Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/57fff646-7145-32f1-a13c-3572fed83485.roa
File:                     57fff646-7145-32f1-a13c-3572fed83485.roa (raw, json)
Hash identifier:          Xmr0Off23MiVI6TvhbesxfMDRkXCvzwfHM162IHZpmA=
Subject key identifier:   47:D5:DB:C5:84:68:9E:F8:C7:D6:CF:C3:BD:F0:7D:71:80:12:FC:9C
Certificate issuer:       /CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
Certificate serial:       010D0C9F4328584A8575F3394B3E6BC28A189C98
Authority key identifier: CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/57fff646-7145-32f1-a13c-3572fed83485.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     393397
IP address blocks:        173.195.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f3:39:4b:3e:6b:c2:8a:18:9c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=562ad005-290e-44b2-a3c5-136b09882121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:03:f1:71:2f:4e:bc:81:fa:02:2d:1c:c6:
                    ea:10:0d:f8:5b:9c:5b:ab:2c:c8:98:a0:c2:e2:62:
                    5b:65:c4:cc:f6:7a:62:5b:48:30:c9:aa:4d:36:1b:
                    c4:ff:a8:c8:92:eb:30:ee:b2:88:a8:1c:c6:73:cb:
                    0c:b6:81:b3:22:94:17:64:5b:db:7e:b5:ad:59:07:
                    d0:39:71:0b:48:42:4d:d8:ee:c6:9f:b4:38:77:d9:
                    a5:49:24:d7:0b:ea:6d:47:a2:90:e7:44:78:cb:fc:
                    a0:74:b6:41:c6:34:8c:4d:42:28:5e:ca:b0:89:23:
                    07:55:20:cc:97:76:c9:c2:0a:d9:f7:ef:0d:90:98:
                    bd:29:92:75:2f:50:26:0e:17:6b:d5:a9:e6:6a:86:
                    c1:ef:c9:6b:35:9e:ed:57:76:97:5c:4b:0d:2c:cd:
                    0c:ae:5b:42:0a:73:55:4d:c4:23:8b:f6:a3:ac:7b:
                    29:1c:23:ef:a4:7f:4b:19:7d:28:fd:2f:ea:4c:09:
                    4e:f5:0f:ac:2b:14:36:97:3e:b6:55:2b:b9:0a:f9:
                    c7:db:be:ff:22:73:cb:b3:dd:52:d7:bb:92:b2:35:
                    ea:d6:15:52:b4:51:1f:88:fa:96:53:d0:af:21:6e:
                    bb:2f:d7:bf:1f:86:39:26:be:7b:84:0d:dc:5c:b4:
                    6a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D5:DB:C5:84:68:9E:F8:C7:D6:CF:C3:BD:F0:7D:71:80:12:FC:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/57fff646-7145-32f1-a13c-3572fed83485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl

            X509v3 Authority Key Identifier:
                keyid:CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:07:8b:3d:40:f0:0d:07:61:da:33:d0:9a:1f:67:18:28:9f:
         a2:66:c4:11:d4:69:29:38:33:06:57:b3:55:14:07:8f:17:59:
         2c:14:a7:6e:1e:56:d9:6b:6c:6a:7a:0d:54:49:d5:3d:50:77:
         b0:4c:57:48:d9:42:bc:e5:c5:f1:3c:8d:db:27:56:1f:d6:dc:
         0a:5e:05:35:70:33:7a:4e:7c:3c:32:ad:68:83:23:26:0e:7a:
         0f:e7:83:72:db:92:61:64:f1:68:ee:6a:4d:63:45:b3:7f:76:
         3e:b5:fd:78:c0:d3:31:ad:46:01:53:8f:c2:16:14:4f:6f:09:
         f1:fc:68:69:58:ba:10:18:2b:2e:c4:d2:e7:34:18:93:c7:f7:
         35:ef:f6:1d:bc:52:bc:3e:a1:da:34:12:dc:d2:f1:4f:48:0d:
         3f:08:41:7c:93:c0:d1:8e:2d:48:d0:44:6d:e7:15:99:9d:d6:
         7a:0b:3b:83:9c:fe:10:ad:88:b7:4e:88:d9:32:39:ac:f3:6b:
         c4:d4:9a:48:e3:04:57:07:1e:79:9c:f7:3a:13:3c:3d:1a:b1:
         5e:e2:20:19:fc:49:9d:c4:e7:48:e4:3e:bc:0c:c1:3d:0e:79:
         89:7d:76:c7:f8:35:f4:83:cc:e2:66:36:17:37:69:98:b0:ed:
         c0:ca:99:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:43 2025 by rpki-client