Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ecbbf11e-413f-3a45-8aca-37ec4c7d6912.roa
File:                     ecbbf11e-413f-3a45-8aca-37ec4c7d6912.roa (raw, json)
Hash identifier:          LwkWqtvS1ZNTtxYlOyDCyhc05TOGfT9fOuJrb8rhJFY=
Subject key identifier:   33:59:CE:FB:39:6F:81:32:F6:96:7E:0D:94:02:D8:94:8C:37:E6:78
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584ADD669CAF753BEFD20C8E1F00
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ecbbf11e-413f-3a45-8aca-37ec4c7d6912.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     5650
IP address blocks:        141.140.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:9c:af:75:3b:ef:d2:0c:8e:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=04f6892f-bac2-43ca-91c1-21ea6ea6aa7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:a8:80:dc:af:98:ad:5b:c1:b8:ba:95:8c:
                    e6:6d:61:c0:4c:b0:03:eb:1f:95:fa:86:1c:5d:6c:
                    96:c4:94:c3:a8:a5:31:e1:a3:d0:0f:08:a4:77:43:
                    22:b1:cb:06:b0:30:59:8f:26:d4:18:b4:e5:54:18:
                    9e:36:56:27:bb:a8:68:ea:1c:4f:bd:72:17:15:88:
                    73:e3:cf:15:63:02:b1:73:b1:f7:01:66:31:17:c7:
                    dc:7a:2d:15:35:a9:6a:c3:fe:90:29:55:91:6b:e8:
                    8d:9c:18:6e:af:a5:62:fc:64:be:53:fa:d2:a5:77:
                    27:33:49:ad:e7:a6:86:7a:62:8b:2e:62:d9:c0:17:
                    44:d5:1c:4e:3e:7f:f6:f0:99:a5:ad:a9:3b:af:ca:
                    f1:c1:1e:c3:fa:e4:8c:66:77:5f:84:00:1a:67:18:
                    37:46:2f:1f:c6:66:50:c2:c1:0e:16:ce:f8:2b:c6:
                    f9:e1:52:89:b0:47:c6:1d:65:bc:f4:29:43:00:1f:
                    0a:91:19:f6:e0:62:0e:c4:c9:8d:10:7e:6f:da:35:
                    98:09:4d:92:4f:80:f5:c1:18:46:b9:33:bb:b9:6d:
                    29:5d:af:81:b3:c8:b8:7a:10:6a:26:c9:01:73:20:
                    29:46:fc:a5:e0:48:d5:90:ec:7a:3c:cd:85:73:ef:
                    33:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:59:CE:FB:39:6F:81:32:F6:96:7E:0D:94:02:D8:94:8C:37:E6:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ecbbf11e-413f-3a45-8aca-37ec4c7d6912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e0:85:20:ba:b8:07:14:2c:fe:a1:90:90:78:09:47:99:ff:
         f6:b1:2b:61:12:5d:0c:04:0d:98:3d:4f:c4:95:0e:8a:bb:1c:
         4e:42:af:72:ac:ea:29:0d:a9:6b:b3:5a:98:83:45:3e:bd:c6:
         c0:3c:54:3e:17:64:11:5c:c6:34:8e:c5:6e:14:c9:d2:2b:be:
         31:46:b0:7a:95:37:a5:88:f5:6f:6e:71:b0:ad:fd:8f:4b:80:
         79:cd:7f:6f:e6:1e:f0:a4:fc:d5:bc:81:f0:e6:e0:75:6f:2b:
         fe:b4:e8:50:21:16:59:5d:0d:6a:2a:1c:b2:26:b2:07:b0:63:
         cf:a2:cc:98:50:39:5b:60:12:0f:df:33:e1:00:88:95:13:e9:
         9c:37:4c:c3:b4:5e:e2:5a:aa:25:20:5e:42:aa:e9:2f:ec:51:
         7c:cd:6a:24:04:da:95:e7:3e:a3:ac:50:b2:cf:28:79:eb:06:
         4f:49:53:bd:0d:19:c2:79:30:a9:53:bb:6a:90:e3:40:0e:47:
         2e:09:76:42:88:00:7f:79:ad:66:88:ee:96:df:08:7d:8e:a2:
         a7:d3:f6:81:f9:8c:6a:af:82:3e:9d:5b:59:66:ab:0c:b2:5b:
         ef:b4:6b:b9:e7:77:0f:08:66:53:d8:b8:21:cf:b3:62:06:b6:
         4d:64:91:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:57 2025 by rpki-client