Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa
File:                     cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa (raw, json)
Hash identifier:          ypg7ah/x1kxpG4heF9iNEF3XHGQYh3WqYOFVDtXPqX0=
Subject key identifier:   0B:D5:D7:42:BC:FB:CE:84:94:06:DB:DA:0D:3D:F4:85:C0:FF:DD:68
Certificate issuer:       /CN=05437be8-72be-4526-bdc7-04862534a038
Certificate serial:       010D0C9F4328584AA42B83CF8ED4073037C35B00
Authority key identifier: C3:03:49:15:9B:48:48:BC:E7:B0:E3:1B:32:7F:83:D7:97:DB:AF:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     399035
IP address blocks:        162.142.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/05437be8-72be-4526-bdc7-04862534a038.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/05437be8-72be-4526-bdc7-04862534a038.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:83:cf:8e:d4:07:30:37:c3:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05437be8-72be-4526-bdc7-04862534a038
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=04025cb4-d2c4-44d7-97db-60d730149f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3a:3b:71:d4:a0:c2:60:20:3d:ed:ad:83:a8:
                    a6:1f:4f:16:43:d9:b8:4c:8f:1f:6c:75:7d:db:51:
                    32:a3:6a:90:cb:23:77:cc:ba:f7:99:a2:22:86:17:
                    7f:08:97:eb:f9:cb:59:f2:81:fd:bf:d3:6b:8d:6c:
                    7f:bf:dc:7a:cf:25:b6:8a:cd:bd:05:81:1f:54:8d:
                    bb:3c:20:97:3e:fd:e1:b6:99:8b:93:ba:95:34:73:
                    3e:dc:5c:4d:a8:84:ff:02:54:c9:4c:25:00:90:7a:
                    f7:47:81:3e:0e:a1:0e:2e:17:29:18:25:dc:86:7f:
                    d1:54:b9:e0:71:54:bd:14:93:75:44:8e:1b:48:b9:
                    a2:89:0f:88:14:36:d9:c3:1b:3d:9e:2b:31:21:5f:
                    dc:0f:07:82:a4:55:3f:51:59:ce:e5:73:a2:fe:30:
                    7a:d4:9f:91:e6:01:b4:9b:ec:7b:ef:55:1d:eb:c5:
                    fe:92:57:4b:9f:ce:fa:f8:99:62:05:d6:46:0d:f8:
                    97:31:75:2c:aa:b5:61:10:57:45:15:25:b6:64:b8:
                    ab:af:e4:c8:bd:1a:5a:79:da:88:5a:71:b4:8e:24:
                    64:4a:47:8e:ca:5c:0b:84:8c:ce:79:f0:e5:4b:61:
                    19:ad:f9:33:03:65:ad:53:b3:25:4a:f8:06:96:f7:
                    19:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D5:D7:42:BC:FB:CE:84:94:06:DB:DA:0D:3D:F4:85:C0:FF:DD:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/05437be8-72be-4526-bdc7-04862534a038.crl

            X509v3 Authority Key Identifier:
                keyid:C3:03:49:15:9B:48:48:BC:E7:B0:E3:1B:32:7F:83:D7:97:DB:AF:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.142.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c6:71:ce:75:d8:37:14:48:0e:28:28:69:cf:c1:38:56:3b:
         0e:35:6d:5a:d2:b8:08:0e:28:72:dc:ec:7c:79:a3:f3:cc:60:
         12:7c:d4:8f:8a:54:0f:5f:cb:bb:02:66:d4:e4:fc:ff:8e:4a:
         19:d5:7a:39:40:a7:aa:6d:9c:27:9d:c7:c8:2e:d2:03:85:52:
         92:55:3b:73:2e:4d:8f:1e:c0:69:47:7f:c3:ab:65:4d:48:2f:
         2d:af:fc:36:d2:bc:55:d4:91:3b:af:dc:f4:d8:95:72:03:dc:
         e2:fd:43:67:eb:0f:5f:08:50:00:b1:76:7a:98:11:f7:b7:80:
         1d:54:9a:e6:81:62:42:45:15:d9:b1:f3:b9:ae:93:95:64:29:
         c5:09:95:6a:52:9e:d1:59:30:0e:29:50:6e:18:4a:1f:66:88:
         8f:c3:d6:16:11:03:19:ba:ea:4f:76:2d:35:93:bc:f0:b4:7c:
         01:ef:44:48:40:ed:62:be:aa:a7:d4:23:7b:c4:3a:dd:f4:d6:
         19:57:17:48:8e:37:d1:f2:40:f3:06:65:17:68:ee:20:35:42:
         8a:da:6f:bc:55:8a:75:63:91:f3:5f:65:4d:16:73:bf:e2:89:
         a3:23:67:e6:8d:e2:f5:70:c3:d2:87:96:93:c5:d3:a6:ef:17:
         22:74:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:44:39 2025 by rpki-client