Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/59e71e1a-ae50-3564-849a-54acf114c131.roa
File:                     59e71e1a-ae50-3564-849a-54acf114c131.roa (raw, json)
Hash identifier:          62ONQVf+FbNnUglh9c+IRezqz4yiXB4U1E5x9tFbaGw=
Subject key identifier:   5B:BB:CE:68:01:FE:70:BE:15:D6:CE:BD:EA:09:DD:D4:C6:C6:75:B3
Certificate issuer:       /CN=f52d9dd2-a206-4694-a550-d6639e33e9f6
Certificate serial:       010D0C9F4328584B0B76D89599460051F28CF880
Authority key identifier: BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/59e71e1a-ae50-3564-849a-54acf114c131.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     40714
IP address blocks:        164.152.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:d8:95:99:46:00:51:f2:8c:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52d9dd2-a206-4694-a550-d6639e33e9f6
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=df4fc4e8-31ba-4576-8080-86d36b580aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:4e:1f:bf:e1:ce:14:1c:86:ee:1b:cf:85:
                    af:c5:9b:69:32:0a:d3:e4:a6:8d:97:d4:23:bc:ef:
                    2a:c1:50:0e:6e:0b:1b:26:97:4f:bd:ff:91:69:91:
                    d0:a9:a0:b9:e5:8f:a6:78:38:6e:16:9e:d6:ea:01:
                    7b:98:1f:b2:32:1d:80:1a:8a:c9:59:18:d7:b9:7a:
                    95:96:a9:21:78:4a:2e:2f:b8:c1:27:06:bb:57:3e:
                    38:70:83:eb:d9:17:10:69:1d:57:2e:cc:a5:6d:3e:
                    c5:99:30:13:05:fb:f2:b4:c2:12:05:8b:af:1d:17:
                    29:3f:3f:f7:61:03:f1:f9:c8:0f:15:ee:59:d9:53:
                    b4:e1:9c:16:c1:ec:9b:2d:11:c9:09:b2:48:9f:32:
                    63:85:2c:38:a6:10:9b:ef:62:f3:4c:93:84:6d:f5:
                    79:db:1a:05:2d:59:ce:0b:85:53:a1:b4:4f:cd:ba:
                    75:8c:34:b7:c0:27:69:b3:73:0b:45:d1:fb:a5:32:
                    0e:09:28:42:a1:1d:98:53:ce:b7:62:48:f0:c5:f4:
                    73:4d:7a:32:5c:06:7e:c4:36:ea:b6:8e:dd:a7:96:
                    76:2c:05:e1:ec:f8:b1:13:03:e5:83:5d:93:b2:c9:
                    c1:74:31:6b:4b:b9:cf:fb:ce:5f:b0:c9:c5:59:72:
                    b8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BB:CE:68:01:FE:70:BE:15:D6:CE:BD:EA:09:DD:D4:C6:C6:75:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/59e71e1a-ae50-3564-849a-54acf114c131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl

            X509v3 Authority Key Identifier:
                keyid:BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.152.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:89:99:f4:e8:65:af:bb:6e:67:de:2e:2c:6d:d7:3a:9c:
         c0:7d:fc:40:da:2a:3e:75:9a:13:cf:d5:33:51:09:4f:b8:8b:
         be:35:4f:19:47:5c:b1:33:99:a3:53:7b:3e:e0:12:ea:b6:90:
         1a:b4:bd:9f:84:93:d3:00:8c:e2:39:5c:9e:29:c4:98:53:7a:
         62:6a:50:6a:d4:95:34:d9:33:9d:26:91:8f:f1:33:eb:07:2e:
         d7:f1:c1:b2:19:b9:ae:01:71:02:12:f6:f2:2e:66:cd:5f:f6:
         c0:29:59:f3:d5:3d:ac:3a:e9:09:7a:b1:6a:cf:24:40:4c:6f:
         2e:93:36:a8:ac:14:67:79:20:9a:23:56:4f:5b:3b:94:28:b4:
         66:a9:bf:c5:eb:dd:11:20:10:da:1f:73:49:58:0e:6f:9e:7a:
         c1:60:a1:1d:cb:d8:b6:67:49:9b:ef:1b:eb:1b:da:8d:5e:a6:
         12:b1:bb:f4:ea:c4:63:f9:7e:34:6e:49:80:35:36:6f:72:d9:
         e0:10:ef:5a:a3:d5:f8:46:be:16:4f:5b:69:de:fe:60:62:ff:
         75:8d:bf:d0:d4:dc:52:14:13:6a:0b:8a:0d:0a:4c:40:37:41:
         3e:33:12:2f:3f:1a:15:5a:d4:1a:b7:8c:db:69:f9:4e:18:b5:
         2c:d6:43:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:57:51 2025 by rpki-client