Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/a9240f31-54b4-373e-9a62-3ebd7223baae.roa
File:                     a9240f31-54b4-373e-9a62-3ebd7223baae.roa (raw, json)
Hash identifier:          qn1kOQDcrqDJV1D2KVmEytrpEghGd4lLw+QmdND4fFY=
Subject key identifier:   25:DE:2B:D5:2A:9F:49:08:0F:72:CC:4A:58:88:A0:DC:A7:8D:71:A1
Certificate issuer:       /CN=9997fd34-06bd-4758-a8a8-358043eb8cfd
Certificate serial:       010D0C9F4328584AB4EF01EB2FA268AD31E48700
Authority key identifier: 5C:A6:4A:51:2E:14:13:0A:BB:00:66:BC:21:A0:A3:83:B7:FC:EA:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/a9240f31-54b4-373e-9a62-3ebd7223baae.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     54606
IP address blocks:        132.212.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ef:01:eb:2f:a2:68:ad:31:e4:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9997fd34-06bd-4758-a8a8-358043eb8cfd
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=6a920288-dfd2-4e26-b565-a654570a1274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7d:ff:4f:7f:ee:dc:56:90:70:88:bd:57:61:
                    7b:67:5a:72:d3:0d:ce:05:6f:e9:ae:78:d9:36:14:
                    05:e8:40:98:25:50:df:4d:83:63:8a:ab:19:70:d8:
                    4b:d6:8c:76:25:13:e9:8c:e8:4d:d2:c3:d1:45:d6:
                    46:10:e9:a6:e2:ab:15:8a:6b:33:b1:63:ca:1c:9a:
                    17:d9:8b:70:23:45:d0:03:48:90:ab:d1:9f:be:dc:
                    b5:af:bb:91:a8:6b:b1:eb:2e:a4:fb:d0:39:bf:45:
                    71:48:47:e2:e6:71:f2:ee:4c:c4:50:80:c7:fe:13:
                    06:ed:6a:d2:d5:77:f5:83:9a:57:30:ec:91:2c:a3:
                    1f:b2:9e:af:fb:fd:2f:9f:7a:a8:fc:e2:f0:da:20:
                    02:16:be:d9:d1:f3:3f:7f:80:e6:c7:41:6c:e0:6d:
                    48:0a:f8:57:16:2a:cb:3f:1f:d7:92:5e:a3:64:e5:
                    eb:53:68:6d:d3:75:6a:24:6b:be:a4:b0:51:f8:bc:
                    75:13:ee:c6:0b:59:f8:41:25:69:e7:24:c2:0b:f5:
                    a9:8c:3d:cf:eb:7f:35:98:f3:d2:7d:1a:80:a3:db:
                    33:a3:87:09:e4:33:6d:a7:e9:17:63:ff:24:2c:c2:
                    59:9c:04:de:91:ed:4a:32:d7:26:bb:38:a8:b9:b8:
                    be:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DE:2B:D5:2A:9F:49:08:0F:72:CC:4A:58:88:A0:DC:A7:8D:71:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/a9240f31-54b4-373e-9a62-3ebd7223baae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.crl

            X509v3 Authority Key Identifier:
                keyid:5C:A6:4A:51:2E:14:13:0A:BB:00:66:BC:21:A0:A3:83:B7:FC:EA:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a7:63:76:fa:9a:27:0c:56:2a:65:12:2e:d4:a1:a0:96:55:
         0f:9d:5c:92:33:b0:7e:d3:3e:0c:f7:96:9e:bb:4c:29:af:18:
         d0:98:06:e0:8a:1a:50:81:24:a3:fe:54:9e:4c:a6:24:0c:4f:
         d4:b9:dd:a5:c8:a6:5b:d6:30:a0:55:2a:57:81:21:ff:3c:bb:
         95:c5:8e:51:f3:fb:41:74:22:12:75:d7:99:80:d6:e2:c6:f8:
         94:e1:11:80:1f:b8:34:bc:47:ad:fe:13:7f:f4:13:a5:46:5c:
         08:6a:02:51:d0:c4:7f:75:34:15:94:81:db:43:7e:d4:cd:65:
         b7:e1:3c:fb:90:4e:d6:5f:d7:ef:dc:86:6f:1d:0f:f0:76:c2:
         76:ac:00:a3:7e:69:7e:eb:0c:c0:4c:ce:be:56:b1:18:a9:9d:
         d4:02:00:52:6d:f9:ad:b2:58:41:72:e7:ec:6a:02:c3:68:cb:
         5d:d8:9b:dc:dd:de:77:bb:ed:82:7d:57:f7:7c:15:10:e0:5a:
         e3:f2:16:63:d8:04:ab:e4:bd:b3:b7:78:3b:cd:2f:f4:f0:57:
         c1:43:74:10:f8:7b:df:fe:f2:64:67:e3:68:0f:f2:ba:1e:38:
         23:b3:9d:d5:1b:ff:4d:50:b6:e7:b1:a0:c9:71:2c:33:08:86:
         b3:67:e1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:32:09 2025 by rpki-client