Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa
File:                     3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa (raw, json)
Hash identifier:          R+H5pYzDibErTAiDhJEPe5T8WptxojXkNixG9EQqP1Q=
Subject key identifier:   B0:4A:1D:44:A7:A1:3D:AA:A8:A4:54:A5:AA:0A:D7:22:5D:CE:E5:E7
Certificate issuer:       /CN=bfab1614-ca9b-48b0-baa4-45a61bd07983
Certificate serial:       010D0C9F4328584ACA8F63E39E96B9D8BB46B4A0
Authority key identifier: 62:B0:C1:4B:1E:0A:D8:47:73:43:94:8F:C4:57:EF:60:68:40:6F:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa
Signing time:             Fri 08 Aug 2025 19:02:58 +0000
ROA not before:           Fri 08 Aug 2025 19:02:58 +0000
ROA not after:            Thu 06 Nov 2025 20:02:58 +0000
asID:                     397635
IP address blocks:        146.225.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/bfab1614-ca9b-48b0-baa4-45a61bd07983.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/bfab1614-ca9b-48b0-baa4-45a61bd07983.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ca:8f:63:e3:9e:96:b9:d8:bb:46:b4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfab1614-ca9b-48b0-baa4-45a61bd07983
        Validity
            Not Before: Aug  8 19:02:58 2025 GMT
            Not After : Nov  6 20:02:58 2025 GMT
        Subject: CN=f66c8e26-699f-407d-8064-934e21292f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:b2:3b:72:5d:9b:30:ad:8b:5f:54:98:ef:
                    93:83:d1:bd:81:27:dd:88:65:76:99:e8:3b:a1:bf:
                    5b:52:65:59:70:b2:75:38:08:42:4a:95:d8:a6:f0:
                    9e:40:e5:35:5b:3a:f5:12:57:5a:42:84:55:6f:7f:
                    ea:9f:db:6d:e8:40:84:50:ac:6e:d9:64:86:6e:33:
                    cf:6d:ad:00:91:0e:49:0c:c2:e9:a2:ab:a5:e3:6d:
                    43:b5:13:7c:95:17:5c:0f:20:ba:5b:bc:9e:9c:90:
                    36:c5:db:d6:73:9e:1b:99:5b:4a:04:c6:21:0f:b5:
                    13:2b:27:09:dd:8d:57:95:16:e9:7c:c2:dd:22:bf:
                    f1:37:b5:c6:6f:de:54:f9:96:e6:02:28:09:6f:af:
                    96:95:fb:e4:26:fc:4c:99:ef:55:b5:0e:1a:59:71:
                    42:87:6d:60:f3:e1:f0:71:ae:1e:f0:14:9f:71:36:
                    ff:f4:c8:29:61:29:ce:c6:af:a1:3e:d8:2a:54:c3:
                    b9:e0:fd:38:b9:fb:a2:48:25:b0:8c:1b:0d:c2:5b:
                    b5:0a:7a:f3:2c:d8:6a:c7:54:4c:d6:96:04:69:36:
                    8c:3e:d1:59:be:f0:8f:cf:ec:ed:b5:99:8f:a5:9c:
                    99:17:a6:07:8f:f0:ec:f5:7e:be:85:7c:0d:d6:d5:
                    96:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4A:1D:44:A7:A1:3D:AA:A8:A4:54:A5:AA:0A:D7:22:5D:CE:E5:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/3b94ce38-1210-31dc-85a6-3b4bd5558b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983/bfab1614-ca9b-48b0-baa4-45a61bd07983.crl

            X509v3 Authority Key Identifier:
                keyid:62:B0:C1:4B:1E:0A:D8:47:73:43:94:8F:C4:57:EF:60:68:40:6F:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bfab1614-ca9b-48b0-baa4-45a61bd07983.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.225.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:0a:27:3a:99:18:48:66:a3:eb:d5:14:b4:07:a2:05:b7:46:
         67:e8:33:7a:e7:4e:05:e8:28:da:34:4f:2a:c0:d4:ce:ec:66:
         9b:c6:32:09:40:b0:5d:c0:26:c6:0d:d2:fd:d0:ca:a8:d5:84:
         48:ef:be:dd:0f:3a:e1:c5:ba:da:13:11:2d:94:56:a6:db:ec:
         87:cd:68:46:fe:03:aa:67:fb:b5:d6:a9:23:a8:05:f9:ec:0b:
         ad:e5:2c:10:e2:36:41:23:86:24:03:dc:8d:08:1d:b6:d2:8b:
         35:e5:58:ce:13:b1:4d:d8:d0:c6:e1:33:c1:55:17:cb:66:4d:
         2c:c7:79:15:21:37:72:87:e0:fa:4d:23:fc:04:cb:15:3b:07:
         97:94:18:9f:86:cb:76:10:7a:67:4e:a0:19:a7:cf:ff:b3:66:
         ec:e6:5d:2a:3c:bd:a9:16:df:ab:d4:a6:78:0e:e4:15:30:78:
         71:f2:c9:cc:a3:21:2b:f1:44:7c:6d:84:9e:d3:a1:b5:8f:bb:
         25:ab:b5:46:dc:80:60:69:82:55:19:bb:1d:15:15:52:82:de:
         15:5b:75:12:72:30:a9:cd:50:58:4e:a8:62:99:14:e7:62:de:
         4c:d4:bc:a5:7d:9a:0f:3a:2c:82:a9:2e:9f:7b:9e:07:50:ea:
         de:00:67:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:03 2025 by rpki-client