Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/ed35ae6e-aba2-37d3-969b-13cd5db25d2d.roa
File:                     ed35ae6e-aba2-37d3-969b-13cd5db25d2d.roa (raw, json)
Hash identifier:          eRPG7Z9XeDie/B6otx9k+WHzxjFY/7gAXySg8Ivywuo=
Subject key identifier:   0E:92:85:B9:ED:59:A2:F6:85:29:DD:C3:40:6E:84:51:40:E6:B3:5B
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F4328584AB65104D741B9AB9DA599BA30
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/ed35ae6e-aba2-37d3-969b-13cd5db25d2d.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     25655
IP address blocks:        173.241.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:51:04:d7:41:b9:ab:9d:a5:99:ba:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=2ef457da-5cdd-4f0d-93b4-0091e15e92b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c2:3d:ec:f5:38:49:6b:91:e7:b2:21:e1:d5:
                    a9:18:32:e0:8d:91:dd:88:50:95:e0:7a:0a:7d:89:
                    6f:05:58:55:45:0e:ae:34:d7:04:8c:9d:f6:fa:b6:
                    e9:be:c9:36:21:84:d2:4e:37:fc:4f:36:c7:30:95:
                    b0:fa:c8:51:d2:91:61:cc:34:88:84:42:ea:1a:25:
                    39:4f:1a:d4:e8:3c:fd:c3:4c:f2:f6:13:61:4a:a9:
                    8b:f5:81:4d:78:94:35:bb:60:d3:b5:8f:02:23:85:
                    f0:5f:d4:5a:bd:8a:95:7e:cb:34:29:ad:6d:a2:d7:
                    50:8d:8f:0c:41:91:00:96:63:11:e0:d8:0b:05:cf:
                    74:3a:d5:57:b7:de:bc:5e:41:18:1b:c9:1d:5a:ba:
                    a2:c6:68:18:d7:e2:92:22:d0:ed:79:64:fc:88:81:
                    91:db:78:5e:09:15:be:2f:3e:86:8d:72:9f:d6:b8:
                    53:d2:a7:a5:25:5a:8d:cc:b8:6f:95:c5:c1:e8:2e:
                    a4:ea:7b:6a:9e:3c:ae:c0:7d:c7:4e:74:a3:27:7c:
                    cc:24:d5:5e:95:92:97:0b:91:08:cf:7e:15:c1:99:
                    fd:d4:8b:f3:59:57:f3:61:49:11:5b:f8:7d:62:30:
                    a5:3e:cf:57:cd:03:1b:4e:13:4e:31:a7:9a:27:52:
                    02:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:92:85:B9:ED:59:A2:F6:85:29:DD:C3:40:6E:84:51:40:E6:B3:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/ed35ae6e-aba2-37d3-969b-13cd5db25d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:2e:b5:d0:52:0e:3f:38:aa:86:93:a4:8d:2c:0d:fb:32:0a:
         37:14:ca:75:62:50:17:cb:f4:32:ba:b4:4b:4b:1e:72:98:37:
         a2:1b:9c:7d:38:be:a8:57:0e:f0:c4:b1:93:23:0c:05:14:b4:
         4d:38:be:e6:ef:9f:df:23:37:14:fd:9b:55:36:bd:55:e3:9e:
         4c:43:29:b8:3b:06:36:c4:bf:db:d9:04:fa:72:1a:34:38:c6:
         6d:89:ae:ab:0b:79:78:ce:2d:a2:0b:66:02:83:14:b6:2d:16:
         17:10:84:01:d9:bc:1a:ba:94:b3:03:c7:05:04:fe:02:df:fb:
         1e:55:ea:a0:34:9e:62:b0:a3:32:25:4a:4e:4e:64:38:9c:3a:
         79:c2:28:6c:43:1d:7a:b9:1b:39:e8:4e:f3:d8:3a:57:5a:0e:
         0a:ed:e4:11:d4:b3:7a:2b:60:21:60:a4:1d:02:52:41:d0:0c:
         aa:26:f3:70:e4:f5:49:44:71:c1:bb:c9:b8:a1:4c:dc:74:a6:
         5a:f3:b5:bd:64:d6:68:a1:61:53:d6:12:dc:51:fe:ac:53:60:
         8f:43:ea:83:da:20:52:58:0d:be:2f:f1:3c:d0:f4:6d:b6:d2:
         ba:60:5e:f2:72:f4:48:25:8d:94:9e:1f:62:b0:e5:dd:5a:71:
         8a:40:f5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:47 2025 by rpki-client