Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/c1cc6f6b-bf4c-3f76-8b4d-aef14a0b50eb.roa
File:                     c1cc6f6b-bf4c-3f76-8b4d-aef14a0b50eb.roa (raw, json)
Hash identifier:          O3prjD6Zdz4vy3PCN3zfuWZvqBtGJ7B4kJge2hrTxhc=
Subject key identifier:   4F:D1:03:45:56:47:44:31:A7:B9:A4:5D:C4:6A:22:1B:75:CE:6B:31
Certificate issuer:       /CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9
Certificate serial:       010D0C9F4328584A8B0B537F979205314981B060
Authority key identifier: 8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/c1cc6f6b-bf4c-3f76-8b4d-aef14a0b50eb.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     8849
IP address blocks:        162.247.152.0/24 maxlen: 24
                          162.247.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:53:7f:97:92:05:31:49:81:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=e465819d-000f-42aa-a750-468578743a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5e:d5:af:af:59:ea:38:b0:46:59:af:ee:b6:
                    00:9b:29:61:b2:03:df:19:4e:3c:ac:4b:8d:da:21:
                    17:27:2c:8e:e6:3c:ad:8e:5c:72:e1:44:0b:8f:1d:
                    e1:1a:04:91:a7:2b:28:43:0b:96:64:a1:d1:ff:2e:
                    f3:54:82:9f:58:08:46:91:bb:83:bf:f8:c4:18:a9:
                    de:39:ba:c4:4f:7c:67:76:7a:d0:25:85:e9:62:1c:
                    d0:85:a7:50:63:c5:30:bb:88:00:80:0d:bd:d7:3e:
                    98:0c:a2:f8:f3:2f:ed:a1:dd:a1:96:3f:8f:75:11:
                    a3:d3:80:65:63:62:a2:1f:e4:58:35:bc:2c:81:ce:
                    a7:0d:5c:29:a5:8c:de:ca:b2:59:f4:67:7f:4f:a3:
                    e7:34:32:78:9d:a8:b6:cd:b3:2a:ae:17:3b:3a:92:
                    85:84:f9:60:e9:52:23:b8:bc:c2:7b:ba:cf:b4:cb:
                    c5:19:1a:24:ca:b3:de:8c:13:63:08:97:e9:28:cc:
                    73:df:80:6f:a5:dc:85:2e:e7:3f:08:bd:7b:8b:62:
                    0e:31:92:2f:36:26:b1:54:9b:e4:b5:24:61:8c:db:
                    9c:98:a1:a6:35:85:0d:e0:81:87:65:68:52:6b:46:
                    72:1c:6c:ca:de:cd:5d:e2:08:5c:07:b3:2f:9a:7b:
                    6a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D1:03:45:56:47:44:31:A7:B9:A4:5D:C4:6A:22:1B:75:CE:6B:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/c1cc6f6b-bf4c-3f76-8b4d-aef14a0b50eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl

            X509v3 Authority Key Identifier:
                keyid:8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.152.0/24
                  162.247.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a6:38:6c:3e:ae:2e:8d:bf:63:1a:c6:9f:57:01:f6:e1:d9:
         8a:cb:6d:74:83:3a:f0:65:59:f3:d7:b7:af:c1:a3:50:9c:5b:
         fc:2d:79:a8:92:2f:f1:6e:b4:6f:2d:92:16:a4:3a:10:46:6d:
         53:13:64:36:f2:58:91:0c:35:98:d5:c1:5a:3e:1b:2d:97:b4:
         c9:ad:cf:ac:90:02:e4:26:f2:9a:13:0a:6f:a1:70:ff:f1:ad:
         cf:fd:b3:71:6e:e7:fd:a6:30:06:ef:c5:7f:cd:6a:64:f4:70:
         df:a4:97:7c:b7:81:56:08:01:a8:29:6e:6b:be:69:a3:44:07:
         f2:37:b0:61:87:78:80:32:3b:0f:b7:84:04:c5:4b:fe:14:a0:
         67:d1:b7:07:a9:92:cb:07:29:9e:67:2d:62:75:0f:2e:0a:a1:
         37:f5:4c:e6:b8:57:20:7a:ea:21:a1:86:54:62:3e:de:da:15:
         4b:99:b0:10:37:96:73:c0:23:39:93:07:83:55:bd:88:94:3f:
         05:ce:94:71:ce:0e:40:f4:21:e2:14:98:13:28:34:bd:b1:17:
         31:7a:fa:3a:7c:26:f7:1e:58:2d:bb:fd:bf:ef:c3:2d:68:31:
         74:61:bd:15:15:59:0f:c0:6f:86:e4:19:79:3a:ad:57:3c:25:
         8d:1d:f6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:19:55 2025 by rpki-client