Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa
File:                     53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa (raw, json)
Hash identifier:          dGHwbrV04LErKLkWV7FcbXivCbDN4xdA1ImsoH/ACQo=
Subject key identifier:   CD:8F:D7:32:5F:5A:7F:6F:51:ED:A8:DE:A5:E7:91:7D:8D:DD:96:A4
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584AD0D6434838DC0E273BBFB070
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     54994
IP address blocks:        138.113.15.0/24 maxlen: 24
                          138.113.74.0/24 maxlen: 24
                          138.113.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:43:48:38:dc:0e:27:3b:bf:b0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=8aaeb073-ffe5-4d6d-b95d-362f1b201de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:f5:5e:81:c7:29:5e:0f:d6:88:71:c8:41:
                    3e:31:4e:16:b0:71:20:02:52:dd:e1:6b:15:a5:26:
                    5a:71:4e:64:00:68:0b:26:1b:ce:08:0e:28:67:63:
                    cd:bc:fd:b0:ac:cb:92:16:ac:ff:bd:a7:f3:53:a4:
                    13:3a:42:45:8d:07:e2:0a:ae:38:4a:ee:95:13:a4:
                    d6:fb:8d:a7:8c:49:70:3c:ce:c2:ee:46:c0:8a:92:
                    b0:77:dd:ae:23:47:ec:9c:f0:dd:22:f4:b9:c8:c2:
                    a4:f0:2f:43:cb:48:da:3b:6c:b4:a4:74:72:1a:ed:
                    68:f3:8f:bb:2e:33:67:ea:bb:09:90:1e:84:9c:0b:
                    eb:7a:77:2b:f8:62:78:41:d9:e5:e7:bf:6e:2d:10:
                    26:b9:62:f3:31:60:73:5f:20:c6:f9:82:51:94:4e:
                    b5:f4:84:6b:40:31:0c:d2:bc:28:69:87:c0:da:f9:
                    d3:45:7a:b1:5d:15:b7:44:c2:38:93:eb:4f:c8:15:
                    3b:68:e2:79:4a:ca:5a:4b:d6:e8:05:88:c6:90:ea:
                    47:e8:43:25:e1:75:65:85:21:22:e2:ed:6b:6e:c3:
                    5f:c1:4a:67:f1:37:22:90:61:e9:df:cd:d4:f1:17:
                    84:0a:d6:c2:a0:f4:d7:db:94:d4:0a:1d:f2:c6:40:
                    e1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8F:D7:32:5F:5A:7F:6F:51:ED:A8:DE:A5:E7:91:7D:8D:DD:96:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/53a74fb3-8b3d-3ffa-9e6e-0fd7ddb1461c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.15.0/24
                  138.113.74.0/24
                  138.113.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:db:84:4e:57:23:6a:d8:1e:e9:2e:44:99:52:ef:cc:13:27:
         93:4a:86:35:94:39:35:c9:f8:2f:e9:e4:62:2f:81:63:13:67:
         7b:b0:e9:7a:d0:9e:77:a5:61:69:68:06:9a:34:c5:ef:5a:c7:
         98:ae:f2:be:7c:40:c7:b6:fe:2c:1a:6d:b4:e3:d7:49:05:06:
         a3:42:f0:93:d4:73:dc:35:f2:78:3e:fa:6d:e8:a4:54:8e:ce:
         e5:77:7e:ae:12:6d:9e:e0:01:5b:e5:69:8f:83:44:7c:c3:57:
         17:8c:6f:ff:e7:c0:95:42:be:8f:32:9c:d6:d7:f0:1a:49:8c:
         0a:8b:d5:76:dc:80:50:3a:76:d8:ac:ca:c4:1f:0c:f5:6c:f0:
         55:37:1f:4e:17:c6:ba:98:e0:af:38:96:73:66:f9:99:73:cb:
         6c:f4:56:b7:df:e9:69:fe:ef:7f:1b:76:06:31:18:49:aa:87:
         2c:85:53:a8:7f:81:21:1b:79:92:57:f5:e8:03:64:5d:bf:2a:
         8a:42:af:4c:7f:98:93:c3:52:4e:15:5a:ad:81:2c:db:29:83:
         d4:58:3a:95:aa:b3:2e:68:84:ce:e8:7c:5c:0c:df:40:90:5a:
         02:43:00:3a:19:33:10:4a:dc:4d:c0:23:4c:6f:c4:36:56:24:
         d1:ab:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:55:20 2025 by rpki-client