Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/9ab84c57-3305-30ff-b583-4bb0023c64b2.roa
File:                     9ab84c57-3305-30ff-b583-4bb0023c64b2.roa (raw, json)
Hash identifier:          AXdFcgGVMuevWn8s5qGRwvURTSrgmtirHgmxbt3gZ8Q=
Subject key identifier:   FA:95:B0:A9:A6:A4:9D:53:5F:A6:01:94:42:17:70:7D:66:84:13:70
Certificate issuer:       /CN=c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc
Certificate serial:       010D0C9F4328584AB91B99050D43EA552681D440
Authority key identifier: 68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/9ab84c57-3305-30ff-b583-4bb0023c64b2.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     53949
IP address blocks:        162.213.172.0/22 maxlen: 24
                          173.225.144.0/20 maxlen: 24
                          192.119.134.0/24 maxlen: 24
                          198.98.208.0/20 maxlen: 24
                          206.198.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:99:05:0d:43:ea:55:26:81:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=b202c39a-9eee-421d-a7b4-d6e9b68ad218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f7:dc:80:d0:e1:b0:59:67:36:41:a5:d1:f7:
                    b6:03:7e:f0:e5:c7:20:dc:76:92:e6:4e:c5:81:4a:
                    40:9d:2c:df:2d:2a:c7:76:0e:54:68:c9:44:03:bf:
                    88:a7:96:1d:de:2c:3f:23:46:74:e6:e8:97:6b:a4:
                    68:bd:ae:48:dc:46:c8:a9:b1:84:25:b9:d1:9e:0e:
                    5b:e2:b2:a3:90:61:fd:80:d2:c3:12:4a:4e:be:2d:
                    84:66:34:fb:fc:4d:2e:b0:17:21:5f:e6:6b:5b:3c:
                    eb:9f:d7:26:3a:20:cc:1a:62:36:34:06:a4:01:6b:
                    c2:06:ea:26:f3:86:d7:f6:59:be:36:22:aa:46:ce:
                    23:99:ac:70:de:be:50:47:ef:9a:06:c2:ef:67:11:
                    08:1f:f6:66:85:5d:c1:76:56:a8:d9:f4:4a:d7:0f:
                    f0:83:1c:65:62:01:3a:4a:0e:80:05:d2:db:c8:36:
                    97:b7:20:54:09:f2:67:57:d1:21:4b:ab:d3:d6:f5:
                    a8:5c:dc:58:03:9b:c7:99:fb:2d:9b:60:7c:a3:d7:
                    b1:3e:fc:1e:bb:c8:bb:98:d8:d0:d5:75:f2:b8:f5:
                    33:ed:e0:62:5c:0d:e1:44:17:73:6d:df:08:91:4f:
                    53:a2:9f:71:13:0e:55:08:25:af:11:83:ea:f7:e4:
                    af:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:95:B0:A9:A6:A4:9D:53:5F:A6:01:94:42:17:70:7D:66:84:13:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/9ab84c57-3305-30ff-b583-4bb0023c64b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.crl

            X509v3 Authority Key Identifier:
                keyid:68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.172.0/22
                  173.225.144.0/20
                  192.119.134.0/24
                  198.98.208.0/20
                  206.198.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:fe:62:cb:40:33:ca:50:1e:e6:1a:be:ac:fa:97:6f:2e:7f:
         0e:75:1d:5d:24:5f:fe:d2:ff:26:02:28:cc:8a:86:39:d7:11:
         04:49:64:f1:fa:51:c9:4b:41:57:cd:d1:50:99:cb:99:3f:86:
         8b:d8:46:2c:40:36:46:45:99:18:93:10:1c:9f:d0:84:1e:62:
         1f:d2:16:9a:94:e0:46:00:26:87:55:c0:98:98:b4:e9:46:84:
         23:6b:fa:ad:71:cb:79:23:cd:8d:66:36:e9:90:af:4c:4a:85:
         93:e0:65:5e:2b:36:ab:ee:8f:8f:8e:d4:3b:be:4d:5d:3a:93:
         5d:cc:a5:a6:c8:a3:95:62:77:af:37:33:6d:0e:c4:6e:5a:88:
         ad:f3:9e:1a:55:7b:b3:3c:1e:2b:58:c8:93:26:1b:22:39:c9:
         89:f4:a6:e4:96:1e:4b:17:3b:35:b3:e5:ac:09:e3:33:0e:07:
         71:a5:97:f3:6a:85:6c:b3:15:bd:b6:e6:33:d8:e2:66:dc:eb:
         b1:ee:70:58:0b:71:5d:ec:d6:98:91:fe:24:da:f7:5a:a3:d2:
         fc:59:28:c6:1b:bb:52:82:40:04:30:b8:3d:6a:59:64:a8:2b:
         ea:66:b5:89:10:c4:52:81:23:8d:de:42:73:e2:38:1c:7e:1b:
         9d:5c:dd:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:11:36 2025 by rpki-client