Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/84df57f3-0449-3f4e-a893-ddbc0b7a6947.roa
File:                     84df57f3-0449-3f4e-a893-ddbc0b7a6947.roa (raw, json)
Hash identifier:          NPkDfG3lOVXmUI3RvV3trAXn0huafWK3gdKqhTcZ7zo=
Subject key identifier:   A3:9D:C1:4A:DD:8B:6D:61:DB:2B:D2:79:BA:8D:9F:A3:8A:BB:6F:5B
Certificate issuer:       /CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
Certificate serial:       010D0C9F4328584A936B583E9FFCD823D430C200
Authority key identifier: B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/84df57f3-0449-3f4e-a893-ddbc0b7a6947.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     40755
IP address blocks:        144.89.80.0/24 maxlen: 24
                          144.89.81.0/24 maxlen: 24
                          144.89.82.0/24 maxlen: 24
                          144.89.83.0/24 maxlen: 24
                          144.89.84.0/24 maxlen: 24
                          144.89.85.0/24 maxlen: 24
                          144.89.86.0/24 maxlen: 24
                          144.89.87.0/24 maxlen: 24
                          144.89.88.0/24 maxlen: 24
                          144.89.89.0/24 maxlen: 24
                          144.89.90.0/24 maxlen: 24
                          144.89.91.0/24 maxlen: 24
                          144.89.92.0/24 maxlen: 24
                          144.89.93.0/24 maxlen: 24
                          144.89.94.0/24 maxlen: 24
                          144.89.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:58:3e:9f:fc:d8:23:d4:30:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=7b2d2ed2-6ba0-459f-9591-196e1959621e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:22:7d:76:fc:7a:73:63:94:e5:9b:c1:84:
                    77:cd:9c:03:95:05:8e:27:f3:21:ed:eb:e2:a7:c6:
                    18:96:42:7c:8c:95:8e:e2:61:87:f6:31:a8:67:15:
                    f3:cb:29:6b:d9:14:1c:58:b3:88:5d:18:af:cb:ab:
                    8d:2d:e8:02:72:f2:18:b5:fb:53:5d:07:2e:85:c4:
                    76:95:1e:ca:e6:c8:5e:b2:31:7b:d0:e5:34:72:12:
                    2d:ac:95:19:29:b8:40:d7:c8:3e:2a:3f:66:14:c7:
                    f7:28:33:ee:6f:66:5f:df:4f:7d:cb:28:0d:69:14:
                    5b:93:7e:0e:53:e9:aa:45:3f:87:11:22:26:0d:3b:
                    5e:7e:14:d5:3e:d4:a1:38:f7:25:35:4c:a2:db:be:
                    01:fb:37:d4:d0:ed:39:86:0b:32:47:39:16:94:02:
                    07:69:f9:d4:85:d4:fa:91:c2:90:5d:e7:ee:c9:05:
                    df:72:1c:ed:10:57:c0:a4:63:04:54:97:1a:0d:75:
                    fc:66:80:39:b5:2b:fc:00:e5:77:57:8c:ce:0c:92:
                    0a:5e:2b:c8:4a:f8:9f:5a:34:76:28:cb:65:4f:bf:
                    56:23:c4:20:4f:c6:b8:ef:db:24:f0:99:4e:32:bb:
                    a6:fa:37:b7:2a:62:70:cd:9e:6f:15:c1:26:f3:b2:
                    f1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9D:C1:4A:DD:8B:6D:61:DB:2B:D2:79:BA:8D:9F:A3:8A:BB:6F:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/84df57f3-0449-3f4e-a893-ddbc0b7a6947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl

            X509v3 Authority Key Identifier:
                keyid:B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.89.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:cc:e6:b0:84:23:27:fa:74:20:ea:0a:33:99:c6:0c:7c:9a:
         9e:bb:bd:3e:c3:2d:9f:e2:3d:c2:df:b7:9e:82:1c:b8:37:d1:
         b5:87:bb:96:4f:dd:2b:e5:f2:90:a2:0e:45:89:23:4c:b6:7b:
         c7:26:ce:e1:03:47:b8:3b:d7:26:28:4b:f7:d3:b0:64:ac:df:
         83:a6:21:2d:0b:7e:86:48:1d:00:0b:94:91:86:e7:5c:ef:a5:
         f0:28:90:72:33:c5:d2:94:bf:58:10:9d:fd:ce:39:1f:d6:79:
         e2:4b:e9:eb:b4:4e:33:ac:18:02:ad:2e:c4:b2:d3:42:e8:8e:
         ea:4c:31:fa:69:6d:ff:7f:6d:d8:77:46:55:21:f6:7a:3b:15:
         85:b8:3e:a7:90:ae:b4:70:77:03:a4:aa:8b:7c:b5:98:ae:2d:
         40:69:26:fa:bf:c1:12:35:ec:64:2a:3e:cf:55:6b:80:6f:53:
         8c:4d:26:ae:f0:24:e8:7b:4f:39:48:7d:03:12:42:f5:84:0c:
         58:f2:d0:44:72:f1:85:b2:e2:59:c5:b8:25:70:29:6d:19:f1:
         b4:ad:c7:66:cc:83:f3:40:75:e7:45:78:17:0d:76:20:d9:90:
         eb:68:65:fd:23:41:50:e2:7c:e0:34:1c:d8:4a:5c:7b:ad:23:
         d3:f7:82:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:26 2025 by rpki-client