Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea7aa056-9a65-3193-8b86-4976ae945936.roa
File:                     ea7aa056-9a65-3193-8b86-4976ae945936.roa (raw, json)
Hash identifier:          MT5VBhS6mdwoKC19zyLPmYuwoMpAp0W4HPUEdXzT6Kc=
Subject key identifier:   13:FE:82:6F:C0:7F:DE:C5:0E:BF:ED:C8:EA:38:19:5F:DA:00:61:39
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584ABEB0DA76E8B0EE5523534980
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea7aa056-9a65-3193-8b86-4976ae945936.roa
Signing time:             Mon 04 Aug 2025 13:00:36 +0000
ROA not before:           Mon 04 Aug 2025 13:00:36 +0000
ROA not after:            Sun 02 Nov 2025 14:00:36 +0000
asID:                     401152
IP address blocks:        205.186.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:b0:da:76:e8:b0:ee:55:23:53:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  4 13:00:36 2025 GMT
            Not After : Nov  2 14:00:36 2025 GMT
        Subject: CN=bb60252f-99e8-4820-a169-dcfea85cf52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:06:44:ae:bb:c6:cb:bf:19:a5:d3:25:80:fc:
                    40:ab:9c:2a:ef:10:8b:18:88:79:24:4a:de:5d:b4:
                    d8:bd:a7:c0:5a:ab:c4:f2:5c:c8:ed:43:fe:d2:fc:
                    e5:b4:7d:0e:7f:57:77:c6:4a:31:d5:26:27:05:92:
                    4b:10:ee:5f:a9:1f:c0:0c:7c:27:20:d7:d7:3d:ef:
                    59:65:53:2a:ec:51:af:b9:ef:f6:df:fd:6e:28:46:
                    31:ea:e0:d0:3c:d3:69:6e:0b:a9:72:cc:b1:d0:82:
                    fd:42:54:fa:91:e3:fc:56:23:e0:ce:98:9e:87:40:
                    5f:b9:a7:13:c7:1e:cf:72:b4:b2:8c:06:2a:b0:21:
                    bc:31:f9:62:97:e3:5d:14:8c:5e:4e:13:fb:32:cb:
                    96:76:26:23:eb:d1:08:f8:6f:6d:8c:94:b6:ca:03:
                    23:ec:97:30:a0:cc:f3:a2:e2:19:f1:60:bf:18:d2:
                    1b:43:2f:7b:d8:ce:e4:fb:49:a1:d3:e6:2d:da:43:
                    33:cb:4a:6f:df:84:86:66:96:b4:7a:7e:2d:74:f3:
                    30:74:ed:fa:6a:e4:9b:52:02:49:6e:cf:16:a6:22:
                    3b:da:37:03:64:e6:10:a6:c2:d7:d2:ff:1e:34:89:
                    77:bc:19:9d:a7:64:9a:51:e0:50:59:17:d3:ca:86:
                    2c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FE:82:6F:C0:7F:DE:C5:0E:BF:ED:C8:EA:38:19:5F:DA:00:61:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea7aa056-9a65-3193-8b86-4976ae945936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.186.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ac:c8:ea:e8:bd:c5:46:8b:c7:15:2d:f0:c8:7f:fc:10:69:
         b2:02:71:ac:c1:6e:21:64:4a:e2:43:35:42:bc:7a:04:94:11:
         68:45:c1:d7:ae:8a:9d:f2:99:73:32:51:12:de:53:b6:9a:2b:
         f9:eb:05:11:c0:d3:3a:d8:3a:6b:00:2c:a6:42:27:ff:cf:a3:
         82:ac:f5:9a:33:6c:bd:a8:df:b2:77:93:75:3d:5e:12:b6:d3:
         06:a4:18:eb:b4:9b:42:0e:76:f2:d2:6e:21:e2:e1:86:46:88:
         72:02:72:f6:90:56:6a:25:e0:12:75:1a:de:9e:89:98:88:ed:
         5d:52:09:ee:68:43:12:a6:4c:1a:22:41:d0:1a:ed:d2:3c:c0:
         92:d2:9f:3b:e0:00:a4:69:e9:86:11:1f:70:0d:b0:7b:df:77:
         be:a5:2e:a8:26:87:0a:77:0d:08:04:98:ee:77:72:90:50:14:
         ab:10:98:6f:be:aa:af:8d:1f:27:53:e7:a7:18:68:b5:d4:33:
         b0:9d:db:bc:70:ad:2c:e4:44:84:d8:87:49:09:26:5e:93:2f:
         1c:60:62:69:29:2f:4f:0c:31:6a:75:5a:a7:1d:8c:a8:26:63:
         0f:cc:82:05:fc:c3:c3:85:2b:ec:0a:b1:a5:3b:ab:69:f2:da:
         0b:7f:59:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:00:41 2025 by rpki-client