Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa
File:                     ce0197c4-50e0-3806-a103-08cbe1f623a0.roa (raw, json)
Hash identifier:          7e3rVuj1rFReXfDnVNi6LrWWiRxSM8g1h483DAk57K0=
Subject key identifier:   4E:E8:D5:B1:6A:C8:92:5E:81:B6:04:F1:10:E8:FA:AD:61:20:CC:BF
Certificate issuer:       /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial:       010D0C9F43285849D594E850D791938FF4DCFAE0
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     7029
IP address blocks:        81.199.64.0/20 maxlen: 24
                          121.91.208.0/20 maxlen: 24
                          121.91.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e8:50:d7:91:93:8f:f4:dc:fa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=88422fa2-4ff9-45d9-bd93-6751b24a0be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7c:a7:6b:41:dc:b9:21:b8:d2:e8:78:ae:9f:
                    7f:42:e8:8e:8e:a9:9a:e8:0b:f5:fc:c5:81:fd:68:
                    ae:29:a8:82:aa:dc:02:dd:16:cf:17:34:0a:d4:6c:
                    fb:9e:ba:06:7e:b6:f9:8c:25:37:14:e0:8e:fa:91:
                    f3:54:7c:cd:0a:18:5b:74:2a:e2:ea:b3:0f:ce:dd:
                    b3:ba:c9:b7:a5:fa:f5:cd:ad:01:2b:b5:50:7c:9d:
                    f2:da:37:57:49:28:2d:dc:5b:6c:f9:f2:21:dc:a9:
                    a0:13:fb:3e:79:5c:82:0e:80:e7:7e:15:a6:33:88:
                    ad:9e:6c:20:d8:cd:45:f5:29:4a:c6:ab:f7:62:1c:
                    8f:3e:a8:f9:4e:77:cc:4e:05:36:3c:de:96:fb:a2:
                    fc:51:0e:d7:26:8c:67:a8:f9:5a:4f:3f:54:03:c3:
                    f6:e7:cc:4a:0d:fc:39:6d:db:39:1b:3a:4f:80:9c:
                    b0:7b:29:fe:a1:ba:c7:5c:dd:1e:ec:71:92:40:1f:
                    df:6e:c7:68:8b:e8:82:ff:4c:b7:46:0d:be:b6:81:
                    17:a5:55:b5:95:3e:62:a9:f1:5a:bd:b6:ad:c3:66:
                    b7:94:f6:9d:b5:c1:cf:8a:08:49:64:13:6b:04:17:
                    13:e6:db:00:7f:71:73:c5:9c:68:d4:18:77:a3:ea:
                    e9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E8:D5:B1:6A:C8:92:5E:81:B6:04:F1:10:E8:FA:AD:61:20:CC:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl

            X509v3 Authority Key Identifier:
                keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.199.64.0/20
                  121.91.208.0-121.91.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c5:88:e9:af:7c:90:47:0b:f9:bf:57:1e:fd:32:be:26:29:
         25:fa:ef:73:a9:be:5c:7b:1c:c7:15:e0:f4:29:37:db:41:53:
         88:67:9a:06:4b:97:57:3e:64:ef:bc:07:20:08:3c:b4:0a:f6:
         5c:2b:4c:7f:01:7c:e6:80:fd:96:42:2d:58:03:1f:f0:be:69:
         29:3e:e9:d2:01:6c:11:df:f3:0b:a0:fd:1f:94:cd:36:52:38:
         4e:ff:91:b1:95:60:0b:4e:76:a9:33:ac:0a:49:46:ba:f7:ba:
         9b:bf:43:a1:04:b0:a0:88:17:1f:6c:3c:03:cc:6f:50:4c:f1:
         1d:00:56:69:90:ab:1c:4b:ad:06:b0:7c:d0:c8:b4:94:10:57:
         4b:81:ce:72:15:57:2e:e6:5b:78:86:99:cd:87:14:4d:43:36:
         6b:45:1c:bb:c1:b9:77:9f:cb:04:63:b5:ee:d8:10:2c:4f:c8:
         04:e1:d4:d8:a3:08:e9:62:c6:94:c7:58:1d:16:71:80:ba:4a:
         74:e2:d5:a8:8b:3a:2c:a9:77:66:0a:69:6f:55:ea:2f:8b:95:
         18:35:5f:f7:fc:e6:44:bf:74:8c:78:c4:68:e9:e6:3b:d1:e0:
         11:a1:68:6b:d1:a2:f0:4b:db:84:86:f3:47:41:7a:4c:e2:16:
         cf:2f:01:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:03:00 2025 by rpki-client