Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1ed11bba-2055-382e-ae61-183dfc3956d0.roa
File:                     1ed11bba-2055-382e-ae61-183dfc3956d0.roa (raw, json)
Hash identifier:          4WEv1Au5SJfknbmA2CQUm6IT0HQ0Ep6xmnVrdFHp8/I=
Subject key identifier:   04:03:D0:07:18:A6:8F:B9:25:A2:2A:61:E6:CD:9F:07:59:DA:B1:3C
Certificate issuer:       /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
Certificate serial:       010D0C9F4328584B110C01E6B686222E235AA3C0
Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1ed11bba-2055-382e-ae61-183dfc3956d0.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     35860
IP address blocks:        63.133.208.0/22 maxlen: 22
                          74.119.52.0/22 maxlen: 22
                          192.149.254.0/23 maxlen: 23
                          192.149.254.0/24 maxlen: 24
                          192.149.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:01:e6:b6:86:22:2e:23:5a:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=e8d185f2-806f-40ef-8c1b-330c5ba54768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3d:22:30:a1:f7:b6:85:12:7c:2e:26:20:30:
                    dd:e3:68:a9:7b:aa:25:b7:9a:6b:2e:21:4e:47:35:
                    35:2b:08:52:77:77:50:6b:2a:be:b9:56:13:c9:22:
                    1f:a7:34:fb:31:1d:cc:4f:e4:f5:d2:8e:c6:c2:38:
                    95:e6:76:b5:ed:aa:f0:02:6c:e7:c6:61:1e:86:9e:
                    a6:c4:45:ed:5d:ea:d4:c5:5d:e2:64:60:08:8c:e7:
                    0b:58:eb:72:8b:c4:a3:e3:37:4f:da:0a:a8:af:5a:
                    b9:72:78:c2:58:37:a1:fc:bf:ef:2c:3e:b4:58:71:
                    84:8d:21:e4:e5:37:bf:a3:c1:6b:57:e8:b6:5c:3a:
                    c7:16:b2:cb:5d:52:1d:b8:c9:75:8a:0e:1b:df:e4:
                    68:95:d3:6f:74:86:18:9b:73:35:36:8c:a3:1d:d8:
                    51:87:6e:c1:42:97:d2:5c:71:95:18:73:51:49:b1:
                    59:ec:36:2a:81:35:05:52:26:cf:7d:9b:46:71:32:
                    ff:a7:79:81:04:a4:c4:9c:57:fc:47:c4:98:45:07:
                    93:b2:dd:4f:73:74:a8:ce:67:04:ee:bb:9b:db:4b:
                    63:b3:65:8e:6a:7e:2f:ad:49:f5:88:24:3e:2e:88:
                    57:4c:a1:9f:1b:b2:ed:bc:24:31:d9:84:a5:ae:c8:
                    26:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:03:D0:07:18:A6:8F:B9:25:A2:2A:61:E6:CD:9F:07:59:DA:B1:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1ed11bba-2055-382e-ae61-183dfc3956d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.208.0/22
                  74.119.52.0/22
                  192.149.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:04:52:8c:44:eb:55:90:05:bf:56:dc:5a:96:39:82:45:1c:
         04:ce:6e:6b:df:a0:44:66:63:26:5f:51:74:11:1c:fe:4a:b1:
         f1:fa:9a:db:fe:35:75:3b:10:f2:fd:9b:a7:81:31:07:9e:9b:
         4c:b9:b6:96:53:4a:8a:e2:a7:3c:28:46:d5:33:2f:70:f1:d6:
         e3:29:0f:03:22:c1:ee:ae:21:aa:e5:7b:e4:92:e5:30:fb:36:
         24:50:48:ba:e3:70:6c:3b:8a:d9:9e:c7:19:d2:8d:d8:e1:80:
         86:89:d6:ad:1a:b9:9f:ed:a6:76:23:6f:a5:e5:56:92:c6:12:
         c8:00:cf:cd:97:21:91:61:7f:58:5a:5d:f1:ba:c1:59:a9:1f:
         f0:23:4b:20:41:1b:80:58:98:c0:30:ae:1f:71:43:e9:5e:37:
         ef:08:cf:e1:27:a0:d1:c3:9c:de:c1:bb:c9:7c:d1:55:e6:71:
         d3:35:0b:87:80:db:28:8b:29:8c:7b:d9:df:57:ae:a6:c3:e8:
         b3:c9:3a:17:bb:e4:95:15:50:c0:91:07:1c:1d:ea:8f:99:12:
         e4:88:2d:56:ef:93:ff:c6:20:19:ce:1e:a4:62:4e:ef:5f:c5:
         8f:20:09:38:8b:c4:7a:97:e4:6d:84:72:79:a7:35:af:07:06:
         01:85:da:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:28:20 2025 by rpki-client