:3a:ec:11:ff:1c:a0:2f:aa:11:
         9c:9b:a2:f4:4d:93:9f:12:c1:b2:80:34:bd:a3:e2:0a:1d:3b:
         88:b6:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:59:49 2025 by rpki-client