Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/7b22a67b-1fd0-31ab-a89c-2bd76f5577e4.roa
File:                     7b22a67b-1fd0-31ab-a89c-2bd76f5577e4.roa (raw, json)
Hash identifier:          Yj8kBzLHK+PHsrU9UNVfhqFQ14/uZjfE3Bp2lx5I1Go=
Subject key identifier:   9E:A3:83:70:30:1F:63:8B:02:34:68:F2:FD:32:03:98:86:BA:39:2B
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584AA85BAD2BEA9824D26958C360
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/7b22a67b-1fd0-31ab-a89c-2bd76f5577e4.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     13807
IP address blocks:        173.240.80.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:ad:2b:ea:98:24:d2:69:58:c3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=c4fa8f95-8f9a-487f-8634-88401c4d5806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:39:50:95:0d:8f:51:72:d4:87:bb:27:cc:
                    32:0b:e5:af:d5:a5:d3:71:22:a0:8f:0b:25:ca:6c:
                    11:7d:63:bf:2c:81:0d:89:38:6f:19:c9:c2:f2:02:
                    37:9f:f6:38:0e:cb:32:6b:62:5c:51:20:c4:0e:08:
                    a3:0b:de:c8:9c:81:b8:61:0e:85:63:90:e6:f0:ae:
                    3f:82:53:78:bc:a7:18:df:26:37:1e:0e:46:c6:af:
                    33:fc:2c:da:9a:80:5f:b7:ce:24:b0:37:c8:ff:74:
                    d2:8c:13:3e:22:b5:51:e1:99:c6:dc:6b:e1:3a:b4:
                    a7:c9:1e:64:93:1a:eb:d2:cc:47:fa:72:53:22:d6:
                    a1:db:88:13:ab:f8:31:0e:a8:7d:a1:20:0c:20:be:
                    93:c6:55:11:60:fc:54:59:11:d0:da:75:1d:07:5e:
                    7a:32:a3:57:c7:c9:b5:f8:02:e1:6c:e1:a2:a1:68:
                    f6:41:72:6b:9f:63:ec:20:8f:0a:30:8e:17:29:32:
                    01:e0:7d:7e:20:b1:af:3f:f5:39:9c:bc:52:b7:99:
                    66:79:f6:cd:e5:6a:0c:2b:38:58:36:a8:80:06:40:
                    62:a6:33:ff:26:d8:a3:d4:b8:97:ab:9e:38:ad:52:
                    f6:ce:67:1f:e5:26:09:e6:35:ed:ea:26:a4:ef:5f:
                    04:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A3:83:70:30:1F:63:8B:02:34:68:F2:FD:32:03:98:86:BA:39:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/7b22a67b-1fd0-31ab-a89c-2bd76f5577e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.240.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:56:2b:5d:78:64:cb:20:1e:07:17:a5:6b:2e:47:22:fa:40:
         9b:8b:88:bb:71:24:b2:8e:58:03:ff:e9:eb:be:e1:58:e4:b2:
         01:b9:1f:13:11:48:ab:c5:ea:be:1f:c3:bc:c8:a4:c7:74:39:
         f1:b0:00:41:e0:de:e8:e0:d4:f7:8f:9a:b3:6e:78:a6:ca:92:
         3a:a3:f6:ca:e1:fd:c7:bc:f0:4f:1a:f0:4a:16:08:b6:1c:ba:
         bc:a1:f1:5e:2d:2a:1d:d1:2d:31:1a:d8:5a:52:e8:d4:f8:4b:
         fa:0a:cc:37:09:b7:38:3c:53:52:4a:c5:30:8b:60:de:de:08:
         54:b9:52:fb:f8:96:61:5e:cc:15:bc:59:84:8f:5f:e9:61:bb:
         85:06:af:e4:18:44:1a:76:e9:c2:d3:95:ba:78:ce:aa:ce:fb:
         ad:4e:0b:8f:a5:a5:76:bc:34:7f:10:eb:20:16:e3:bb:ce:bc:
         51:9b:a8:ec:12:66:e4:60:1b:ca:23:5a:ec:8c:c4:83:e0:d2:
         98:52:89:5f:a8:60:df:28:e7:fa:49:a8:42:47:8c:e4:4c:7d:
         79:14:d1:c7:5b:7b:3f:9a:94:5a:8b:c6:9a:32:a2:7b:1a:34:
         b7:52:d7:b5:d6:6e:dd:7a:f2:75:0a:a5:fc:0d:dc:26:2c:d9:
         68:91:94:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:08:35 2025 by rpki-client