Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/950373ec-0593-386e-8602-37c09d8513c1.roa
File:                     950373ec-0593-386e-8602-37c09d8513c1.roa (raw, json)
Hash identifier:          Y2eqYiNaino6Qd3j3Y7PqjnHD3GWnmzb/qXrLB6vAEY=
Subject key identifier:   AB:BE:9F:88:BD:5F:47:68:5D:98:E6:F8:BD:D1:7A:A1:63:EB:DF:D9
Certificate issuer:       /CN=f4f85718-cda0-442f-9727-709a536e1e27
Certificate serial:       010D0C9F4328584AADF0FDF5D47D1684495983E0
Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/950373ec-0593-386e-8602-37c09d8513c1.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     6639
IP address blocks:        162.211.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:fd:f5:d4:7d:16:84:49:59:83:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=0f24197d-6fe5-4573-be2d-bd8b7a3c164a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fb:82:b4:d2:45:c7:90:b5:ef:b8:78:96:00:
                    b9:a5:4b:4c:ad:ae:30:25:5c:de:07:85:28:45:10:
                    65:3b:73:81:bc:22:43:91:e5:6e:b7:f1:19:bb:c3:
                    06:6b:25:96:5f:a6:2c:c2:11:05:82:23:3b:cd:87:
                    e7:0e:45:4a:b2:f7:7b:70:0e:90:10:9b:80:8b:e9:
                    3e:cc:f8:2e:90:70:50:f3:e1:50:af:4f:01:c6:4d:
                    f7:ef:61:f0:36:f6:f6:19:24:41:ba:d1:92:f0:ba:
                    a9:78:ca:da:4a:05:ac:82:36:48:c9:18:35:fb:f3:
                    ac:c8:4e:3b:d7:d4:28:00:9d:e6:e4:c4:61:e5:ee:
                    7a:4e:d1:e5:c2:76:36:f0:ac:e2:8f:b4:40:7b:22:
                    f0:cc:3b:a2:20:d8:f6:67:64:a6:98:00:dd:f9:d8:
                    83:5b:e2:af:61:98:9b:17:17:d8:6b:ec:d8:cf:68:
                    2f:a8:5e:e2:b4:07:d9:7b:1f:8d:4f:2a:59:2e:45:
                    2f:1d:b7:e6:12:bb:a4:86:53:0c:80:bf:eb:c0:6b:
                    1c:25:b1:73:7e:5a:ae:cd:1e:9a:ac:14:c0:25:d8:
                    8c:09:d8:14:22:19:28:44:c3:60:0e:04:d4:a1:44:
                    0b:5c:9b:62:33:bd:e2:dd:42:31:27:98:3b:d1:25:
                    99:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BE:9F:88:BD:5F:47:68:5D:98:E6:F8:BD:D1:7A:A1:63:EB:DF:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/950373ec-0593-386e-8602-37c09d8513c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl

            X509v3 Authority Key Identifier:
                keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:34:99:fa:d3:86:8b:60:27:9f:3e:62:bc:92:b2:c3:9c:e9:
         f1:63:90:65:74:21:ef:f7:bd:8b:cd:38:20:2c:df:92:75:54:
         72:65:81:e3:9f:3e:e5:31:be:85:93:97:ff:52:e4:22:e0:70:
         80:03:40:03:6a:01:ad:a9:24:01:79:fe:5c:99:60:9d:1d:61:
         2d:27:63:4f:5c:85:c4:f4:33:3d:d5:fa:6b:6a:42:b1:ba:02:
         58:a9:46:9f:72:cc:fa:39:6e:3a:2e:d6:b9:23:3c:44:ff:bf:
         20:2e:2d:6f:d1:44:42:e2:e0:5e:3b:1e:b1:6e:28:cc:53:06:
         1d:9c:cd:53:8e:12:f2:a4:00:88:82:b9:5f:f5:ad:e4:cd:54:
         1b:26:e6:ff:9c:e6:0f:9e:5e:a3:b6:fc:e4:86:52:33:0f:f7:
         00:f2:eb:94:4c:7e:97:f4:73:6a:9a:91:c8:fa:a5:88:18:aa:
         ed:d7:3f:fa:c1:0f:ee:af:15:d0:e7:8b:fa:5f:65:5b:68:77:
         c5:2d:d7:0c:5f:fd:9a:b4:8e:6f:6b:66:35:b7:9b:96:c9:71:
         65:11:da:22:7f:f6:c9:e4:42:f0:80:9a:5c:16:ef:80:7c:b2:
         48:74:e6:e6:88:c7:68:04:b9:64:5e:70:79:68:18:83:70:3e:
         f0:69:b7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:41 2025 by rpki-client