Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/cca9dae9-2f19-3eba-9783-9689f593ab54.roa
File:                     cca9dae9-2f19-3eba-9783-9689f593ab54.roa (raw, json)
Hash identifier:          TLTshpzbE0WBAY0ZX62RY1ZinPJkpCQCBKeMSHTGIkI=
Subject key identifier:   59:B1:99:98:EE:58:8D:A0:8E:30:D1:96:67:2B:0A:B4:13:6A:72:12
Certificate issuer:       /CN=465e1a7d-d25c-41fa-b387-a7c000917fbd
Certificate serial:       010D0C9F4328584ABD4B786A67654E80954D5D00
Authority key identifier: EF:6D:74:C3:28:7D:81:AC:C2:33:40:EF:1D:9E:92:10:FA:D4:F9:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/cca9dae9-2f19-3eba-9783-9689f593ab54.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     17098
IP address blocks:        158.51.40.0/22 maxlen: 32
                          172.97.100.0/22 maxlen: 32
                          209.182.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/465e1a7d-d25c-41fa-b387-a7c000917fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/465e1a7d-d25c-41fa-b387-a7c000917fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:78:6a:67:65:4e:80:95:4d:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465e1a7d-d25c-41fa-b387-a7c000917fbd
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=2d8d779c-722f-421c-9fa6-391ad4a22e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:eb:d1:e8:6b:59:1a:2a:ea:ff:98:41:dd:c4:
                    a2:cb:a7:52:45:a8:94:e1:05:2d:fc:c5:f8:aa:2b:
                    93:ff:ed:72:5d:e8:b9:b6:9c:fb:49:8e:b9:dd:90:
                    a2:b5:3b:7e:72:9f:ee:b2:67:b0:1d:b9:cd:6e:06:
                    ab:d0:4a:99:a5:d9:46:f7:a0:35:e7:a8:a1:e8:c0:
                    71:80:79:e7:d7:09:00:7a:72:1c:62:e7:c7:0f:58:
                    9a:79:4d:83:e5:c2:43:df:e8:5c:2f:ba:47:7f:a7:
                    b5:f8:82:ab:ff:99:fa:3e:e5:4e:65:28:b1:6d:90:
                    fe:33:2c:75:6a:bb:cb:8d:ec:de:0a:21:c9:6b:24:
                    40:4a:5a:b5:1b:ac:81:2a:3a:c9:a5:9c:3b:ba:fd:
                    99:19:06:af:27:6d:47:02:12:31:d2:2d:14:20:8a:
                    c2:72:1a:53:68:27:3a:2c:cf:6b:67:db:2a:f8:c8:
                    87:ce:4d:34:3e:33:49:6e:61:08:60:32:e4:51:3e:
                    a5:a8:1d:11:3d:1a:b8:40:c3:9e:86:47:a1:88:43:
                    42:77:79:e2:5f:7c:88:bb:85:be:6c:e5:68:09:13:
                    46:2d:da:00:a0:71:a0:b5:f8:d4:e5:3d:5f:5b:59:
                    e5:e0:ed:10:b6:49:53:7f:bd:68:96:1c:46:6f:74:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B1:99:98:EE:58:8D:A0:8E:30:D1:96:67:2B:0A:B4:13:6A:72:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/cca9dae9-2f19-3eba-9783-9689f593ab54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/465e1a7d-d25c-41fa-b387-a7c000917fbd.crl

            X509v3 Authority Key Identifier:
                keyid:EF:6D:74:C3:28:7D:81:AC:C2:33:40:EF:1D:9E:92:10:FA:D4:F9:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.40.0/22
                  172.97.100.0/22
                  209.182.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:74:47:ea:5f:4a:54:99:64:30:f0:11:03:ca:9f:f4:08:14:
         5a:4b:7d:37:ed:7f:2a:21:f7:e5:2e:89:68:80:60:6f:ef:0d:
         e1:df:30:0d:1c:5d:86:ac:09:3f:01:53:c6:44:a6:74:ad:40:
         c4:36:50:70:91:8e:e7:36:44:01:4f:40:ff:43:0b:8c:3c:ce:
         77:5a:e2:b4:3c:0f:9f:1b:75:c6:cf:22:96:d9:90:4c:93:b9:
         d0:c8:b2:91:28:8f:07:d5:9c:e0:a1:c4:46:68:4c:4c:ce:28:
         6d:21:5e:7c:32:ad:ce:03:39:cf:bd:10:d9:1b:45:fa:8a:4a:
         40:8f:ae:5a:a8:a4:13:ce:0c:c2:24:f2:f6:34:8b:b2:6f:9a:
         88:d9:99:35:dd:51:37:f9:5d:57:89:f0:34:8f:1d:f1:7a:7c:
         40:17:cd:97:f9:3b:8d:ef:08:ff:13:af:08:7a:cc:eb:6d:c3:
         3b:0e:f3:68:b6:95:e5:3f:bd:9d:ad:4e:e4:05:f6:09:b7:39:
         8d:97:ee:b3:df:c0:7e:58:22:05:0e:6c:06:3a:45:3d:1d:77:
         4b:30:18:05:05:06:1d:38:d3:8b:c2:b3:12:2b:45:24:9c:cb:
         1d:51:af:ab:14:a4:6a:5a:d1:d6:ec:85:eb:1a:f5:e7:13:94:
         67:cc:bc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:18:45 2025 by rpki-client