Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/0771c23b-83cc-37a6-9f7f-a7eae9053198.roa
File:                     0771c23b-83cc-37a6-9f7f-a7eae9053198.roa (raw, json)
Hash identifier:          IWNEr2D0P0cSeR70Mowuto2WG3rcV7rOaSQ451Wk5vA=
Subject key identifier:   E4:73:E6:CB:77:BD:E7:7F:EA:9B:CD:58:14:45:B4:A3:84:6B:E3:6B
Certificate issuer:       /CN=8753160d-30e1-48b1-afdb-394389cbcc81
Certificate serial:       010D0C9F4328584AA9C0DCBDD01117D6F9764120
Authority key identifier: F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/0771c23b-83cc-37a6-9f7f-a7eae9053198.roa
Signing time:             Mon 28 Jul 2025 01:00:51 +0000
ROA not before:           Mon 28 Jul 2025 01:00:51 +0000
ROA not after:            Sun 26 Oct 2025 01:00:51 +0000
asID:                     21723
IP address blocks:        162.211.192.0/21 maxlen: 24
                          162.222.120.0/21 maxlen: 24
                          162.246.128.0/22 maxlen: 24
                          162.255.248.0/21 maxlen: 24
                          172.85.80.0/21 maxlen: 24
                          172.103.48.0/20 maxlen: 24
                          198.1.56.0/21 maxlen: 24
                          199.91.80.0/21 maxlen: 24
                          199.192.184.0/21 maxlen: 24
                          199.193.88.0/21 maxlen: 24
                          207.232.96.0/19 maxlen: 24
                          208.85.212.0/22 maxlen: 24
                          209.207.64.0/18 maxlen: 24
                          216.21.128.0/19 maxlen: 24
                          216.40.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a9:c0:dc:bd:d0:11:17:d6:f9:76:41:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8753160d-30e1-48b1-afdb-394389cbcc81
        Validity
            Not Before: Jul 28 01:00:51 2025 GMT
            Not After : Oct 26 01:00:51 2025 GMT
        Subject: CN=bd43818b-57cd-47ea-b43e-6540558e5b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:67:97:e2:b1:98:c2:e8:f9:a7:95:ff:cb:8e:
                    40:f8:55:8f:61:71:3b:6a:67:a2:4f:a3:aa:00:ff:
                    4a:34:43:48:9b:f6:2c:57:7d:29:46:d5:40:b5:59:
                    15:83:dc:e3:18:14:28:ab:f4:75:d8:e9:17:fe:c4:
                    93:65:96:0f:49:aa:44:43:86:b2:44:47:3e:d0:8d:
                    b1:c3:89:e2:6b:b3:35:9c:48:69:46:cd:11:6d:26:
                    1d:5b:66:8e:90:8f:74:61:26:72:1f:74:ab:15:6b:
                    17:e5:68:d3:3e:76:1b:18:f1:34:ce:92:e6:b4:a4:
                    6e:97:5f:82:73:b0:6d:fd:51:87:40:f8:00:62:47:
                    ed:02:98:da:26:d2:be:0b:37:5d:14:0e:95:bf:f8:
                    d2:60:8c:15:10:16:f4:46:e3:cd:b8:06:50:31:2c:
                    10:58:a7:48:8e:b0:20:3b:cb:78:02:70:78:44:5d:
                    86:99:0c:d1:b1:b9:d5:1a:d9:51:93:7f:48:eb:af:
                    fa:55:58:19:93:b4:f1:d1:71:28:7f:88:24:e9:c4:
                    51:15:7a:c9:9e:99:71:48:72:4a:1a:b9:16:1c:0d:
                    26:66:c3:09:57:09:28:5c:d5:15:f0:f2:f4:f3:fe:
                    d1:5e:2c:99:e8:8b:27:6d:2d:1e:ae:c4:db:41:c3:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:73:E6:CB:77:BD:E7:7F:EA:9B:CD:58:14:45:B4:A3:84:6B:E3:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/0771c23b-83cc-37a6-9f7f-a7eae9053198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.crl

            X509v3 Authority Key Identifier:
                keyid:F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.192.0/21
                  162.222.120.0/21
                  162.246.128.0/22
                  162.255.248.0/21
                  172.85.80.0/21
                  172.103.48.0/20
                  198.1.56.0/21
                  199.91.80.0/21
                  199.192.184.0/21
                  199.193.88.0/21
                  207.232.96.0/19
                  208.85.212.0/22
                  209.207.64.0/18
                  216.21.128.0/19
                  216.40.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:13:16:87:b3:cd:9a:2a:87:6b:58:77:35:a7:9b:30:f8:82:
         24:da:5e:98:81:e7:60:5f:15:54:e6:07:8f:73:5e:d9:8a:a5:
         2c:ce:22:0d:8b:06:a2:1c:7c:cf:ec:17:c4:0e:88:fe:1d:e5:
         d3:d6:50:49:42:e2:df:7d:50:14:7a:bc:38:60:21:75:25:07:
         ce:d2:b0:0a:ad:f1:b3:79:e1:9d:57:36:39:19:05:4e:5f:db:
         ad:56:52:57:c1:73:f9:95:70:5d:d1:af:2c:aa:76:10:b2:b0:
         5b:44:55:14:00:4e:0d:3c:d6:63:cc:df:79:c4:d0:f4:ea:76:
         46:3d:79:77:18:20:75:ab:8c:a8:19:b5:eb:ca:d6:f9:dc:cf:
         05:20:bb:1b:c8:29:4f:1e:2b:f1:c4:37:26:91:9a:1e:69:22:
         67:bf:63:e6:7d:2b:e6:ea:6d:2b:9f:f6:0c:a1:a4:44:da:11:
         68:3b:b9:d3:e7:59:b1:92:01:66:87:04:59:72:db:13:83:7e:
         35:cd:ec:cc:c1:12:5a:df:78:bd:ec:dd:b4:6c:a1:94:08:5e:
         52:12:03:16:7c:46:8c:44:48:17:c7:e8:cd:92:bf:1f:e5:77:
         c6:42:8f:b2:72:94:50:43:28:48:ff:9c:16:4e:1f:10:6c:b5:
         3c:5d:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:51:41 2025 by rpki-client