Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa
File:                     1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa (raw, json)
Hash identifier:          q+a/Xqas+jaCObelml2vgAbvdLY+0xJBWsWOQc1sziM=
Subject key identifier:   D5:22:F8:6E:5F:09:E1:E8:2B:52:9B:73:06:4A:91:87:1B:A3:F2:18
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584AB220CE453F594A17913CF9E0
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     11650
IP address blocks:        155.94.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:ce:45:3f:59:4a:17:91:3c:f9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=3f672ea1-e463-402d-a8e8-fbdc2a2a709e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:88:a0:fa:c2:7d:63:c9:5f:ef:b8:63:eb:ff:
                    c8:e8:02:f9:ef:83:48:52:2c:7a:6a:32:f7:6a:fd:
                    47:27:cc:45:81:ff:01:92:6b:c2:0e:1f:d8:01:10:
                    61:28:3f:60:65:5b:6f:5a:d2:20:14:7d:c6:d9:3c:
                    97:c7:33:0a:2d:73:db:f4:ef:8f:59:de:1f:ee:44:
                    60:73:17:8b:ac:f0:34:36:35:8c:3f:5a:86:34:1b:
                    85:2a:58:1f:a7:73:30:1c:07:fb:a2:7b:35:83:ba:
                    a4:4a:45:d0:12:0c:42:5e:fe:e1:7f:14:42:b6:b3:
                    92:65:2e:9c:a9:eb:8e:27:ad:e9:df:54:57:c9:3f:
                    c9:1e:6d:83:a3:dd:fb:91:96:a4:4c:64:ce:22:42:
                    04:cc:03:ee:a7:da:ca:87:79:cc:f9:cc:4c:45:28:
                    a0:32:b1:30:cd:64:37:f3:68:54:0e:1a:b1:c4:60:
                    d4:8f:03:28:c5:8c:d9:b3:8f:c5:c9:b9:4c:7f:88:
                    91:4a:d8:53:7d:e3:31:ca:9b:5d:d7:34:f5:cb:8b:
                    2f:bf:4c:50:0c:53:00:59:45:84:45:a4:06:6c:c0:
                    ff:7b:72:27:35:9d:b0:dd:95:82:7b:60:89:93:09:
                    bd:dc:91:b0:fa:c8:4c:51:bb:d7:b6:25:7a:28:21:
                    be:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:22:F8:6E:5F:09:E1:E8:2B:52:9B:73:06:4A:91:87:1B:A3:F2:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.94.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:65:08:cc:a0:27:98:c3:76:ff:5c:3f:ec:f6:44:3b:62:a8:
         c2:d9:3d:96:a0:6e:45:c4:4e:93:02:64:dc:3d:50:c4:0d:83:
         dc:63:38:67:f0:ff:66:82:19:2a:01:33:0e:d0:66:ea:67:71:
         75:58:e2:cc:80:ba:c7:c0:e3:68:f4:4d:46:1a:82:e4:43:a4:
         1e:60:b5:3c:fe:69:d3:f0:85:ba:fe:81:27:81:1f:e2:80:cd:
         cb:8b:4a:e7:dc:ca:4e:24:13:21:77:ea:8d:aa:b1:35:d2:63:
         3c:ed:29:8d:1a:4e:b6:e6:0b:a0:9d:d0:3f:16:c9:d8:2b:76:
         75:77:61:a2:b0:fd:cd:2b:64:ae:3f:6c:d5:52:c8:5f:57:c7:
         fe:a0:ce:54:52:26:30:1b:bf:52:91:fc:dc:8d:b1:bf:79:4f:
         dc:bb:53:f3:88:da:2a:93:31:2f:7f:e7:b4:e5:84:04:d0:9b:
         9f:22:b0:66:1e:d8:39:2b:2d:86:2a:35:80:40:45:32:11:a6:
         e0:0b:84:6c:9b:df:8d:4d:e3:54:53:de:39:0a:26:4f:b4:01:
         fd:e1:8f:40:ef:ae:34:d2:a0:bd:a6:ad:fe:5c:83:9e:1a:f9:
         bf:18:f3:f5:c0:87:a6:6b:4a:c8:ac:b8:84:3a:32:ba:27:7a:
         54:bd:37:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:25:01 2025 by rpki-client