Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/85a54aff-5d43-3350-b694-903671b40801.roa
File:                     85a54aff-5d43-3350-b694-903671b40801.roa (raw, json)
Hash identifier:          Epei7R9cg0Rt07Q2slAal3SNeDG3hL6YiLPalXG2Sf8=
Subject key identifier:   3F:64:C1:64:8A:76:46:2E:96:1D:9E:2E:70:37:17:D2:3A:33:C8:58
Certificate issuer:       /CN=111c4633-f730-480a-8516-3382e9a5eda3
Certificate serial:       010D0C9F4328584A34801A13A66A6427509E9B80
Authority key identifier: 4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/85a54aff-5d43-3350-b694-903671b40801.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     13538
IP address blocks:        198.32.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:1a:13:a6:6a:64:27:50:9e:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111c4633-f730-480a-8516-3382e9a5eda3
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=9b0757a3-5b5c-4fa6-ba14-a475a64be614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:ba:33:a7:db:be:05:ba:89:af:8d:68:a6:
                    89:7a:ff:06:a7:00:3c:e0:04:a4:64:c3:3a:99:b3:
                    19:85:de:bb:bd:3a:f7:c1:c3:82:d0:2b:36:18:b6:
                    da:30:bf:b1:b6:f6:12:54:58:9e:b2:c7:23:ee:9d:
                    bd:09:ad:cc:6d:c7:c4:90:fe:58:90:fd:be:fc:87:
                    5e:3c:29:d4:b4:80:8a:42:85:b7:c3:13:00:7c:bd:
                    00:6c:67:01:1c:ac:94:59:80:ab:0c:da:6d:c3:71:
                    7d:a9:60:39:b9:1e:91:a4:2a:e6:34:4c:2e:c4:7f:
                    1e:3e:99:c3:98:86:aa:bf:5f:54:20:87:d8:f6:37:
                    50:c1:9d:d4:87:cc:a7:2d:9a:15:c7:70:95:ee:04:
                    8e:13:f6:4f:b2:f2:3b:ef:7d:01:44:02:e2:f4:b2:
                    e9:b3:d7:71:ad:e0:68:da:07:3e:0d:57:73:28:68:
                    31:f9:1d:51:e2:28:84:55:cf:37:fd:2d:df:95:8c:
                    87:20:47:27:b7:62:d4:fe:4a:2f:d7:08:b0:97:3e:
                    48:ea:e7:16:a4:15:93:eb:d5:65:9c:a7:9e:0e:50:
                    f1:65:a0:07:f5:67:aa:65:be:8c:a3:7b:ea:37:97:
                    57:fb:a9:db:50:2a:20:f8:65:1f:bc:5d:78:5c:c6:
                    1b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:64:C1:64:8A:76:46:2E:96:1D:9E:2E:70:37:17:D2:3A:33:C8:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/85a54aff-5d43-3350-b694-903671b40801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3/111c4633-f730-480a-8516-3382e9a5eda3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:ED:C7:C0:B0:EB:0A:39:CC:65:17:32:30:C8:B6:53:88:23:6C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/111c4633-f730-480a-8516-3382e9a5eda3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.32.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:1e:5b:0f:42:6d:43:6c:e6:d3:cf:b8:f0:37:9c:a9:d1:7c:
         50:6f:72:1a:06:45:0b:a8:e2:00:e1:9b:38:0d:d8:9e:ae:84:
         8e:13:a6:72:b9:0f:c8:75:2c:68:f6:5f:c2:b1:15:b5:79:63:
         1f:70:3a:7d:27:9b:f1:6c:5c:95:44:04:75:fb:f7:cd:3b:1d:
         0d:2f:c8:65:a6:3b:da:85:42:44:fd:57:70:57:0d:f9:63:1d:
         1f:47:b5:46:00:cf:20:7b:21:65:06:e4:0b:00:07:a4:a5:e5:
         a2:02:38:f3:99:82:b6:83:6f:9a:5e:51:c1:d1:8d:76:73:93:
         c7:3d:5a:5a:3b:b0:3c:2c:ac:20:a7:ed:60:dd:99:35:b7:2e:
         10:30:6a:bb:aa:16:92:48:66:85:20:4a:e2:76:5f:81:af:e1:
         ae:6e:7c:c5:37:90:ea:52:5b:c1:9c:3b:4a:37:04:46:79:7c:
         77:96:bf:23:62:bc:93:75:03:dc:2a:16:af:e9:51:36:28:ca:
         dd:1a:55:61:7b:b9:22:89:43:2f:2c:82:f2:aa:64:1f:d9:0c:
         89:97:94:77:4f:69:b1:f3:88:e6:5f:ec:52:6d:60:f3:01:91:
         ed:48:9c:8c:06:b9:9e:f2:e5:b0:a0:bb:91:60:04:89:ec:87:
         9e:87:34:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:25:34 2025 by rpki-client