Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa
File:                     f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa (raw, json)
Hash identifier:          jmFe/8GL/jiRN7MzY4UYZPiOaVNyQiHt9e4laqkG5OU=
Subject key identifier:   BF:A7:21:9B:C3:6C:34:74:CD:B3:3D:AE:97:CB:1B:2E:43:0B:49:41
Certificate issuer:       /CN=01b2d667-c096-462f-9ad9-6391b09e9746
Certificate serial:       010D0C9F4328584B2B9191309865FA51AB25FC80
Authority key identifier: EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     63018
IP address blocks:        199.59.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:91:30:98:65:fa:51:ab:25:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b2d667-c096-462f-9ad9-6391b09e9746
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=ac893d52-2de6-4233-b1a9-58840f67761e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:34:0b:95:39:67:73:4b:75:76:42:0a:83:3b:
                    f6:83:de:63:ec:f7:0b:c3:eb:ea:db:75:9a:f0:85:
                    1d:e5:71:71:93:96:63:62:3d:a5:df:7f:08:ba:0a:
                    c7:e9:9f:d5:96:1c:db:6f:b5:35:ca:72:f1:10:50:
                    47:72:32:fa:4e:d1:27:9e:0f:46:40:00:98:35:c3:
                    74:ed:a7:9b:9e:e2:16:c8:7a:79:f8:da:9f:fc:a6:
                    8a:80:60:0a:a4:b3:6f:e2:f3:77:67:0d:42:5d:94:
                    c7:35:77:9c:66:a8:56:bf:96:68:56:d7:b0:ba:1d:
                    6b:32:eb:55:43:8c:dc:9f:e1:5f:fa:33:e0:1b:ab:
                    7b:46:d1:87:df:04:6e:fb:f9:57:a6:54:f0:5d:3f:
                    7a:28:58:91:a3:ff:dd:15:89:5d:91:4a:76:33:ef:
                    dd:15:fa:32:f6:2a:26:b9:48:94:12:7f:2e:f2:98:
                    c4:b0:c9:07:f6:60:11:d2:26:bc:41:cc:b7:94:8c:
                    7f:69:e3:23:c1:51:d7:3d:0e:8c:fa:f6:d5:49:45:
                    b3:3c:d0:2f:aa:fe:70:f5:d0:4d:90:bc:3e:9e:b4:
                    cd:e8:55:41:02:2b:f5:dd:1a:dd:09:5f:87:26:f6:
                    59:dc:03:eb:c0:48:ae:7a:18:a2:b2:83:29:f7:5a:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A7:21:9B:C3:6C:34:74:CD:B3:3D:AE:97:CB:1B:2E:43:0B:49:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl

            X509v3 Authority Key Identifier:
                keyid:EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:45:5b:42:16:1f:12:af:97:4e:de:57:a9:30:97:b9:10:0c:
         c8:d1:66:25:b8:2d:5e:ce:b3:37:01:ba:c0:d0:61:2a:21:47:
         5b:bb:e3:19:ee:b8:d8:51:19:ed:88:0f:b2:17:3f:90:d8:75:
         3c:65:73:b3:84:45:94:cb:8b:3d:ea:63:ad:5b:d6:60:f8:44:
         4e:ef:a5:08:02:94:63:cb:8b:8b:10:a9:a8:84:3b:c1:6c:e0:
         c8:02:30:06:b2:19:10:cf:95:8e:b2:0a:bb:ee:24:42:d6:9b:
         da:a8:24:b8:8b:e0:bc:d3:08:09:a7:9c:c6:fc:6a:38:0e:55:
         31:fe:18:1e:f3:a8:2e:e7:ea:f6:7a:8a:5a:47:16:db:57:23:
         b3:72:3d:a8:68:7f:30:55:29:87:79:8b:45:d4:bd:12:09:77:
         f2:4d:33:af:28:eb:6f:21:0f:ea:9d:b9:ec:fd:ad:02:42:26:
         c0:37:17:3a:9e:0b:8d:b6:e6:fd:85:bc:60:f8:df:c6:b6:aa:
         00:0b:f9:08:8c:b8:3e:cb:c2:0f:47:c5:a4:8b:82:ca:3a:9d:
         5d:de:37:ce:d0:8a:66:6b:0c:53:d8:c0:e0:d9:da:c1:06:b2:
         f3:f8:3b:70:e2:f4:0a:8d:5c:3b:ea:7f:77:51:cf:e0:8c:54:
         58:28:78:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:09:30 2025 by rpki-client