Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8502a5d8-1f65-37e7-b178-fc309fc8688f.roa
File:                     8502a5d8-1f65-37e7-b178-fc309fc8688f.roa (raw, json)
Hash identifier:          Rz+SMKrS+v3NarMWyStVJAnQKXmo8NKboflmDRODOVs=
Subject key identifier:   1E:3C:F5:FE:66:72:F6:E5:AD:28:3D:2C:94:5B:F4:C8:2D:DB:FE:3C
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584A119AAD3D123810C49A524700
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8502a5d8-1f65-37e7-b178-fc309fc8688f.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        155.226.208.0/20 maxlen: 24
                          155.226.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:ad:3d:12:38:10:c4:9a:52:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=f2cc2b4e-50c9-4988-9a33-5778a41bdec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4a:8c:2b:85:d2:99:f6:6f:62:3b:79:8d:0b:
                    72:1d:ac:f1:40:6d:6a:e1:9d:77:30:70:3d:7c:32:
                    72:98:1c:3c:d2:2b:af:ca:fe:d3:60:39:64:aa:fb:
                    57:e5:31:24:c5:4d:2c:96:d4:71:c9:e2:ae:9d:87:
                    bc:80:76:b9:69:60:86:18:c0:db:91:66:11:20:c8:
                    02:81:9a:f7:9b:42:38:67:9e:d5:d1:d7:2a:b3:62:
                    50:fe:81:cb:ea:31:b7:de:51:de:6c:8d:aa:c8:d7:
                    1e:ce:e2:9d:38:5a:df:dc:24:83:ea:7d:53:cc:bf:
                    f8:73:36:e8:31:61:0b:e8:34:30:6e:8e:7a:df:4e:
                    92:59:54:8a:37:b9:d8:29:5d:4a:c1:15:fa:3d:a1:
                    c4:fb:bb:8c:ad:92:fe:60:42:f9:9c:4d:7c:a2:ef:
                    d0:21:55:cf:ff:de:f9:7d:42:32:56:fe:77:42:28:
                    14:01:93:b1:a3:d7:7c:91:f1:4d:80:3e:e2:0d:ae:
                    e9:22:10:65:fe:cd:a9:59:6e:5a:90:c6:8d:17:f2:
                    9b:71:18:ad:2d:f7:a9:c4:22:f5:95:88:1c:8b:73:
                    2c:41:55:db:5a:00:39:74:7e:3a:8f:cc:67:2c:1f:
                    3f:36:22:8e:c0:e3:9c:1c:5c:79:6f:48:da:b3:e1:
                    59:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3C:F5:FE:66:72:F6:E5:AD:28:3D:2C:94:5B:F4:C8:2D:DB:FE:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/8502a5d8-1f65-37e7-b178-fc309fc8688f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.208.0-155.226.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d8:64:07:cd:2a:92:82:66:0d:f4:c6:07:fa:ea:f3:a1:38:
         4f:9e:b1:3f:ca:41:67:89:96:86:4d:44:e0:64:e1:45:7e:ff:
         d1:3c:e4:02:8f:6a:85:02:68:79:fd:68:4d:c5:75:a7:cb:69:
         98:f1:8d:91:94:db:2b:7a:89:ff:0d:09:03:00:4a:57:21:d3:
         f7:97:b7:8c:d1:e7:43:16:a8:f3:e6:7b:9c:01:eb:0c:f0:c5:
         a0:7c:9b:a7:86:aa:1d:21:3d:3b:c6:b7:32:ce:7d:30:3f:73:
         ff:95:6c:a0:42:af:dd:f3:01:06:d2:44:43:b8:cf:0d:e5:cd:
         26:84:74:8e:77:cf:5b:70:70:e5:44:18:37:c3:31:a0:16:32:
         58:58:72:49:f3:83:fc:4e:b5:aa:46:7d:c5:c1:82:8c:53:91:
         26:03:09:3c:a1:f0:b8:37:42:93:28:ff:ee:f7:3c:77:d7:09:
         d9:06:68:de:3c:25:81:52:ba:96:c3:d1:a3:db:7c:3a:ef:eb:
         fa:da:b2:3c:87:97:9e:26:45:48:51:14:b0:4c:19:01:5a:dd:
         98:f3:1b:70:3e:79:ed:42:f5:0c:89:c6:d1:d3:1d:29:06:2d:
         44:d5:df:b5:39:57:10:66:aa:5d:a9:fa:96:5d:e2:6e:f1:f3:
         07:99:95:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:10:31 2025 by rpki-client