Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/04b5c8b2-c90a-3861-8bf4-5e2b8002aab0.roa
File:                     04b5c8b2-c90a-3861-8bf4-5e2b8002aab0.roa (raw, json)
Hash identifier:          BLTHJ+ZXGZ5bhk1c6Eql4WnSnDRMme8o20Udi0S1QjQ=
Subject key identifier:   CD:B7:77:52:6E:A2:D8:D2:4C:36:89:6B:94:C6:8D:EB:F6:E5:2F:A8
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584A050A76FDDABD38B3B2A00B00
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/04b5c8b2-c90a-3861-8bf4-5e2b8002aab0.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     398156
IP address blocks:        168.220.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:76:fd:da:bd:38:b3:b2:a0:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=9e7ae7ad-9fe8-45bc-9960-8b4ff3526467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:fb:a6:27:6d:d9:ac:11:9e:9e:5a:ab:d4:
                    54:ee:e5:6f:15:f0:f3:71:fb:33:b4:0f:d0:8f:41:
                    03:54:c8:f7:89:9c:59:45:d3:bb:d7:d3:9d:ef:d8:
                    78:52:7c:42:9f:9e:29:57:4e:7e:4c:3f:6a:e4:51:
                    77:03:f8:7a:0a:e3:f6:68:95:b8:91:81:4e:70:93:
                    d2:94:ce:f3:4b:30:a6:3f:7f:80:ba:ef:e3:96:ca:
                    58:55:26:38:a3:1d:41:01:93:8f:f1:fb:83:04:5b:
                    ee:06:96:c4:de:d4:9f:e9:bf:21:15:7c:8b:3a:d3:
                    08:31:e5:97:70:00:5a:14:b7:bd:c4:cb:23:90:d6:
                    1b:cd:a7:36:2e:27:89:cf:ca:1a:43:f5:d0:96:67:
                    e5:20:db:92:81:5f:83:23:9c:99:35:d5:cf:fe:1c:
                    44:a7:a1:6c:b4:11:92:67:c7:b2:42:dc:01:c0:86:
                    7f:f1:fe:c6:23:16:44:a0:b4:ec:4e:3b:86:9f:69:
                    f4:e0:14:9d:75:3b:ce:6b:19:02:d4:bf:10:6c:8d:
                    70:9c:3f:59:41:d6:14:82:cb:15:b4:c0:3f:a0:8d:
                    2f:f6:31:9d:fe:3d:fb:97:fd:b8:2c:8d:ce:74:39:
                    b7:e6:c3:89:90:2b:49:bf:a0:ed:df:ce:e7:73:c2:
                    13:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B7:77:52:6E:A2:D8:D2:4C:36:89:6B:94:C6:8D:EB:F6:E5:2F:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/04b5c8b2-c90a-3861-8bf4-5e2b8002aab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:75:0f:0f:60:b8:8b:3e:e8:ac:a1:03:09:7a:7c:32:51:1c:
         84:15:64:69:da:3d:9a:28:54:bd:0f:bf:85:79:95:40:fa:61:
         8e:73:d4:15:14:08:61:3d:3e:0d:ec:4a:33:94:3f:60:59:47:
         fa:e0:2f:03:35:72:4b:06:68:34:67:8f:8e:58:b5:01:7c:29:
         7f:4a:76:5c:be:16:92:f3:36:50:ea:97:82:e0:38:21:8b:20:
         01:42:bc:d0:eb:6e:ce:a3:a2:8a:73:17:21:ca:0f:7e:9b:e0:
         96:5c:d5:d0:ef:76:4e:f7:8c:eb:33:26:b7:79:4c:60:07:11:
         63:d8:48:92:bb:10:2e:e4:67:1c:d8:67:a2:a9:31:7c:16:8e:
         45:ba:46:81:ac:33:39:8f:c0:1e:ac:3e:56:d4:17:6e:2f:94:
         90:66:86:a0:05:0f:3c:5f:71:f0:bb:ba:e1:7f:65:38:38:e1:
         38:c8:66:63:58:22:69:4e:f6:6a:2b:23:6c:d4:47:f6:3b:9a:
         63:fb:f7:41:8d:04:44:45:6a:0c:7f:46:af:a9:c8:9c:df:52:
         27:cd:83:a4:63:cf:46:96:27:9a:25:e8:1a:8e:b1:56:54:ad:
         bb:de:2d:b0:6f:57:fc:f8:f8:23:23:69:95:af:92:7d:74:32:
         61:e6:f9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:58 2025 by rpki-client