Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa
File:                     c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa (raw, json)
Hash identifier:          idM22kI6Fu+cxO2JSOwWRyxiTelRX6iKpay2bxdSoBw=
Subject key identifier:   F7:87:70:CD:8E:A6:29:5D:D0:C6:AC:05:B9:32:48:5A:E0:CD:EE:4A
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584AF0141870295D45723581A2E0
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa
Signing time:             Fri 22 Aug 2025 05:35:15 +0000
ROA not before:           Fri 22 Aug 2025 05:35:15 +0000
ROA not after:            Thu 20 Nov 2025 06:35:15 +0000
asID:                     31898
IP address blocks:        130.35.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:14:18:70:29:5d:45:72:35:81:a2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Aug 22 05:35:15 2025 GMT
            Not After : Nov 20 06:35:15 2025 GMT
        Subject: CN=883430db-3efc-4ad8-969f-c7a042153001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:13:d1:77:da:a9:5c:ea:c1:5d:cd:63:63:
                    fb:14:77:c2:ae:b8:6a:76:70:e9:3a:5b:05:19:0f:
                    94:bf:36:33:f9:1d:00:53:ec:ee:83:ca:7a:9d:47:
                    0c:95:5e:56:f0:6b:d9:bf:bd:a6:3c:4b:5c:7e:7c:
                    ba:f1:a4:70:bd:4b:39:b3:ad:c5:b5:fd:fe:b6:b8:
                    d2:53:ba:1a:45:29:89:0c:6c:99:d5:3b:99:cf:94:
                    95:4d:3c:83:5a:7b:b6:15:fe:1e:43:cb:12:8a:ea:
                    ef:b4:b2:c5:39:b2:4b:81:c5:af:f1:78:7a:5f:e1:
                    cc:08:b5:d0:19:72:3f:02:f3:fa:28:c9:ad:5c:54:
                    2b:22:45:34:d6:1e:3e:5b:88:4a:4e:7f:f1:73:a0:
                    02:53:f8:30:b9:4c:f2:af:36:cf:8c:2d:d0:95:c6:
                    90:56:56:8e:b0:d3:f3:54:1a:4f:13:f1:b2:6d:74:
                    2c:cd:0e:a4:ae:91:90:10:05:5b:cb:0a:d2:0f:6c:
                    d6:0a:86:cc:3c:6a:a6:b2:56:a8:67:66:77:2b:87:
                    0a:e6:be:08:1d:ce:24:13:c3:a0:6a:55:c2:af:75:
                    68:f6:6a:04:ab:e0:34:66:5b:f5:d0:82:92:93:cf:
                    9e:b7:26:57:eb:98:0d:18:5c:6b:c7:07:86:74:33:
                    9a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:87:70:CD:8E:A6:29:5D:D0:C6:AC:05:B9:32:48:5A:E0:CD:EE:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c9e354c6-120c-3abf-85d8-1e2a6bf0bf86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:3e:e4:ae:c2:c2:bd:c0:07:f3:ca:db:27:74:34:f2:3a:bc:
         45:ec:30:86:15:0f:94:db:ae:2b:3e:ca:9d:22:bf:6a:6a:ef:
         0f:99:82:58:e2:b7:a1:86:aa:e5:c1:bd:1c:90:c7:f9:de:b7:
         ca:4d:95:fc:ca:f6:64:ad:8f:ca:a4:fb:3e:b7:d1:e1:fe:f6:
         d8:cd:00:1b:78:7b:4f:d7:83:9f:0d:da:cc:e9:81:cb:6b:d5:
         ff:04:10:f1:30:35:65:85:79:b1:59:35:3d:44:aa:16:9e:9a:
         97:a0:c0:01:35:3c:90:f9:66:d7:d9:be:9d:9a:45:69:c0:74:
         f8:3d:f3:22:8c:e0:18:a2:4e:2d:5b:b4:fe:1b:30:54:10:57:
         7a:09:d7:e1:3b:db:00:9b:af:d1:31:16:83:4e:9a:d1:2a:e5:
         ed:d0:55:f5:e3:9f:17:1c:28:b8:ec:79:cb:0f:fa:74:10:5a:
         48:bc:10:4c:b4:70:3a:f6:78:4a:cf:52:62:68:34:e8:70:06:
         0a:8f:af:d9:b5:b7:e6:b3:4c:08:fb:ba:ce:99:ae:ff:ef:2f:
         82:63:4f:61:cc:57:cc:b4:8d:86:3c:08:d8:56:38:39:0f:a2:
         1d:72:24:0a:66:fc:2d:b7:56:3f:f0:a4:2a:50:b8:c1:ca:8d:
         5f:ab:25:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:27 2025 by rpki-client