Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bb49121d-7647-3f34-8f02-f8d741546d3f.roa
File:                     bb49121d-7647-3f34-8f02-f8d741546d3f.roa (raw, json)
Hash identifier:          KCdlG/rXdrnSmBcS1zKcK73/bO1EzHWYIq2GMTIHmcE=
Subject key identifier:   6C:83:59:B7:71:CC:CE:CF:BB:09:B7:9F:65:15:FC:A5:05:78:61:67
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584AF0150C6007B9D43F23950680
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bb49121d-7647-3f34-8f02-f8d741546d3f.roa
Signing time:             Fri 22 Aug 2025 05:37:11 +0000
ROA not before:           Fri 22 Aug 2025 05:37:11 +0000
ROA not after:            Thu 20 Nov 2025 06:37:11 +0000
asID:                     31898
IP address blocks:        144.25.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:15:0c:60:07:b9:d4:3f:23:95:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Aug 22 05:37:11 2025 GMT
            Not After : Nov 20 06:37:11 2025 GMT
        Subject: CN=082f4a15-7c1c-49e3-8a46-55ce62cd66c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2d:99:28:81:82:34:7c:99:f1:9f:4c:c4:06:
                    4e:1d:06:4d:6d:f5:fe:8a:a7:da:fa:10:e8:74:ea:
                    79:dc:a9:24:42:f4:19:6d:bb:da:fc:5b:f1:cb:c9:
                    41:9c:98:c2:49:75:ef:2f:a8:f2:e6:7b:ea:1e:2b:
                    1d:6b:48:c7:75:b1:5f:a8:21:4e:e7:bc:d0:53:de:
                    24:68:ba:df:f9:65:6b:13:7b:4d:00:42:80:94:3c:
                    ec:0b:85:b2:92:f4:25:84:85:1c:ed:c3:23:b4:a0:
                    57:c2:b0:87:b5:5b:75:af:21:99:dd:ad:85:4d:2a:
                    6f:f2:87:41:e6:ff:5c:e0:12:9d:0d:67:c1:3f:80:
                    57:e5:e2:c9:44:a6:df:a7:9f:22:78:39:e7:08:38:
                    3f:1e:21:0c:1a:f1:a4:6f:fb:dc:59:15:15:db:f9:
                    b0:f3:0a:9f:80:a8:98:28:24:2a:93:5f:23:f1:81:
                    1a:22:9d:16:48:11:45:85:58:af:3f:4b:4e:90:be:
                    73:d7:e7:05:7e:e0:82:bc:5d:83:06:f6:f7:dc:3f:
                    e2:78:32:2e:c6:d0:e4:a1:70:7d:e5:1f:91:41:51:
                    4d:27:58:d6:3d:fd:fa:b1:be:d5:50:55:e0:2c:75:
                    4d:ca:ad:6c:f0:a4:45:36:08:cf:2a:7d:f2:52:4d:
                    d3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:83:59:B7:71:CC:CE:CF:BB:09:B7:9F:65:15:FC:A5:05:78:61:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bb49121d-7647-3f34-8f02-f8d741546d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.25.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:4d:82:f8:26:69:f1:66:d6:37:a2:3b:80:69:e0:79:ac:82:
         23:a8:31:b5:59:7e:82:a7:60:6f:d1:8c:b5:1b:f5:72:59:61:
         3e:cd:6b:9c:cd:c4:fc:0f:b9:fb:51:44:08:65:08:55:ef:71:
         20:6c:98:ad:63:9a:9c:d0:7f:3b:e5:bf:a7:49:a6:c7:ec:5e:
         6e:c1:c4:3d:80:9b:67:14:fa:e1:68:d8:c3:a1:cf:54:ef:de:
         fb:1d:93:46:15:e4:6c:f8:aa:e7:62:eb:77:8e:6b:b6:ad:16:
         f3:08:98:73:b1:23:58:a1:93:81:30:50:87:18:3e:a1:32:07:
         ab:2e:04:d7:bb:13:d4:df:c4:cf:0f:47:8b:5e:73:e9:cd:00:
         06:f3:50:db:44:bb:f6:cd:0f:a7:a0:8c:aa:3e:94:be:ea:dc:
         c5:9a:3e:a3:e6:5f:25:79:6d:03:3c:6e:47:20:c2:85:4c:cd:
         5b:c2:ea:54:3a:58:03:30:cf:ae:e6:95:76:92:ee:44:d0:86:
         79:57:ea:cf:fe:c3:81:eb:d4:ce:44:0f:c2:12:2b:da:61:c4:
         78:61:06:b2:d0:90:6f:8c:42:51:21:4b:f9:f6:25:04:5a:28:
         b1:53:d3:9e:44:c7:1e:e7:1f:31:21:e3:c9:4b:6c:2f:b6:9d:
         b4:7e:be:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:52:12 2025 by rpki-client