Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/a6582479-22e2-3b2a-bbf7-5e4e4ae3ff4f.roa
File:                     a6582479-22e2-3b2a-bbf7-5e4e4ae3ff4f.roa (raw, json)
Hash identifier:          7hUds6buI7Gt+dn7oKN+dlrv91wZCuPp0skieCcfZeA=
Subject key identifier:   3E:07:86:19:25:0F:CC:FD:F3:F2:EE:FF:F3:0E:AF:59:39:85:85:60
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F4328584A899F6C74B8AC7644FA734280
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/a6582479-22e2-3b2a-bbf7-5e4e4ae3ff4f.roa
Signing time:             Wed 16 Jul 2025 12:47:44 +0000
ROA not before:           Wed 16 Jul 2025 12:47:44 +0000
ROA not after:            Tue 14 Oct 2025 12:47:44 +0000
asID:                     9823
IP address blocks:        159.182.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:9f:6c:74:b8:ac:76:44:fa:73:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 16 12:47:44 2025 GMT
            Not After : Oct 14 12:47:44 2025 GMT
        Subject: CN=79d16014-16cb-4c8b-96af-ce80de5c1dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:e4:9e:c2:1d:81:0c:e3:50:ca:cb:11:86:
                    15:04:c3:7e:f3:cd:9c:76:e9:04:08:b6:8d:b8:93:
                    29:84:3b:7c:87:07:c0:95:83:7c:2f:da:0c:c7:52:
                    1d:96:56:7e:eb:da:7a:8b:8b:7a:0c:4b:90:10:aa:
                    85:ac:37:16:b3:5e:6a:9d:0d:29:6f:e0:cc:b2:24:
                    7e:c0:34:59:75:0c:ba:2e:2f:ec:b9:9d:4b:fe:1c:
                    cb:1f:39:30:b2:e4:83:94:a4:08:ff:4c:69:1d:5a:
                    65:6d:2c:fa:9d:73:39:29:8e:fc:9e:83:7c:2a:8e:
                    41:37:17:a2:08:a9:2d:43:ac:76:81:1f:e6:31:6b:
                    88:14:8a:a4:16:76:91:e0:78:4d:17:d5:56:f4:e2:
                    02:24:85:67:87:22:4d:52:39:21:22:fb:3c:58:bf:
                    c5:4e:e3:ff:bc:b5:66:2b:eb:90:d7:dd:af:ce:ee:
                    55:9b:c5:f5:a6:b7:ec:50:9e:10:ee:1e:c8:6b:a5:
                    c6:89:eb:d2:82:ac:72:47:29:d0:24:a3:5b:ea:a2:
                    2b:c7:a9:9b:e6:3f:5d:76:78:11:d5:89:17:16:4e:
                    1e:d4:1a:54:ba:aa:23:fe:57:09:4e:19:d4:0b:8b:
                    39:0a:dc:0c:ef:ef:a3:b4:c6:e0:65:7f:a4:27:74:
                    2a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:07:86:19:25:0F:CC:FD:F3:F2:EE:FF:F3:0E:AF:59:39:85:85:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/a6582479-22e2-3b2a-bbf7-5e4e4ae3ff4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:6c:63:f7:79:93:89:a0:f6:a0:9c:d8:b0:60:4b:28:b7:80:
         08:b5:72:02:7c:bf:fc:c9:cb:ab:7b:e8:e1:dc:c1:f7:c5:61:
         82:78:9c:84:93:24:62:01:68:2d:7c:3b:98:e4:5c:5c:c6:fb:
         ff:79:85:17:f4:01:c4:41:df:93:ac:db:43:07:84:b8:46:b7:
         0d:17:5f:82:68:80:19:a1:d6:d1:30:ce:5f:ad:b1:f6:96:7c:
         3e:69:fb:f2:fe:50:ea:24:56:8d:29:4b:62:53:03:fb:85:7d:
         65:81:48:79:17:b3:2c:98:d6:6b:53:b3:b7:b3:12:1e:17:ae:
         b0:49:76:9c:7a:4a:81:ca:12:96:9e:d4:44:97:a3:6d:1a:7c:
         de:30:19:24:30:90:dd:99:47:fd:ed:f5:59:b1:8b:fc:98:5a:
         c9:41:73:52:2e:d4:af:26:b9:ca:97:c6:65:be:4a:bc:38:c1:
         48:37:86:19:fc:84:12:ce:7c:b6:92:6d:f1:0b:df:6c:cb:39:
         a9:02:73:3f:2a:8e:21:61:0a:04:08:15:1e:7d:6e:ae:24:1e:
         9d:aa:e0:29:56:55:88:c9:9f:0f:a5:b1:cc:dc:bc:f8:50:7a:
         c3:bf:78:37:1a:1d:38:62:26:73:f9:f6:4b:5b:c9:92:90:2a:
         98:33:ed:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:00:45 2025 by rpki-client