Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/146f7542-8c7a-4e73-af53-f7523053a1b7/73f86739-7ec4-3cd5-9612-15bb20013a70.roa
File:                     73f86739-7ec4-3cd5-9612-15bb20013a70.roa (raw, json)
Hash identifier:          qvhYNyozfrQEfdSlQlPFjck92u9zX4IHOHwdS/eHUnQ=
Subject key identifier:   5A:33:89:C8:AF:2A:CB:CC:9D:F4:64:51:80:0B:05:42:CF:E5:F7:34
Certificate issuer:       /CN=146f7542-8c7a-4e73-af53-f7523053a1b7
Certificate serial:       010D0C9F4328584AC01649906062570E46978C00
Authority key identifier: 72:4A:D3:6D:57:6E:A4:4A:0F:CB:51:BB:0A:71:0C:A3:F6:F4:FF:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/146f7542-8c7a-4e73-af53-f7523053a1b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/146f7542-8c7a-4e73-af53-f7523053a1b7/73f86739-7ec4-3cd5-9612-15bb20013a70.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     36363
IP address blocks:        199.19.156.0/22 maxlen: 22
                          205.153.116.0/22 maxlen: 22
                          2605:5b40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/146f7542-8c7a-4e73-af53-f7523053a1b7/146f7542-8c7a-4e73-af53-f7523053a1b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/146f7542-8c7a-4e73-af53-f7523053a1b7/146f7542-8c7a-4e73-af53-f7523053a1b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/146f7542-8c7a-4e73-af53-f7523053a1b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:49:90:60:62:57:0e:46:97:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146f7542-8c7a-4e73-af53-f7523053a1b7
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=3a87be81-0a37-4197-8a5f-1a03e28ce8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:55:47:b4:81:de:ea:f0:5c:67:6f:9e:f6:
                    55:bb:1c:e5:02:d6:25:91:21:b0:05:b7:07:6c:15:
                    cb:24:20:2c:80:92:9a:5e:48:b1:8a:b0:fa:7a:13:
                    71:4f:be:33:4d:15:4b:a9:b1:79:9a:6d:4d:d7:a6:
                    dd:b2:cd:76:49:47:1c:f1:60:11:e4:7a:97:48:ee:
                    bc:a6:17:dc:2e:0c:6a:eb:cc:04:e5:a1:11:22:c6:
                    13:b7:bb:43:6c:6e:df:44:c3:7b:dd:1f:b7:0a:0a:
                    db:51:4b:02:67:76:06:5e:2c:b1:ff:1b:5c:08:04:
                    6c:47:00:1d:05:0a:6b:26:d1:41:f3:14:71:9b:5b:
                    b8:43:3f:36:10:b3:cb:0e:b3:87:75:27:57:1d:9d:
                    b8:11:6e:ba:56:ec:99:0f:4f:42:cb:6c:ea:a0:9c:
                    14:ad:16:df:58:8f:f3:be:8b:5e:0c:cb:da:91:06:
                    9e:a1:82:a9:79:d2:db:3a:f0:42:a8:ef:d8:ba:cc:
                    f7:45:36:c5:fb:ce:36:ac:d4:2a:c7:58:2c:3a:7d:
                    b2:b8:74:57:df:9a:51:08:b5:b1:64:f8:48:75:34:
                    7b:11:c2:43:62:ac:99:3e:91:fa:e5:b9:66:2a:c3:
                    a0:fa:47:11:79:85:c8:e2:a7:98:e5:15:36:a8:31:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:33:89:C8:AF:2A:CB:CC:9D:F4:64:51:80:0B:05:42:CF:E5:F7:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/146f7542-8c7a-4e73-af53-f7523053a1b7/73f86739-7ec4-3cd5-9612-15bb20013a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/146f7542-8c7a-4e73-af53-f7523053a1b7/146f7542-8c7a-4e73-af53-f7523053a1b7.crl

            X509v3 Authority Key Identifier:
                keyid:72:4A:D3:6D:57:6E:A4:4A:0F:CB:51:BB:0A:71:0C:A3:F6:F4:FF:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/146f7542-8c7a-4e73-af53-f7523053a1b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.156.0/22
                  205.153.116.0/22
                IPv6:
                  2605:5b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:27:e6:9d:56:6c:7e:59:9e:0a:9f:80:2f:d7:61:3b:2d:e1:
         26:ae:3c:d4:43:8b:e6:4d:d3:06:30:f9:94:bf:e0:4f:05:b6:
         91:73:f7:e3:49:6c:74:be:94:b7:c3:21:30:49:ef:5d:3f:c6:
         00:76:d2:79:37:85:44:1e:e6:29:e3:77:75:9e:de:a4:15:24:
         7e:eb:55:54:34:da:2f:8a:81:ac:74:0c:e9:e2:d8:b4:4f:95:
         20:a4:c6:cc:71:e2:82:56:da:b6:06:ec:9b:8c:30:6a:53:ed:
         4e:87:2f:fc:c3:9f:67:24:1a:95:b2:04:b8:81:1f:a1:47:93:
         ff:4b:8b:1c:14:27:0e:ad:30:32:53:91:dd:6d:ee:a2:80:9e:
         a2:f6:7c:1a:ab:c1:c7:a3:c6:c3:68:bf:0b:ff:1b:93:d8:90:
         27:d0:a6:61:bd:14:be:16:6b:2e:05:8b:48:3c:70:1b:98:53:
         60:be:21:b1:ed:1f:f1:6d:c3:fa:8a:8f:88:2f:ba:6b:8d:41:
         2d:67:2a:71:1f:81:e0:eb:b3:e4:ef:44:0e:fd:c9:7c:ea:8d:
         e8:15:4e:87:05:79:13:bf:40:55:48:fb:f3:f3:1e:95:6b:f0:
         08:95:6b:2a:7f:6b:3e:fb:77:dd:48:d7:36:4a:ec:6c:b6:08:
         54:83:16:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:57:53 2025 by rpki-client