Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5f78c620-308a-3e25-a96f-cfb53ae51fc8.roa
File:                     5f78c620-308a-3e25-a96f-cfb53ae51fc8.roa (raw, json)
Hash identifier:          axyGc2xbJ3hRdXIdbHtV7sPQCKvBTuoaRsMpUlH5XP0=
Subject key identifier:   90:8F:E7:97:1B:A0:86:A4:BA:C4:B9:95:B1:97:E9:C9:4D:BF:B2:1F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A98117118707AC91DDD364900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5f78c620-308a-3e25-a96f-cfb53ae51fc8.roa
Signing time:             Mon 21 Jul 2025 16:58:46 +0000
ROA not before:           Mon 21 Jul 2025 16:58:46 +0000
ROA not after:            Sun 19 Oct 2025 16:58:46 +0000
asID:                     2914
IP address blocks:        144.225.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:98:11:71:18:70:7a:c9:1d:dd:36:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 21 16:58:46 2025 GMT
            Not After : Oct 19 16:58:46 2025 GMT
        Subject: CN=6ddf9a16-6ad1-4837-ab2f-b29309b123a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:53:d8:66:35:4d:99:64:d3:0e:18:bd:e8:
                    6a:66:ee:c6:85:20:ff:54:37:28:d9:21:33:4b:69:
                    c9:be:36:35:68:d3:a9:74:06:64:21:96:a9:04:b1:
                    cd:3c:07:1d:d2:e6:ff:51:2f:45:d0:0c:0c:61:09:
                    ee:e2:1a:9b:19:19:0c:95:ef:84:ca:35:4e:61:f0:
                    3b:e4:da:82:e4:a9:4a:ab:03:90:4c:a6:66:4f:8b:
                    38:d3:df:85:16:68:03:ad:63:d9:c8:18:d3:d1:f0:
                    97:de:44:a7:a0:c9:fd:ca:78:18:eb:b9:93:80:d3:
                    ac:22:b5:c0:ac:c2:3e:7f:23:ae:f3:e2:79:1a:80:
                    41:6c:6a:04:21:b3:ff:14:d0:48:9f:1c:2e:45:5b:
                    e2:c6:36:bd:22:4e:ed:ca:cc:8b:90:94:a3:72:82:
                    3f:f6:59:c5:19:65:9c:b2:a3:47:9c:61:50:0d:50:
                    9a:d0:18:f8:dd:93:5e:3f:60:36:9d:84:da:aa:c5:
                    c2:83:a8:aa:32:ca:17:87:20:16:82:30:84:03:24:
                    d6:5d:40:3a:cc:9c:f5:fd:66:84:d1:e9:c5:8f:1a:
                    5c:cb:a6:b8:11:36:18:47:0b:c6:5f:bf:6a:f6:db:
                    7b:ee:da:df:52:93:80:a5:67:cf:94:6a:85:5e:2a:
                    6c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8F:E7:97:1B:A0:86:A4:BA:C4:B9:95:B1:97:E9:C9:4D:BF:B2:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5f78c620-308a-3e25-a96f-cfb53ae51fc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ac:32:b6:7d:99:43:b2:47:b1:d0:91:66:2a:43:be:de:57:
         f9:38:5f:87:b3:b2:32:25:a1:b9:96:cb:90:25:06:f8:82:31:
         2e:f0:0f:59:b8:6e:80:d2:48:48:df:45:52:2d:9e:3b:38:57:
         b4:34:c5:54:a6:74:0c:41:7c:c2:3f:ac:ed:2a:f8:0d:e9:ef:
         46:22:f9:9d:90:8f:4a:0e:4c:9f:d3:0e:33:ea:2c:57:a6:71:
         22:57:07:2e:1c:af:3a:91:2b:d3:47:70:d4:3c:1b:db:ff:f9:
         81:75:d0:63:3d:b3:b4:b6:26:50:39:b0:d0:79:0e:9c:b8:bc:
         97:51:d0:fe:b4:a0:08:61:82:bb:70:2c:82:9a:bc:b6:13:e9:
         e8:6f:1d:7f:ba:07:c2:37:7b:a8:fd:30:7e:93:e0:9c:70:e8:
         23:91:71:39:79:27:bf:d2:fd:db:5d:fb:36:18:f6:66:40:04:
         4f:75:03:50:65:11:3b:87:9c:c5:b7:8b:e9:19:e4:49:15:c4:
         a4:99:93:d4:92:34:d2:1c:2b:12:eb:33:d1:a7:e9:5b:1c:89:
         8c:0d:53:04:68:5f:84:95:0e:83:c8:41:9e:fe:01:cf:14:c6:
         45:c2:40:7b:5c:15:ad:d4:f0:73:69:4c:3c:58:fe:b8:dc:62:
         8a:3e:39:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:40 2025 by rpki-client