Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/f73ffc51-c9cb-3309-afcb-20bd8ff984a9.roa
File:                     f73ffc51-c9cb-3309-afcb-20bd8ff984a9.roa (raw, json)
Hash identifier:          J2gfpzciQTC/kkCEm6QGlhgygbAmsGeBPNuCUguXYcA=
Subject key identifier:   D2:E1:04:A8:C8:6F:42:5D:50:78:BB:D7:50:67:C9:E4:8B:D5:CD:05
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584AA160DBF8580889CEF9108560
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/f73ffc51-c9cb-3309-afcb-20bd8ff984a9.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     53356
IP address blocks:        141.140.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:db:f8:58:08:89:ce:f9:10:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=b38f2975-b3de-45e3-b92d-68d3c9477f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f0:d1:dc:25:f7:e6:51:6f:00:93:9f:99:91:
                    9d:a0:22:05:b5:ea:a5:82:03:fd:1c:b7:64:5b:bc:
                    e6:92:d4:cd:d7:ea:ed:6c:8d:0c:4e:ef:40:99:26:
                    29:ee:1f:6f:d2:d6:d6:d3:95:46:ae:83:24:f4:88:
                    20:ea:ee:0a:8b:61:58:81:f5:ed:c9:8a:24:a2:5a:
                    16:d6:4d:2b:58:7f:1b:f5:a2:db:0a:0c:a9:51:d5:
                    d1:ad:d0:4a:e5:ed:ce:0c:69:4f:0d:52:ac:c4:e4:
                    41:c8:2d:6a:66:cb:f4:6a:3b:7f:8d:23:25:29:98:
                    0e:8f:8e:2e:18:b8:9c:b7:7b:f2:a5:84:f2:68:27:
                    0c:4c:28:9c:97:a2:8c:8e:93:7f:9c:ff:a3:0f:39:
                    44:50:ee:82:df:e3:d6:22:e1:d5:eb:81:eb:45:fc:
                    97:69:13:6b:a5:c5:ac:03:14:55:ae:91:09:63:3a:
                    52:01:8a:5e:d8:70:df:2a:13:2a:26:0a:73:64:7d:
                    b2:4b:dc:69:9d:fe:05:ed:b7:cb:11:4e:d1:dd:db:
                    49:eb:a4:49:1e:be:80:e8:7c:66:10:50:ef:4e:c9:
                    73:ab:5d:06:46:7a:e3:e6:cd:a9:37:c2:64:6e:e6:
                    fb:45:57:a3:e6:3f:3f:19:72:8f:04:21:86:c7:51:
                    03:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E1:04:A8:C8:6F:42:5D:50:78:BB:D7:50:67:C9:E4:8B:D5:CD:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/f73ffc51-c9cb-3309-afcb-20bd8ff984a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:6e:bb:8e:06:4e:63:fe:86:14:4e:ea:16:41:7e:5b:e2:02:
         4f:d1:34:51:ec:b3:3f:a8:65:02:e3:b4:aa:83:2b:d4:7b:3e:
         1c:07:98:4d:11:ee:ea:9e:83:76:77:83:9f:8b:8c:85:73:8d:
         3d:3b:8c:16:70:6e:e6:35:9f:13:47:d0:a0:d0:14:39:0d:ad:
         2a:89:61:27:d7:e1:20:8a:80:e5:1e:c2:f7:65:83:40:df:9c:
         40:aa:92:cd:4f:2f:3e:9f:b8:89:74:78:5c:f8:67:85:60:a4:
         e0:ac:f4:ed:14:c4:f6:5e:74:95:bd:70:94:54:36:75:c8:ab:
         5b:7f:c3:9e:7c:a8:10:20:a2:f7:97:1e:53:2e:96:22:46:b9:
         31:98:ea:11:f3:0c:fd:1d:8d:94:44:9d:c4:17:b2:03:d0:8d:
         98:3f:31:cb:a8:67:fb:f7:46:2e:55:8b:02:71:d5:ae:ed:76:
         41:73:00:fa:fc:c7:a6:b2:de:d9:71:66:cb:51:93:59:06:ca:
         23:aa:75:53:b2:f7:d2:ad:97:01:dd:e4:15:43:f2:8c:7b:57:
         a5:6b:4c:73:5b:86:ce:21:07:6b:8f:66:13:ee:c6:6d:4d:51:
         ef:e5:2f:4b:03:74:40:c0:f0:d4:6a:ba:63:57:d8:46:9f:29:
         64:09:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:10 2025 by rpki-client