Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/61582145-b409-3cec-8751-f70565873ef3.roa
File:                     61582145-b409-3cec-8751-f70565873ef3.roa (raw, json)
Hash identifier:          GTUdnTOOrdxLwIaHKzW8RMuxh78gCIsUv9XBKklisWk=
Subject key identifier:   30:87:65:FC:50:1E:A4:8E:02:B4:EA:8E:BC:71:56:80:38:1B:F5:40
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584ABF5CA99FD8A3A3ECC3AF8F80
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/61582145-b409-3cec-8751-f70565873ef3.roa
Signing time:             Mon 04 Aug 2025 18:46:52 +0000
ROA not before:           Mon 04 Aug 2025 18:46:52 +0000
ROA not after:            Sun 02 Nov 2025 19:46:52 +0000
asID:                     46558
IP address blocks:        130.35.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bf:5c:a9:9f:d8:a3:a3:ec:c3:af:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Aug  4 18:46:52 2025 GMT
            Not After : Nov  2 19:46:52 2025 GMT
        Subject: CN=aaebeab7-b3e5-494d-a64a-7c87045eea65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:e4:ce:25:1b:8d:23:35:bd:a5:d0:e0:14:
                    75:cb:d9:21:9f:68:5c:0d:06:8c:ac:fb:43:3d:1f:
                    68:12:25:b4:51:ab:9c:77:9b:25:e1:ba:8f:6b:74:
                    9d:d4:73:69:12:95:6f:c8:5d:22:5d:9b:f6:9d:03:
                    19:20:37:05:3e:8e:02:06:ef:7f:6b:ec:ef:c1:e7:
                    81:06:6a:d3:35:c4:7a:b9:8e:a5:8c:2f:a9:a4:48:
                    72:d0:0d:84:c7:a0:00:5e:91:e9:b8:92:65:51:00:
                    52:d5:50:f2:4a:50:93:db:14:22:20:9e:1d:d9:30:
                    3c:85:3b:34:fb:e4:7d:6f:36:6e:a1:97:40:2a:a6:
                    03:c8:ea:aa:90:e4:eb:c7:04:89:e6:58:23:fb:8a:
                    ee:c6:fb:89:e5:d1:5a:4b:43:da:33:5d:a2:c6:85:
                    ac:85:38:cd:63:7c:22:79:49:53:ee:54:8a:a6:8d:
                    0c:a4:33:1d:cd:a0:ce:ab:a6:2b:cb:a4:48:ba:76:
                    9e:85:10:63:fa:3d:95:54:21:c2:78:0f:aa:89:fa:
                    22:68:d9:e9:6e:c0:93:11:59:02:bb:b7:4c:6c:e0:
                    ba:82:cb:aa:bf:18:0c:97:3d:fa:6f:bb:08:62:45:
                    9a:5f:1b:08:7f:8f:29:0b:14:96:54:66:13:7e:ce:
                    17:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:87:65:FC:50:1E:A4:8E:02:B4:EA:8E:BC:71:56:80:38:1B:F5:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/61582145-b409-3cec-8751-f70565873ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:33:b8:e2:5e:44:ae:98:fd:1a:8f:89:67:2a:5c:4d:2f:71:
         18:72:a2:f7:ba:5c:65:a0:aa:d2:52:66:5b:df:01:e3:e7:97:
         43:2e:f2:c6:65:96:df:51:87:a3:4d:58:b0:5b:66:8a:e0:81:
         f2:7b:a5:b2:44:1c:07:98:f3:03:b3:86:62:5b:a2:c6:bd:5a:
         2b:c7:3b:99:89:46:ae:2c:74:94:ca:b3:3c:e6:13:b3:ed:2d:
         07:b9:2c:c6:e7:7c:dd:6d:57:29:1c:5c:12:a5:5a:83:9c:8c:
         8e:6c:29:2a:c3:6a:4c:38:10:01:5b:79:29:80:e3:40:88:d0:
         77:86:48:6e:1a:2c:e6:7d:7c:82:55:3a:40:3c:5e:f2:9d:9b:
         f1:26:b8:f6:91:0a:0d:d5:f8:2b:e1:13:58:52:0f:6e:8a:9d:
         00:58:27:29:df:0d:65:9e:f6:0f:7c:50:56:f7:56:4b:cd:39:
         d9:6c:e9:9d:ec:d8:2f:36:f1:b9:a4:17:53:8c:22:e9:e6:39:
         77:a1:6f:ef:9b:bc:20:54:00:d1:07:84:6a:c7:db:cb:f4:1c:
         d3:97:d3:c0:be:9a:42:03:b9:e9:f7:0a:aa:d1:9a:5c:8d:97:
         59:af:e7:66:a6:4c:62:57:56:b5:a6:c6:c0:49:86:12:a3:f2:
         c2:c4:25:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:55:12 2025 by rpki-client