Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa
File:                     01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa (raw, json)
Hash identifier:          7jvhvOJF1NwhworbQbuR3eAGGceY32Zu1vFgesEZknk=
Subject key identifier:   51:00:57:7D:72:AD:AA:E7:D6:72:A1:79:5E:16:AA:30:A5:61:A4:4F
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F4328584AA6F62A9FD477485B620A4180
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        144.81.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:2a:9f:d4:77:48:5b:62:0a:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=4feebf4f-0bb0-4f47-92d6-d9b74f50c520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:22:b3:e7:ae:b3:0c:cd:70:42:b9:c2:68:39:
                    8e:22:67:ed:e1:7b:23:cb:df:f3:b1:b9:2d:d2:5a:
                    e3:26:cd:a3:1e:ce:d4:ee:43:c5:5a:f0:8c:6c:88:
                    64:42:ce:d8:3c:70:37:b9:bd:f7:64:33:f3:36:e0:
                    20:06:c1:de:62:17:c1:34:54:96:16:3e:41:19:01:
                    6b:4d:b9:9f:47:8e:68:c5:28:4e:5b:4a:ef:e8:7e:
                    8d:fb:b8:b7:d3:7e:28:f0:e5:27:dd:30:6d:13:5e:
                    55:91:8c:64:06:0c:0a:f8:88:10:00:0f:f9:82:fc:
                    21:5a:6a:aa:67:36:b8:df:f1:18:a8:f1:1b:1a:da:
                    0c:2e:d5:f1:78:60:04:27:e1:6e:c6:aa:77:11:46:
                    e5:6a:29:2b:41:24:df:91:b8:90:3b:9b:2c:6d:47:
                    48:a1:78:19:a0:8d:07:31:5f:db:63:fd:2f:8f:8c:
                    02:c6:fc:e8:47:0e:45:65:45:95:0f:d1:4c:3c:c9:
                    e5:bf:45:29:d3:43:d3:2e:16:5a:76:72:a9:a4:21:
                    9e:97:9e:68:a7:50:72:0f:7a:23:bb:f2:15:34:84:
                    a6:08:7a:0e:2c:c1:a7:ba:3b:98:ed:ce:89:b5:18:
                    7b:04:5a:f7:d6:fe:cb:6d:14:30:f1:9f:e1:eb:cb:
                    12:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:00:57:7D:72:AD:AA:E7:D6:72:A1:79:5E:16:AA:30:A5:61:A4:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/01c2b0ce-3cf3-3e74-94d5-04c80bbb4d00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:9f:d0:e7:65:51:1d:22:1c:58:e8:38:f4:ed:f5:e8:ab:79:
         cc:95:5f:cc:dc:2f:59:29:20:b4:d8:8a:8f:e6:81:33:95:0a:
         10:c4:79:d6:d3:93:4d:93:45:35:ec:38:ac:d0:1b:b9:61:3d:
         ae:75:97:cb:66:cc:da:75:e5:aa:d3:88:21:95:2f:fd:28:24:
         c2:9f:f9:c4:60:8e:35:30:3c:e9:38:e0:8a:14:12:9a:b4:0a:
         8f:6c:6a:bb:05:99:8a:01:52:b1:ca:39:8a:56:83:e4:90:81:
         f1:6d:7d:2b:78:16:4a:b8:e7:c9:e7:73:4b:96:89:25:64:08:
         4d:dd:e2:8b:c2:78:72:10:be:29:15:cc:94:b4:0b:bc:cc:59:
         56:3d:50:83:43:44:f3:e4:0d:b6:54:9b:45:4d:c0:3f:8e:ca:
         ec:3b:d6:12:89:75:f6:df:af:b6:24:8a:99:3f:03:6d:26:05:
         f6:3d:75:d3:46:f9:81:ff:6e:0c:7a:0d:e0:a9:34:c4:f1:c5:
         6e:bd:43:63:21:ca:b9:9b:ef:38:fd:1f:02:ce:10:17:09:9a:
         a1:a8:ca:58:fe:a8:af:f8:83:cd:ab:0a:b5:a7:4f:38:51:0c:
         5b:28:67:54:06:2e:82:b3:20:f0:5d:93:12:10:2c:9a:cc:70:
         f3:e9:f9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:54:37 2025 by rpki-client