Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/2d989958-de2a-3b93-88d7-098e523dda88.roa
File:                     2d989958-de2a-3b93-88d7-098e523dda88.roa (raw, json)
Hash identifier:          gOYRmqSXpRVSzMovJ4P8kfC9wnr9S5I6h/Ttfv36afs=
Subject key identifier:   84:3D:56:63:A3:D9:38:26:D1:07:E6:51:90:85:B0:B7:56:66:DF:3D
Certificate issuer:       /CN=135a25e4-6a94-45c6-b694-2d6e8256166a
Certificate serial:       010D0C9F4328584A9D30E20DC0F050182AE45A80
Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/2d989958-de2a-3b93-88d7-098e523dda88.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        143.192.40.0/24 maxlen: 24
                          143.192.41.0/24 maxlen: 24
                          143.192.42.0/24 maxlen: 24
                          143.192.43.0/24 maxlen: 24
                          143.192.44.0/24 maxlen: 24
                          143.192.45.0/24 maxlen: 24
                          143.192.50.0/24 maxlen: 24
                          143.192.51.0/24 maxlen: 24
                          143.192.52.0/24 maxlen: 24
                          143.192.53.0/24 maxlen: 24
                          143.192.54.0/24 maxlen: 24
                          143.192.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e2:0d:c0:f0:50:18:2a:e4:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=4865c7df-6ae8-4b52-a793-831b3ced9cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:74:be:c9:bf:97:5f:b7:d6:cc:5e:5c:14:2b:
                    65:81:8c:21:bf:86:3a:33:6b:d7:93:72:74:17:84:
                    b4:30:18:6f:c2:2d:56:55:67:dd:de:8c:d4:d1:85:
                    57:89:6d:14:2b:1a:52:48:58:ba:fd:49:45:ee:d2:
                    56:fa:a8:83:13:a8:cc:b4:ab:79:cc:bb:b1:be:97:
                    d5:67:16:37:88:ab:8d:6a:46:cc:09:a6:da:7b:c2:
                    1c:e7:b6:c5:c8:ff:2c:75:88:03:50:47:e2:13:d6:
                    93:78:32:a6:eb:08:14:e7:9c:4a:38:2e:2c:5e:a4:
                    d2:10:05:e3:25:ac:a3:bc:58:cc:e6:4b:26:09:57:
                    ee:0a:b7:f2:fe:00:95:5b:6d:ad:05:36:40:71:80:
                    cc:b7:98:aa:41:de:05:7b:77:4a:64:d4:a6:ec:12:
                    9a:7b:e9:38:9a:12:5f:5e:64:f1:6a:c0:b8:1b:54:
                    d2:15:ce:04:c8:9e:ed:ae:8d:9b:19:85:34:e4:36:
                    46:ff:1e:68:46:47:7b:d3:fd:99:fa:e3:55:99:cd:
                    b9:0f:34:79:67:fd:92:7b:9b:a6:e6:f3:6f:d8:9a:
                    8f:ac:93:ee:f6:79:a1:09:f7:60:b3:17:44:f8:3a:
                    fc:a2:1c:bf:3c:5e:41:45:34:68:9e:d8:76:6c:3e:
                    91:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3D:56:63:A3:D9:38:26:D1:07:E6:51:90:85:B0:B7:56:66:DF:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/2d989958-de2a-3b93-88d7-098e523dda88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl

            X509v3 Authority Key Identifier:
                keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.192.40.0-143.192.45.255
                  143.192.50.0-143.192.55.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ab:97:6d:81:53:3f:6d:ba:9e:88:3d:4d:4e:97:48:2d:85:
         25:96:39:7e:48:d5:c2:2b:b8:23:e9:be:47:5b:9e:1c:7b:41:
         82:5a:a8:6f:ce:5d:59:ad:15:21:3e:4c:96:60:b3:d5:9a:c0:
         bf:83:5d:11:4a:79:95:e6:75:92:86:1f:54:f0:2b:7f:bf:38:
         e8:58:d7:87:c3:3c:42:fd:08:00:e5:20:fc:4f:4a:ef:3a:e9:
         33:2b:df:5a:97:fd:4d:c5:a9:b5:da:c2:f4:6b:c8:3c:d8:5e:
         a6:41:37:db:6e:ca:9e:61:68:c1:6e:d0:0c:35:00:9d:5c:33:
         8b:60:dd:42:3f:21:90:af:11:c1:3b:7d:fb:58:e7:21:f2:b3:
         b4:60:1e:f8:7d:57:6f:82:d7:0e:04:0f:80:5f:89:18:ec:16:
         2c:3c:76:50:7c:9f:5b:16:be:b9:9e:36:7f:29:e1:c5:a7:68:
         01:34:bc:21:03:55:b3:6a:ce:27:60:4c:81:1f:62:05:9b:ee:
         30:1b:04:27:b6:46:57:26:e5:de:56:4c:6f:c3:f1:6d:fe:c0:
         c1:88:d8:8e:0d:5d:ed:48:93:04:05:28:96:80:48:c5:8f:07:
         8e:f7:01:a1:3c:92:f4:91:ed:0f:2a:08:fa:b1:07:ae:91:6b:
         9c:a0:c8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:36:21 2025 by rpki-client