Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/8d16e8b6-023d-31c2-b651-81c42ca8072b.roa
File:                     8d16e8b6-023d-31c2-b651-81c42ca8072b.roa (raw, json)
Hash identifier:          EztWnIvAJV3XrUNrnVvRRx5ybz0nHUZDbQFsocpn3rI=
Subject key identifier:   52:ED:03:22:44:23:BF:2C:F1:E9:BF:82:97:2A:72:A4:36:FD:C7:C9
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584AA42B8715A89CCE731AD34700
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/8d16e8b6-023d-31c2-b651-81c42ca8072b.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     35847
IP address blocks:        146.85.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:87:15:a8:9c:ce:73:1a:d3:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=26bc929b-7e7d-447e-b7e1-e24dbf69616d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:45:45:54:87:61:e2:2c:10:45:51:e8:44:48:
                    a4:46:2a:3b:11:51:fc:b0:eb:72:0f:bc:b1:10:b9:
                    de:98:cd:8e:c1:27:77:09:38:fc:a5:2f:68:d1:59:
                    2d:83:e1:b1:8d:25:53:ee:49:ed:86:a7:7c:0e:35:
                    ff:cd:b0:a0:48:d9:89:af:c2:01:07:66:34:dc:be:
                    81:b3:15:83:03:17:c1:02:dc:20:08:6b:fb:04:3f:
                    a8:9f:2b:3c:42:11:b5:47:99:d4:b8:79:2d:ba:6e:
                    51:a0:26:66:92:8d:88:ab:db:d0:d3:6f:d8:8c:4c:
                    d7:16:9d:60:b1:a7:cf:5a:ca:39:26:97:20:8b:d3:
                    a8:06:1d:78:05:a6:55:f7:9a:e8:41:bd:e4:24:42:
                    99:88:52:ba:7e:4f:25:4f:86:e3:54:b6:d4:27:54:
                    7c:4c:e6:35:27:a9:68:2a:a5:fd:13:2f:3b:40:3f:
                    dd:89:97:ea:8e:c4:54:5f:32:ba:07:fa:a7:e3:84:
                    df:1c:3a:3c:2f:a3:bd:c9:d8:0e:64:f8:22:38:31:
                    a0:e9:83:68:2c:6c:9b:f3:a8:b7:3c:02:5c:04:2b:
                    39:92:66:fb:86:69:db:14:c6:63:77:74:ec:d7:66:
                    0a:93:0d:88:78:e2:38:61:5e:58:88:f4:e3:3a:f2:
                    c3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:ED:03:22:44:23:BF:2C:F1:E9:BF:82:97:2A:72:A4:36:FD:C7:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/8d16e8b6-023d-31c2-b651-81c42ca8072b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.85.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:7c:6e:1f:fe:17:79:d2:55:ac:08:8d:a2:b3:47:44:0d:f5:
         66:1b:7f:ad:a0:57:bf:15:91:df:db:64:a1:4b:bf:98:8b:a6:
         17:88:9e:ef:1c:58:71:d0:d6:06:c9:e3:1c:e6:02:83:6a:80:
         0a:1c:71:af:b8:67:33:c0:1d:92:67:5b:84:44:69:06:14:9e:
         e3:04:72:56:cd:f5:33:92:18:01:d9:53:35:62:ed:a7:3e:1f:
         7b:37:0d:50:4e:c4:99:76:a2:02:f3:d5:11:3b:3a:96:c2:7b:
         82:3f:43:1a:5e:28:58:33:10:52:b5:6c:5d:1b:cf:47:d6:bb:
         07:11:61:b7:2f:44:8b:73:7c:30:3a:a7:a2:97:98:f6:4a:93:
         d7:7a:05:3f:b3:be:a1:ef:89:8b:77:89:2a:69:85:01:e4:0f:
         37:91:bb:72:e2:4b:88:d1:81:eb:6c:f2:d9:2f:ab:10:79:9f:
         d0:91:2e:17:45:8a:09:d7:03:bd:1d:22:aa:71:1a:3a:96:eb:
         74:04:a8:f2:2f:bd:78:e3:72:43:3a:a6:5d:15:c8:ef:9b:92:
         88:7d:5b:3c:2f:62:5b:21:32:c4:c9:34:67:e7:77:aa:b3:c6:
         f1:48:54:dc:96:86:a6:47:ff:fc:62:1a:c4:6b:10:58:7f:60:
         66:9f:63:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:45:34 2025 by rpki-client