Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/53c429fd-60c4-384c-91a5-66fed1b071a1.roa
File:                     53c429fd-60c4-384c-91a5-66fed1b071a1.roa (raw, json)
Hash identifier:          iFGLNvibWltsKKR+xbj688fh/eMkQ1JLjlbP9P8x0aw=
Subject key identifier:   F8:8C:FA:EA:85:7C:52:06:B5:63:1D:8A:DB:3C:D8:29:51:A9:7D:07
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584AAB2649CF6D57DD4C179F0B00
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/53c429fd-60c4-384c-91a5-66fed1b071a1.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     42
IP address blocks:        205.132.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:49:cf:6d:57:dd:4c:17:9f:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=7274e002-8cdc-4ac3-9553-ea7452ebaec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7e:5d:e1:b5:ae:f4:55:a7:fc:93:1a:3a:30:
                    1b:d5:a3:6f:29:c2:a1:1b:5c:a7:61:52:a6:92:80:
                    98:41:f9:ed:77:17:6b:d1:ee:ec:27:3a:cd:a6:f7:
                    ec:df:61:b2:5c:09:66:2b:6e:b8:53:ad:09:87:da:
                    56:d1:a9:fa:88:61:f8:81:d4:f6:18:2f:87:34:0e:
                    bf:49:aa:5f:de:7e:ef:42:a3:53:39:cb:60:62:c1:
                    2b:52:e3:c5:4b:28:26:88:8c:27:09:f8:f0:d8:80:
                    3d:09:a9:77:21:7a:89:b7:ea:31:20:ea:2f:5d:6b:
                    1e:2d:ed:2c:ac:48:92:0b:c9:97:a0:af:5a:9e:30:
                    28:b2:ed:61:3c:86:db:0b:35:1e:9f:b1:5b:c8:21:
                    d3:ad:7b:d9:d6:70:c8:4d:2f:0f:2b:4b:c2:aa:46:
                    e8:9c:e5:f0:f9:a7:15:70:e7:d4:08:08:f6:48:2f:
                    60:c0:e8:3c:23:3c:32:33:4f:06:2b:e2:9d:67:e0:
                    72:da:93:37:08:a8:c7:a7:8b:8f:1d:be:91:d8:21:
                    86:f6:68:4c:3d:97:48:29:49:7e:a8:ca:c0:b7:9b:
                    20:6e:33:c1:8d:ac:ef:ec:c0:10:6f:48:bb:07:8a:
                    83:a7:73:13:d5:81:b2:da:dd:fb:20:25:43:d3:0a:
                    4c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8C:FA:EA:85:7C:52:06:B5:63:1D:8A:DB:3C:D8:29:51:A9:7D:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/53c429fd-60c4-384c-91a5-66fed1b071a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.132.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c5:24:e8:0f:8d:64:da:07:aa:cd:30:3c:22:c9:f2:64:4f:
         33:b6:46:ca:36:37:9b:4c:43:5a:e9:2d:9a:db:56:33:6c:52:
         54:ce:24:af:87:51:d8:f8:53:57:51:e7:ac:50:ff:00:91:02:
         fb:09:b7:6a:f6:eb:7a:eb:78:17:65:00:66:8e:f1:7f:e8:da:
         67:ec:2a:4e:9d:94:b8:d3:1e:a5:ad:93:cd:05:4d:4c:74:b9:
         d8:c2:98:09:9b:1b:61:66:39:9e:ba:bd:39:f9:0b:ea:60:af:
         a7:43:d2:08:d3:5c:7d:78:bd:d6:b5:8b:d2:47:32:ca:ea:9a:
         70:6a:e7:59:08:78:58:45:d3:70:04:51:0c:cb:af:39:e2:38:
         78:31:13:a6:5e:2e:6a:69:0e:30:a2:6d:28:6b:8d:8a:78:57:
         a4:cb:63:94:69:02:d1:5e:98:48:a3:f0:ea:58:4e:72:70:76:
         44:27:12:9e:5b:1f:f3:fd:20:4f:bb:f8:d3:69:ba:6e:a9:a2:
         d0:9b:f2:dc:8c:4b:e4:a4:73:4d:9b:39:5b:af:73:fa:13:41:
         26:0e:76:08:72:36:f9:08:f6:18:9f:4c:28:e7:04:a9:17:0e:
         dc:a6:76:c3:ca:8c:bb:3b:fc:e2:cf:3b:91:41:20:d7:6b:c7:
         28:d8:a2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:58:02 2025 by rpki-client