Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa
File:                     5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa (raw, json)
Hash identifier:          xI0DUbFRXcFv7E46wbOLdvKH4Psc66Nz2SYQN5/HDRE=
Subject key identifier:   23:3F:CB:75:0B:14:8D:66:E6:B2:0A:12:56:19:32:A3:3E:2E:78:F4
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584AA590F5EBE6F996E9B538EC80
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa
Signing time:             Sat 26 Jul 2025 13:01:04 +0000
ROA not before:           Sat 26 Jul 2025 13:01:04 +0000
ROA not after:            Fri 24 Oct 2025 13:01:04 +0000
asID:                     0
IP address blocks:        125.253.80.0/21 maxlen: 21
                          125.253.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a5:90:f5:eb:e6:f9:96:e9:b5:38:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Jul 26 13:01:04 2025 GMT
            Not After : Oct 24 13:01:04 2025 GMT
        Subject: CN=308a460d-fc40-43dd-b9b7-6927a6225f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:93:66:ae:e4:51:32:39:1f:60:8e:f7:f1:17:
                    93:20:f0:cb:46:dc:62:27:fa:06:70:dd:8d:7c:3f:
                    e7:19:97:07:df:8d:03:37:81:61:72:9b:48:34:c0:
                    ad:a8:ed:0c:9a:09:22:03:5d:32:b9:40:9c:43:db:
                    16:c7:4f:52:da:ee:b5:ff:0f:cc:a4:c4:07:72:b5:
                    e2:a2:5a:19:0b:83:d2:3c:80:54:7a:f9:05:21:23:
                    6d:d4:2d:15:fd:1d:95:ea:9f:6f:85:39:d6:11:af:
                    5e:d4:96:94:5e:79:5b:45:93:b6:7a:c6:3a:18:f8:
                    81:3d:28:2a:44:e7:45:26:4a:b5:45:65:b4:cb:bf:
                    7f:a4:2c:04:97:4b:12:97:57:05:11:d3:37:d9:cf:
                    cc:70:44:aa:0a:21:b1:9c:40:c6:a9:49:a3:a7:75:
                    37:35:56:82:11:69:41:7c:f5:e2:d6:a0:ab:f3:f2:
                    21:d9:f6:ba:13:32:f3:1d:14:e5:3c:d4:74:04:98:
                    a2:0c:ed:1a:90:08:68:af:7a:10:bd:9d:f5:96:04:
                    61:bd:33:37:ce:93:f0:90:65:8f:78:ca:63:f2:0a:
                    e1:ea:1d:2f:aa:4d:fd:73:fc:3d:3e:7d:d5:d8:6b:
                    93:9a:3d:8d:74:80:a3:da:35:1c:95:f6:f3:6c:2a:
                    e1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3F:CB:75:0B:14:8D:66:E6:B2:0A:12:56:19:32:A3:3E:2E:78:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.253.80.0-125.253.91.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ff:4f:85:23:4e:38:be:58:a4:0d:5b:ab:a0:c6:8d:17:8c:
         5e:46:95:ff:e4:a9:13:f7:17:be:1d:6a:0e:19:4a:a8:ef:7d:
         3a:14:e4:bb:06:1b:e1:17:62:64:33:78:36:2c:29:06:23:5e:
         e8:03:86:7d:ad:92:d3:ef:f8:e2:14:62:94:e4:db:54:e3:79:
         59:74:87:0c:fc:85:2b:00:3c:a6:29:a3:bd:c2:9c:31:69:42:
         92:b9:f7:33:10:01:e1:55:2f:61:db:d8:02:6b:b8:c0:00:4f:
         bc:a4:fd:10:06:bb:b9:e9:2f:db:bb:f6:7e:c3:e1:9f:cd:77:
         bf:a9:70:f5:43:ad:30:1c:e6:86:b8:01:46:a5:92:6d:e3:30:
         9b:17:60:44:c5:6a:0d:2d:bc:2e:ea:a6:c3:38:7e:b9:6a:1d:
         53:d6:53:83:ba:7f:d2:b8:1f:03:8d:e5:7e:45:42:d5:92:b4:
         13:7b:69:6a:20:1a:87:af:45:f1:e4:56:49:9c:51:2e:8a:2e:
         ef:8d:45:06:bb:b6:0c:05:09:f0:bc:9a:de:84:09:10:da:14:
         20:63:a8:69:39:f1:bc:ae:bb:ee:bd:d5:89:11:fd:78:99:12:
         db:1e:dc:a2:4b:85:3f:16:08:0b:0d:53:17:19:ed:ea:b5:32:
         4b:9b:31:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:26:29 2025 by rpki-client