Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/a662222b-7237-3db4-8d5a-0813c2e0509d.roa
File:                     a662222b-7237-3db4-8d5a-0813c2e0509d.roa (raw, json)
Hash identifier:          e+KkAFg/pBKYa0lyYMPQ5pa5WCjdz1Dfv+k6jOSTLyU=
Subject key identifier:   0D:3B:DF:5B:5D:38:35:7A:59:D2:1C:87:0F:86:06:B5:54:D4:31:1A
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F4328584AC0162A13E1794C1E675B1A80
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/a662222b-7237-3db4-8d5a-0813c2e0509d.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     398143
IP address blocks:        135.129.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:2a:13:e1:79:4c:1e:67:5b:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=c5673f58-9f6a-415b-821f-7ba60bc38b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:16:a2:d0:6c:16:e4:50:87:09:d2:10:96:
                    84:37:1d:77:64:02:b8:22:d4:cf:15:f5:9d:b1:fa:
                    42:38:a1:a9:87:75:d8:25:c5:18:7c:bf:03:1a:a4:
                    99:ad:b5:de:7d:10:b6:3e:59:c9:80:3a:4f:e9:b0:
                    99:7c:22:36:14:3d:2a:56:89:8e:62:79:e5:19:40:
                    7c:45:ad:4a:b9:fe:0f:e9:10:6a:6a:37:cc:98:6c:
                    ed:25:b3:dc:0b:5f:b3:9d:5c:f3:57:a0:37:4d:8a:
                    62:62:f0:b5:80:81:14:e9:50:d8:3e:2c:89:bd:39:
                    74:a3:53:22:9a:94:43:1b:e5:92:4a:0f:1b:7e:e6:
                    26:cd:d2:ed:46:1a:85:76:db:8a:62:12:b6:f5:57:
                    d5:e0:98:92:ce:48:43:63:ac:72:a7:85:12:80:66:
                    35:9e:26:bf:3f:f9:e4:d0:66:53:48:8f:11:79:2d:
                    54:34:4f:cd:e7:05:95:17:bd:1f:ae:1e:71:67:18:
                    37:43:d8:3f:16:ea:76:8e:09:5d:13:cb:b8:3e:3e:
                    16:6f:45:94:67:72:ac:9e:3f:b3:7a:2a:b4:df:68:
                    5e:a7:91:d1:85:df:e5:89:7b:16:ac:c3:9b:42:df:
                    a9:b8:5f:d1:8d:b6:2b:b2:db:f7:8d:54:76:2a:01:
                    d4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3B:DF:5B:5D:38:35:7A:59:D2:1C:87:0F:86:06:B5:54:D4:31:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/a662222b-7237-3db4-8d5a-0813c2e0509d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.129.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:49:fc:22:a9:2e:e9:4e:9c:e9:50:be:c1:76:48:97:6a:0f:
         66:d5:de:b6:3c:cb:2b:c9:4f:e0:04:f5:1b:3c:6c:db:e4:5f:
         da:8d:ea:2a:3f:1e:f5:d3:41:a4:9f:12:ca:29:b9:b7:da:c2:
         c6:94:7c:b2:c9:53:18:60:52:7d:3d:2d:75:70:32:25:bd:0f:
         5a:ef:1f:62:1a:39:53:b9:34:3c:4b:1b:02:74:7b:6e:e7:e4:
         24:68:cd:3c:38:af:b3:33:d4:37:8f:ba:7f:61:fb:47:2c:51:
         8f:84:a2:bb:b8:5b:bf:b7:b2:51:8f:73:b1:7b:6f:a9:3f:e7:
         d3:05:2b:4e:5e:55:c1:bb:1f:50:df:70:7b:b7:79:04:25:e2:
         9f:25:dd:13:81:18:ba:90:42:30:ef:ed:39:ad:c4:f1:e1:fe:
         d4:2c:0a:f1:7c:02:12:f7:31:2f:93:a5:9a:3c:b8:e6:bf:8a:
         10:fc:f8:c6:56:67:83:5b:5f:83:05:01:80:09:ff:46:fb:50:
         5b:c5:f3:ec:e6:9e:84:f0:cb:4a:98:70:28:9a:e8:8e:ee:66:
         37:5e:ef:6b:30:7c:eb:e3:d7:fb:ce:f9:28:e4:de:6e:42:53:
         f2:d7:da:db:c5:4c:9d:98:b1:9b:0e:27:3f:db:b6:db:a3:c8:
         87:76:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:43:56 2025 by rpki-client