Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa
File:                     01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa (raw, json)
Hash identifier:          +U8RkaotlKvT3rkm7xThd3J16fZqse6OVqqL5prik+8=
Subject key identifier:   C7:74:D3:81:BC:79:25:22:B7:9B:6B:84:91:96:4B:63:4A:3B:50:F0
Certificate issuer:       /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
Certificate serial:       010D0C9F4328584A7D15FCC94AB0DEB475103800
Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        144.86.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:fc:c9:4a:b0:de:b4:75:10:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=566e867f-fb9d-43f4-8b23-0d235215b74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:50:c5:89:36:4b:52:44:4f:bb:56:bb:01:86:
                    7c:a5:f1:f6:c0:a5:92:a2:d5:28:8d:12:34:0d:ab:
                    3d:69:b4:aa:a0:ce:53:48:90:b0:be:83:6c:f1:63:
                    7f:97:19:2f:6d:4d:df:91:91:e6:99:78:74:29:a3:
                    cc:6d:96:cf:e3:13:d4:5a:88:87:95:b3:a2:8c:df:
                    64:e4:34:bc:82:fc:1e:fe:5f:a7:40:7d:e6:1d:22:
                    ce:1f:04:70:85:87:38:fa:e8:c2:ae:3d:71:b4:31:
                    46:f6:ea:d7:ec:64:fa:8d:f2:d6:c4:1a:94:b4:e7:
                    d3:bd:2a:e4:a1:4d:a8:3f:2c:74:40:48:02:1a:c5:
                    91:35:05:02:a0:45:99:11:be:fe:d4:2f:e0:53:4e:
                    f7:ad:e5:03:99:63:81:23:0b:f1:d1:32:3a:c9:e5:
                    fc:87:b8:3c:92:55:11:b1:91:c6:10:35:79:49:1e:
                    89:c4:36:ca:eb:6c:54:e9:c3:6c:06:69:a4:85:02:
                    66:c0:d8:33:20:d3:2f:90:e6:17:00:dc:6f:c5:63:
                    cc:e5:fc:cb:6e:e1:91:96:60:2c:17:0c:86:43:1b:
                    ab:61:da:aa:2a:8f:d0:9b:b5:41:ef:f7:9d:c6:8e:
                    c5:5f:2f:f6:da:36:cd:37:c7:f8:7e:75:a7:f4:a8:
                    f1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:74:D3:81:BC:79:25:22:B7:9B:6B:84:91:96:4B:63:4A:3B:50:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl

            X509v3 Authority Key Identifier:
                keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:97:b5:7c:f8:c7:d7:cc:da:2b:b0:bf:5f:64:69:bf:5a:86:
         11:28:c7:1d:64:25:5e:9e:0c:fb:aa:7b:27:2c:38:8a:fa:c6:
         96:4b:d3:f1:c0:f7:ac:f2:9f:ab:d8:38:d6:60:34:35:30:3d:
         7b:77:1e:30:47:b9:94:95:4f:ed:92:09:00:e0:14:e6:c1:63:
         60:a1:ef:56:19:30:6e:96:f2:eb:80:c2:20:86:67:ad:b3:1e:
         db:36:db:7c:73:55:7f:04:73:d0:7c:72:5b:c7:b4:51:35:a2:
         38:95:24:07:d7:78:d8:38:ad:c1:8e:95:fd:c0:44:d4:25:3f:
         dc:e0:05:06:da:30:ff:c4:e9:7a:d1:4f:bb:50:ca:1e:41:5e:
         cd:49:f4:16:3f:50:a7:ca:88:e1:fe:9d:4a:d2:ce:0f:59:9a:
         f4:b2:80:23:26:92:64:58:8e:7d:bf:ae:98:07:ac:45:61:6f:
         ec:2a:d8:b6:df:71:d1:fe:26:9a:3b:44:47:8c:bc:5e:46:eb:
         9f:e5:2d:e9:a1:c6:98:f3:6b:d4:0f:3e:d3:87:4f:0e:e5:fa:
         32:c8:1c:f0:92:c2:d9:e2:1d:44:6f:06:83:63:fa:a6:97:31:
         e3:39:25:80:47:dc:b6:ac:b8:3b:c3:6b:ff:23:ba:34:8b:2d:
         58:cd:52:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:48:04 2025 by rpki-client