Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/8479e980-5926-3bca-b615-a9e231509306.roa
File:                     8479e980-5926-3bca-b615-a9e231509306.roa (raw, json)
Hash identifier:          bnHiV0iNrcvZcDC5OS82iZ1AeHYg6bc1/Bgnho3i85w=
Subject key identifier:   92:68:57:DE:5B:CB:FF:A9:C0:7A:0F:31:27:DC:E9:0A:19:07:97:79
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584AB91B818ACD1DF6EF47489680
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/8479e980-5926-3bca-b615-a9e231509306.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     40703
IP address blocks:        157.166.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:81:8a:cd:1d:f6:ef:47:48:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=c05d43bc-b4bc-4dbc-813e-e0568f07dc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:19:27:a5:3a:b0:7f:6b:5f:83:91:23:ee:4a:
                    3d:a2:40:f7:49:1f:f5:f1:f3:dc:f3:cf:2e:e8:f1:
                    98:07:0f:52:71:e1:3a:70:f5:4b:b1:b0:73:e6:87:
                    51:e0:5f:5a:c3:50:6c:9c:6e:73:58:a2:67:4d:6c:
                    f7:02:85:5d:66:54:f6:13:38:c7:8f:09:68:6a:12:
                    e8:eb:c0:d6:b6:04:7a:98:de:00:52:d6:ca:a1:8e:
                    db:29:76:9a:88:d5:1d:2c:f7:40:de:23:c8:b6:13:
                    65:52:d5:2b:1a:87:2d:56:ff:b2:7d:81:46:fc:66:
                    23:24:f6:e1:0b:61:3e:e1:6c:ad:b1:96:6c:03:ba:
                    c2:99:a1:b8:bb:84:b1:70:4d:71:4b:29:a3:7b:49:
                    41:fa:ee:ff:b8:28:c9:07:6d:f3:bf:d2:38:dc:3d:
                    27:75:34:35:4c:fa:32:dd:f5:ff:5c:8e:8b:44:fd:
                    b3:63:32:33:34:6a:bc:cc:3f:35:d9:fc:d8:d0:cc:
                    95:9f:b2:73:b4:2f:1e:f2:37:d7:fd:b9:6f:f9:0c:
                    b4:b7:d2:09:e8:1e:7f:70:72:12:c2:21:93:58:9d:
                    e9:df:d0:3c:38:fc:2a:99:3d:de:ad:9c:f1:dd:ea:
                    69:b0:41:1c:58:30:bf:6d:96:a4:62:30:6e:27:2b:
                    8f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:68:57:DE:5B:CB:FF:A9:C0:7A:0F:31:27:DC:E9:0A:19:07:97:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/8479e980-5926-3bca-b615-a9e231509306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:8f:ff:7a:a4:3e:d1:31:0b:a9:67:bb:9d:d4:a8:46:e1:89:
         dd:2b:4c:6a:02:bf:22:90:45:9f:7f:77:75:06:23:99:4e:6b:
         01:6c:24:75:0e:c4:8f:fb:fb:fb:9c:34:2e:e0:39:58:f1:94:
         e1:89:27:b0:b6:be:dd:3b:fb:b5:e7:27:1c:c6:0a:a7:3d:bb:
         e5:d8:4c:96:2d:d0:26:c4:99:ce:c2:c0:d2:3c:1c:4c:34:42:
         5d:fc:8b:2c:e4:e1:77:5d:38:e9:33:25:60:13:54:21:d1:a4:
         19:f7:7f:3f:6c:9d:ad:c9:71:13:f5:52:c9:2c:30:70:33:e7:
         db:e5:03:fc:ca:03:0f:49:25:47:d1:79:cd:5c:ca:52:87:8d:
         d9:5b:ec:e8:99:cf:6f:04:e5:f0:d7:7a:ac:ee:56:9e:eb:65:
         5c:ab:01:59:79:59:34:8e:1a:8f:0c:cc:d3:69:0b:aa:29:96:
         7b:00:23:fb:c1:42:85:f4:6a:3a:4b:43:d6:0f:d4:9c:97:7d:
         1a:b4:4a:5b:6f:a1:29:e3:45:aa:4f:40:c1:94:85:19:29:db:
         14:e8:ce:58:59:71:8e:ba:96:22:77:b5:5b:f0:c5:77:85:99:
         cc:5f:e7:10:99:60:70:c4:63:20:c6:3b:e9:40:62:79:d3:0a:
         21:fb:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:36:46 2025 by rpki-client