Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/4c482e31-7964-358b-816f-6025ba55fb2d.roa
File:                     4c482e31-7964-358b-816f-6025ba55fb2d.roa (raw, json)
Hash identifier:          DA7tHs5jTdZ0i4+yqwu/7F5GJt4DBRUYcCQDrvqsYZY=
Subject key identifier:   15:12:73:0D:E8:0E:50:18:0F:4F:9A:D8:0B:0A:69:0D:C8:8F:68:80
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584A9BCB6E226D034A6BC533D098
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/4c482e31-7964-358b-816f-6025ba55fb2d.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     19901
IP address blocks:        143.103.144.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:6e:22:6d:03:4a:6b:c5:33:d0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=99a9e9e3-239a-49a7-ac13-ff82b21dfe58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cc:60:00:ce:ed:88:26:21:89:45:36:83:31:
                    20:e5:6c:c9:02:79:e5:58:4c:aa:fe:33:da:43:7f:
                    40:a6:86:0d:c8:78:8f:53:80:af:4a:9b:e4:0b:a2:
                    09:85:45:42:ef:e0:0b:e9:c2:e1:30:ae:07:b8:e1:
                    8d:84:9f:d3:03:f5:b5:26:fa:0a:ff:61:8f:2a:4f:
                    a3:cb:4f:49:17:26:ca:91:1d:4d:8c:3c:9f:f8:bd:
                    34:be:3a:b7:b8:48:1b:c9:0c:d2:d8:2f:bb:5a:4e:
                    b1:3a:0b:fb:2e:32:9f:28:17:82:53:92:94:ef:3a:
                    82:6d:fb:e0:4f:37:d7:65:1b:dc:cc:6b:86:40:f5:
                    13:4d:89:c6:3a:2b:60:1d:c8:ad:f5:cb:18:d6:d6:
                    97:88:73:8f:51:60:72:a6:55:20:ef:4d:33:3c:f9:
                    15:02:72:62:fd:68:ee:fb:d2:c9:29:86:f3:7a:ba:
                    cb:41:be:31:d1:81:af:2e:37:96:5c:d3:15:1a:89:
                    1d:b2:08:dc:35:eb:54:80:ca:5e:1c:59:81:cb:85:
                    d1:17:26:14:fc:b6:68:60:5a:f0:1a:ad:fc:1b:ba:
                    2e:be:ac:f7:4c:b8:c6:cc:23:d6:e5:cb:72:02:e0:
                    5f:cb:cc:18:b2:ba:6a:21:d1:d4:69:ea:0f:cf:17:
                    df:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:12:73:0D:E8:0E:50:18:0F:4F:9A:D8:0B:0A:69:0D:C8:8F:68:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/4c482e31-7964-358b-816f-6025ba55fb2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.103.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:55:18:04:46:4a:82:9e:f0:6e:ee:53:da:87:e9:18:08:17:
         16:9c:70:5c:ef:f7:79:51:a6:7c:95:b3:75:05:8a:a5:48:38:
         dc:6a:30:ee:b2:15:4c:ab:ff:15:a9:ba:9d:1a:74:d3:01:4f:
         58:20:4b:b7:e3:4e:a4:b8:ba:9e:c6:5a:d1:51:57:26:57:73:
         37:f1:10:87:a2:b4:51:5f:0a:fc:b5:b7:fe:94:cb:9f:cb:cb:
         c3:5e:a5:93:c3:25:2b:24:72:f9:05:c3:a0:69:2c:79:fb:60:
         98:98:85:bf:cb:aa:2b:15:38:3b:40:e6:bc:bb:52:4a:6f:74:
         b7:cc:69:9f:75:f0:5d:86:c9:81:bf:3a:a6:b1:e5:a7:82:99:
         dd:19:cd:3e:c6:5a:40:43:40:9f:fc:24:1a:dc:75:b6:dd:f7:
         92:8c:3d:36:6a:64:ce:8e:28:94:16:36:3d:a3:3f:59:51:9c:
         cd:28:c1:11:7b:80:e1:60:c2:97:4a:5e:a7:fb:b1:d2:d6:fc:
         8d:95:fc:d7:74:be:0d:8e:20:6d:de:a1:4f:55:f9:36:bc:91:
         e6:2f:ad:0c:11:4f:6e:c6:4e:38:0d:7e:35:72:d7:e3:30:04:
         8c:8b:ba:9f:8a:05:1b:bf:7a:fe:b9:bb:05:ea:54:e2:f8:eb:
         04:b4:10:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:42 2025 by rpki-client