Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ade2f05-5366-357d-a0a0-15f9ecfd38db.roa
File:                     4ade2f05-5366-357d-a0a0-15f9ecfd38db.roa (raw, json)
Hash identifier:          3L0/Gf2f4QtUe4Y0T8Oh5K/Aw6MpFt/uzYH00upxk8A=
Subject key identifier:   D6:96:C3:2F:4A:57:3B:26:AC:81:49:5C:F4:D6:87:BB:45:CF:F3:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AC2E111E47847A2721A812480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ade2f05-5366-357d-a0a0-15f9ecfd38db.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        141.155.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:11:e4:78:47:a2:72:1a:81:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=c936fecf-a355-43b2-b030-d8c55f3b03ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:16:64:b6:27:10:1f:fa:46:09:77:89:f5:9d:
                    18:23:41:68:5d:75:b5:9f:6b:6c:e3:4a:7e:81:5f:
                    2b:6e:78:c2:99:59:d4:00:95:eb:a6:21:fb:36:3e:
                    de:1b:46:92:c3:04:90:cc:b9:c8:34:8f:d1:29:8c:
                    7b:19:d3:6e:4a:13:b3:f7:0a:b1:33:21:ab:d3:dc:
                    11:82:62:89:ec:5f:16:04:a9:77:54:2f:63:47:74:
                    33:bd:ff:26:f7:81:49:60:fd:e7:1a:aa:a1:08:66:
                    52:19:57:c3:04:8b:6d:72:f8:9d:47:84:28:53:46:
                    f2:c4:f6:63:69:1a:37:51:d6:c7:d8:4a:21:9c:6e:
                    7d:1b:14:38:16:a6:ee:d1:5b:da:5e:59:ed:cc:26:
                    51:e1:94:cc:3b:4a:7c:27:0f:c1:b1:aa:8d:13:00:
                    ee:c4:35:4f:2f:05:f2:84:94:da:55:53:c3:62:78:
                    f6:1c:5b:20:3a:f7:3c:59:da:8c:69:2c:6a:ab:13:
                    e7:d1:6c:ab:6e:05:2a:c4:25:d9:7d:a7:29:de:d5:
                    2e:db:a0:24:d9:1b:df:63:82:91:f4:29:80:99:38:
                    b4:90:86:bc:93:90:dc:fe:a9:9d:24:67:56:87:31:
                    cc:61:7c:17:47:23:56:3c:52:da:ab:47:75:68:17:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:96:C3:2F:4A:57:3B:26:AC:81:49:5C:F4:D6:87:BB:45:CF:F3:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4ade2f05-5366-357d-a0a0-15f9ecfd38db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.155.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:53:12:f9:a7:30:1e:f2:40:3d:b8:ed:76:f8:ac:cf:b2:21:
         30:8e:df:44:5f:c8:7b:ef:85:3e:cb:ff:fe:f4:e3:2a:71:06:
         4b:80:8f:1e:70:22:3d:95:5c:1f:74:d1:a1:f5:e2:7c:ee:56:
         e4:67:f2:8f:33:0f:fe:17:7e:b4:b4:91:c3:cd:56:49:21:15:
         e2:20:40:5e:36:07:21:fc:86:ce:4c:7f:00:d4:8c:ac:d6:fe:
         7d:93:0b:76:af:61:82:47:bd:a5:25:33:a5:aa:85:90:5d:3c:
         4c:a0:66:e1:07:96:62:0f:b2:6f:a0:1f:69:bf:8c:e9:77:2c:
         8f:43:a7:7d:c6:6e:96:62:23:6c:67:92:93:6f:9f:9a:d5:b3:
         71:56:c1:03:07:95:5f:86:ff:eb:cb:b4:60:db:3b:8a:21:1e:
         9e:c1:a0:2f:8f:44:55:9b:a5:26:9a:bd:ba:7f:1d:e5:0d:b2:
         a2:9d:ec:32:53:9a:e0:df:62:bc:4f:e7:86:83:57:8e:93:45:
         bf:11:06:ca:db:15:f4:7f:e8:62:52:38:c7:d3:f3:80:16:07:
         f9:af:29:98:4e:f2:4c:f6:87:ed:3e:a5:4a:48:49:01:d2:01:
         5e:23:75:50:81:da:19:a5:fb:ef:d9:00:78:06:87:d3:cf:14:
         47:06:bd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:53 2025 by rpki-client