Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/089b0e00-21fd-333b-ab34-115e31016ef4.roa
File:                     089b0e00-21fd-333b-ab34-115e31016ef4.roa (raw, json)
Hash identifier:          Pg/Js+YB0XxeUNEs1W0q299iiuZ9NqzV6RK9Aoe/7Ls=
Subject key identifier:   C2:0D:08:2B:53:6B:BD:49:D1:DC:66:14:71:62:01:E1:B9:37:79:A5
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A9D30E06F0C085C2B34E56980
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/089b0e00-21fd-333b-ab34-115e31016ef4.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     30103
IP address blocks:        159.124.128.0/23 maxlen: 24
                          159.124.130.0/23 maxlen: 24
                          159.124.132.0/23 maxlen: 24
                          159.124.134.0/23 maxlen: 24
                          159.124.136.0/23 maxlen: 24
                          159.124.138.0/23 maxlen: 24
                          159.124.140.0/23 maxlen: 24
                          159.124.142.0/23 maxlen: 24
                          159.124.144.0/23 maxlen: 24
                          159.124.146.0/23 maxlen: 24
                          159.124.148.0/23 maxlen: 24
                          159.124.150.0/23 maxlen: 24
                          159.124.152.0/23 maxlen: 24
                          159.124.154.0/23 maxlen: 24
                          159.124.156.0/23 maxlen: 24
                          159.124.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e0:6f:0c:08:5c:2b:34:e5:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=1312bdcc-a7f2-4069-8c59-845f32769e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5a:6b:35:02:86:4d:df:84:3a:24:81:5d:f5:
                    6b:ae:6b:d3:76:f9:1b:cf:4a:1c:fe:48:95:99:4b:
                    dc:29:df:5f:7d:cc:94:46:23:a1:72:e1:e3:45:97:
                    d3:4b:49:f8:e6:05:b2:85:bd:ec:ee:6e:be:0a:50:
                    35:2c:d6:61:db:9e:ad:8f:a3:64:16:57:8d:9a:de:
                    c4:1d:18:3c:dc:c7:f1:be:f2:76:6d:a6:80:22:2f:
                    72:72:b6:e3:c0:82:ea:95:98:3e:5f:3c:42:5f:70:
                    cb:ce:bc:54:6e:22:d1:8e:01:7e:11:bd:86:d7:61:
                    86:5c:81:52:a2:43:f8:f8:8f:82:dc:7c:62:8a:6a:
                    b1:96:79:69:40:92:e1:55:57:c8:3f:76:e0:7b:6d:
                    c0:30:e0:0f:d4:0d:ef:e1:e6:05:ba:c5:17:41:a2:
                    34:e5:09:23:69:e5:a2:57:6d:37:a8:fd:ef:39:c9:
                    34:43:d2:67:bd:84:e0:97:c4:a7:9c:de:00:c1:84:
                    cb:4b:04:15:2a:b0:75:6b:19:ce:36:33:5d:73:6a:
                    c5:81:2e:c0:69:03:73:54:b5:8b:64:41:36:8a:b9:
                    a6:cf:51:df:cd:9f:e1:b9:74:51:ef:a7:e7:2a:fd:
                    5f:4c:6b:0e:5c:0e:7a:d0:5c:d1:04:c3:5f:41:34:
                    57:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0D:08:2B:53:6B:BD:49:D1:DC:66:14:71:62:01:E1:B9:37:79:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/089b0e00-21fd-333b-ab34-115e31016ef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.124.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:3e:c2:56:6a:f7:10:45:f8:b9:05:fc:2c:b7:86:e6:11:4e:
         6f:22:8e:41:b3:c0:81:b5:50:91:cf:5b:48:57:b8:be:0f:a2:
         ec:d6:03:84:94:cf:2f:d3:f7:90:7d:c2:45:87:8a:cd:ee:0c:
         7b:04:66:d4:5c:40:01:55:a4:2b:64:6a:83:a9:a2:d5:ec:8f:
         06:7b:2d:0e:91:46:af:3e:53:d2:5f:fe:0b:63:64:3a:f5:4f:
         ba:9a:ef:ec:75:c6:0c:ae:d0:e3:d7:53:49:27:cf:8a:f7:03:
         ba:a1:fe:d8:18:87:78:93:29:da:7d:f8:5a:ad:e6:50:88:e3:
         c4:7d:98:a0:87:b9:b7:01:be:da:28:f9:69:39:d8:6d:ff:81:
         a1:e1:81:26:8b:e1:1e:8c:6d:16:f5:0e:a3:97:74:bb:4b:05:
         2c:e6:8b:82:0f:2d:41:db:cc:7d:33:a2:05:72:3d:45:11:3d:
         cd:da:00:35:76:1a:a0:11:24:e6:0b:71:8d:98:cb:7e:d9:9a:
         a1:8b:58:0f:b5:60:65:70:dd:6c:b1:9d:24:31:f2:55:e7:7e:
         f5:cc:11:24:af:2b:9e:d1:6f:04:54:e2:dd:8d:50:ed:30:9d:
         08:1a:f0:83:5e:a0:db:65:37:79:62:7e:a2:e1:56:07:eb:e3:
         40:f1:4f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:02:56 2025 by rpki-client