Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/c118e230-bad5-32c0-9043-a0b819d10476.roa
File:                     c118e230-bad5-32c0-9043-a0b819d10476.roa (raw, json)
Hash identifier:          4WUD40fbeGqYb56/aFoEwyELShSyb0T3mHT7wJ3eQq4=
Subject key identifier:   6A:A7:FD:34:FA:3C:DE:62:16:73:DB:C2:E0:B9:C4:C5:2A:A1:17:DF
Certificate issuer:       /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
Certificate serial:       010D0C9F4328584A7D15FCBBB923E0800816B300
Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/c118e230-bad5-32c0-9043-a0b819d10476.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        144.86.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:fc:bb:b9:23:e0:80:08:16:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=b5aa9c4f-c9a1-4281-b937-272ad624557d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:dc:c9:5a:a5:93:98:91:6d:9e:08:52:fa:df:
                    72:ae:4d:85:fd:63:d6:f0:57:d7:29:30:22:dc:f9:
                    52:b0:0b:cc:e9:e2:84:4f:2b:3f:a0:be:23:0a:39:
                    b7:70:a9:e1:7d:85:d1:a3:6e:a5:cc:08:ca:93:ca:
                    13:c3:70:1e:9a:4d:74:67:4c:44:c8:b4:78:50:ac:
                    c5:a2:70:dc:d1:33:ca:68:2d:34:1c:33:ca:e5:fc:
                    30:bc:2d:f4:92:1d:71:8e:4b:36:db:4a:8b:3e:7b:
                    b7:75:dc:e7:7e:e9:56:74:5d:04:cd:ea:19:0c:1c:
                    b4:c4:9e:34:e7:f5:39:5e:f9:16:97:52:2a:4b:3d:
                    b7:43:cc:56:20:a4:b6:cc:c7:86:b6:35:39:b0:4a:
                    94:82:20:88:39:f4:49:ba:7e:e6:6a:70:a1:72:c8:
                    6a:fb:98:c4:7a:3e:b7:b9:f4:25:ff:01:ef:25:be:
                    d2:24:6f:7e:d9:14:f1:6f:8e:77:5c:c2:d6:6d:c4:
                    bc:9a:7a:4d:4c:e9:3a:69:ad:90:e9:d8:77:31:ca:
                    73:64:b0:e9:c7:09:b2:52:80:28:11:55:1c:a2:8a:
                    93:35:c0:32:80:12:fa:e8:b8:ad:b1:ac:1f:96:bf:
                    6b:49:ef:60:6d:e0:23:b4:3a:d1:29:cc:2a:4d:f9:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A7:FD:34:FA:3C:DE:62:16:73:DB:C2:E0:B9:C4:C5:2A:A1:17:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/c118e230-bad5-32c0-9043-a0b819d10476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl

            X509v3 Authority Key Identifier:
                keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:9c:32:5e:51:00:66:8b:9b:81:5c:d5:32:ed:42:7f:04:a6:
         3f:bd:d6:b4:12:9e:81:ee:76:92:8a:a3:bb:99:c6:8c:5c:44:
         a9:aa:87:14:83:04:83:86:3f:be:c3:fd:f7:85:84:e0:ea:4f:
         9d:cd:27:fc:1e:fd:da:73:9f:87:8f:9e:2c:77:c3:48:54:1f:
         ec:cb:41:dd:b0:73:c6:45:ab:13:4a:8c:c5:d5:db:62:fb:ee:
         29:90:73:cf:10:da:7a:d2:9e:04:bc:d2:2b:a3:47:81:6a:b7:
         e0:3a:a1:ff:a6:46:c9:ec:ba:b3:83:6a:24:60:84:a2:52:9b:
         13:87:06:86:3b:83:27:e3:0a:30:7e:cb:87:f9:9f:fe:29:bb:
         d4:4f:03:3f:07:aa:37:7b:2f:0f:e5:26:54:0a:35:3a:98:23:
         cf:27:cb:39:d0:d1:e7:1b:6d:d2:83:b3:29:47:01:0c:41:d7:
         5b:d2:cb:b0:fd:f9:ec:5b:89:4a:df:27:b8:fb:62:bf:14:e8:
         3c:b9:9b:1b:cf:fb:cb:13:17:ed:33:15:11:5d:a3:35:66:a5:
         8d:35:94:55:3b:98:4e:bf:67:3b:47:1d:a3:9a:df:68:38:8e:
         57:df:c4:0d:0b:76:ab:b2:55:74:6c:1f:c9:f8:65:9b:0a:cc:
         d2:14:fa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:32 2025 by rpki-client