Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/6a49b156-6028-30c5-b60a-3bb373cf36fc.roa
File:                     6a49b156-6028-30c5-b60a-3bb373cf36fc.roa (raw, json)
Hash identifier:          BcduLVRYcxhPzRB3OOGb0zsWVTSRuHEVdAIjhnwagSg=
Subject key identifier:   AC:2F:84:9B:82:C2:AA:F2:02:CC:47:EE:74:25:0C:8D:A7:37:6C:FD
Certificate issuer:       /CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
Certificate serial:       010D0C9F4328584AC8764D43025E389201B71F20
Authority key identifier: 0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/6a49b156-6028-30c5-b60a-3bb373cf36fc.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     398940
IP address blocks:        192.245.221.0/24 maxlen: 24
                          192.245.222.0/23 maxlen: 24
                          192.245.224.0/24 maxlen: 24
                          199.33.130.0/23 maxlen: 24
                          199.33.132.0/23 maxlen: 24
                          199.33.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:4d:43:02:5e:38:92:01:b7:1f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=3bf8c89f-2400-4d26-a38b-87edbc649ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:76:d5:9c:1c:56:40:07:ea:33:70:8f:40:
                    be:7b:1c:d7:a7:67:a7:f3:81:36:57:4c:15:af:7b:
                    46:ef:06:e5:ab:1b:a0:6f:df:60:b0:73:af:c5:21:
                    2e:a3:63:5a:4d:e6:a7:6f:cd:55:7c:94:32:66:41:
                    c2:61:2e:94:b3:4c:1e:22:2a:e9:5e:b5:b8:65:e8:
                    0f:7c:d8:ad:02:34:ee:cf:d4:42:90:fe:d4:be:f3:
                    de:8f:d7:55:f1:80:5a:16:60:25:60:3a:78:4d:c0:
                    37:9d:1d:9e:1b:f4:08:99:b9:c2:5f:f4:c6:42:62:
                    c5:39:54:9a:1c:e9:7d:79:e7:72:7a:e3:dc:12:31:
                    da:c1:21:19:47:db:e1:95:68:2d:88:c2:89:14:fa:
                    07:b4:e2:9c:2d:d3:f4:57:34:c5:fa:21:cd:99:d3:
                    c3:e6:bd:3e:bc:63:d0:2b:35:57:92:b2:af:e6:7a:
                    ad:58:2a:51:b5:84:72:4f:a8:43:61:dd:0b:22:e1:
                    de:4f:54:51:41:2b:9b:5a:5f:e4:7d:b8:37:f8:5a:
                    02:c0:b7:2b:e6:c0:14:d0:58:e1:a0:94:8c:a7:8c:
                    5a:1e:86:2c:58:31:a3:7e:08:db:66:fa:91:02:57:
                    16:46:a6:64:8c:0f:bc:75:01:d9:de:a1:24:c6:71:
                    71:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2F:84:9B:82:C2:AA:F2:02:CC:47:EE:74:25:0C:8D:A7:37:6C:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/6a49b156-6028-30c5-b60a-3bb373cf36fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.221.0-192.245.224.255
                  199.33.130.0-199.33.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c6:37:9e:23:79:a8:65:6f:a7:a4:6d:2d:15:17:bc:15:54:
         0e:c4:59:48:1c:e8:de:3e:f7:6d:92:5d:f0:7b:c8:ad:d5:fc:
         7a:b8:35:50:44:ac:e6:46:6c:0f:54:25:66:4e:12:b9:c7:b4:
         db:e2:84:a5:8e:9e:cf:95:45:f3:10:93:33:5c:3c:c0:0d:bc:
         6e:0f:3c:79:7f:de:78:96:db:00:11:02:8d:d8:ac:4a:58:a2:
         de:8c:60:7a:f1:18:ac:08:bc:3d:df:54:ca:3f:4d:1f:c8:63:
         8b:59:c7:51:e9:50:8e:b5:62:f8:2f:53:06:a5:76:c3:21:69:
         34:47:56:2a:a0:b8:6e:fd:95:78:74:0e:db:25:db:49:67:ca:
         96:e2:5f:68:d5:cc:3b:c1:a8:ce:a9:8a:97:8f:50:a9:2b:5b:
         ee:49:b2:c1:1c:73:e5:db:d7:93:8c:4b:9b:e8:b3:6d:44:25:
         8b:5c:b7:72:77:47:ac:3c:0d:1d:51:78:24:1e:6e:a6:83:bf:
         55:f8:f5:9b:a5:de:af:6f:76:97:13:fb:a9:2d:1b:ae:4d:1d:
         59:da:7c:1d:a1:c8:1e:52:04:3b:fd:4b:aa:d5:fd:1d:b8:71:
         58:6f:2f:91:74:3a:59:11:3a:69:c3:7d:1b:f8:cb:6c:74:44:
         af:93:26:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 06:11:58 2025 by rpki-client