Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/548993c0-c93e-3bfb-bedf-b3e4cb909145.roa
File:                     548993c0-c93e-3bfb-bedf-b3e4cb909145.roa (raw, json)
Hash identifier:          5EIekFdP4SbMgJxRLx3PWcTMz1RUK/gXq4Xw8luUyJQ=
Subject key identifier:   A7:BD:43:EA:D6:F4:C2:09:B3:CC:23:9B:33:9A:15:51:E9:A5:97:EC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9624A663F05C2B9AD4E120
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/548993c0-c93e-3bfb-bedf-b3e4cb909145.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        174.83.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:24:a6:63:f0:5c:2b:9a:d4:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=52507579-fd5c-437e-83aa-0bd7df8cf3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:53:d2:96:b7:1b:fc:84:dd:b1:4c:77:9e:64:
                    41:d3:e4:2b:eb:9c:6d:bd:d5:1b:f4:c8:67:6d:d5:
                    f5:97:1c:44:40:53:97:36:cf:ca:76:b0:3d:9d:d5:
                    fc:f2:ef:f4:68:39:88:78:18:92:68:37:cd:7b:f4:
                    9c:56:52:7a:79:b6:71:13:bd:b0:ff:6a:a3:f1:e7:
                    94:b7:d8:3f:bc:50:05:47:be:cf:ae:3c:dd:b6:c7:
                    01:24:92:8f:5c:58:87:52:97:df:d5:52:7b:b3:37:
                    f6:81:ae:66:b9:73:29:ac:fa:05:0c:36:79:1e:ba:
                    e9:81:e0:a7:12:9f:fb:8f:7e:68:fb:56:2e:36:7c:
                    ae:93:cd:6b:b0:ac:80:9a:72:e4:69:b5:21:d5:22:
                    2a:7b:ab:e0:9f:81:9a:24:41:22:fa:08:04:6c:e2:
                    42:0d:ce:53:7f:e2:bb:67:64:18:01:0c:7d:2a:7d:
                    98:72:9e:38:7e:04:cd:93:7f:56:46:e9:50:d0:ac:
                    1c:30:c2:a1:c6:26:23:05:5b:a5:d4:00:fb:79:49:
                    82:71:a3:f4:0d:05:74:d8:bc:99:db:8f:dc:c0:c2:
                    69:13:52:99:68:4e:11:7c:d3:6b:8c:cc:d0:55:33:
                    37:18:bc:6b:ac:23:9f:f1:0a:df:a5:c3:6b:5e:b0:
                    d5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BD:43:EA:D6:F4:C2:09:B3:CC:23:9B:33:9A:15:51:E9:A5:97:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/548993c0-c93e-3bfb-bedf-b3e4cb909145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.83.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ec:9e:81:2a:e3:af:1f:69:10:8c:21:7b:60:37:50:7a:a7:
         e7:6b:96:47:3d:ae:3a:f7:b9:b3:51:b4:36:d5:28:d2:db:fe:
         08:27:fb:1f:86:28:75:1e:a4:b3:2d:0c:a7:85:56:b1:b2:4b:
         6d:79:ef:57:1a:14:84:90:71:fc:85:84:8b:c7:a3:d6:e9:b1:
         0e:5b:ac:01:09:d9:57:80:55:89:9a:0a:d1:20:55:0d:6e:83:
         2e:50:c7:c7:91:ba:1c:90:b9:fb:1c:a9:a7:89:32:3d:89:0b:
         72:43:11:8f:fd:eb:ef:9f:3d:bd:62:4c:7d:fa:09:47:69:30:
         f4:9a:aa:50:00:5d:62:38:fd:e7:a8:8e:25:0f:8f:7b:9f:80:
         ad:fb:5d:c5:bc:54:01:f5:44:14:54:48:6c:47:cd:3e:6c:32:
         08:d8:db:fb:c4:6f:6e:14:3f:4a:1d:83:22:99:00:1e:9d:2d:
         32:cd:02:6c:b2:d9:82:a8:28:0c:72:2e:5b:7c:49:1f:a6:c1:
         31:68:a2:79:28:9b:fd:74:90:9e:83:44:ea:87:c7:2b:2e:fc:
         53:1b:ff:31:8c:b1:b5:f9:38:72:9b:bc:45:d3:73:04:24:36:
         dc:a6:30:9e:64:23:a4:19:a9:d0:58:8a:0e:b9:74:c0:40:36:
         44:35:34:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:07:50 2025 by rpki-client