Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/4f5ebe88-46ac-3a57-8035-953f0f8e7eb4.roa
File:                     4f5ebe88-46ac-3a57-8035-953f0f8e7eb4.roa (raw, json)
Hash identifier:          CLMbHeN6KOC2uzREwN89WDW32uhZsWEyzoueQqvM6Iw=
Subject key identifier:   E2:FC:B2:40:CC:6C:3C:1B:ED:B4:43:E9:E0:E7:7C:E2:C7:62:9C:99
Certificate issuer:       /CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Certificate serial:       010D0C9F4328584B2FC18E040CFD689BF15B4880
Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/4f5ebe88-46ac-3a57-8035-953f0f8e7eb4.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     21777
IP address blocks:        199.45.236.0/22 maxlen: 22
                          199.127.200.0/22 maxlen: 22
                          204.144.128.0/22 maxlen: 22
                          204.144.132.0/23 maxlen: 23
                          204.144.134.0/24 maxlen: 24
                          204.144.140.0/23 maxlen: 23
                          204.144.180.0/22 maxlen: 22
                          204.144.184.0/24 maxlen: 24
                          206.168.13.0/24 maxlen: 24
                          206.168.39.0/24 maxlen: 24
                          206.168.96.0/24 maxlen: 24
                          206.168.187.0/24 maxlen: 24
                          206.168.188.0/24 maxlen: 24
                          206.168.216.0/22 maxlen: 22
                          206.168.220.0/24 maxlen: 24
                          206.168.222.0/23 maxlen: 23
                          206.168.224.0/21 maxlen: 21
                          207.174.21.0/24 maxlen: 24
                          207.174.72.0/23 maxlen: 23
                          207.174.76.0/24 maxlen: 24
                          207.174.113.0/24 maxlen: 24
                          207.174.117.0/24 maxlen: 24
                          207.174.130.0/24 maxlen: 24
                          207.174.137.0/24 maxlen: 24
                          207.174.138.0/23 maxlen: 23
                          207.174.140.0/22 maxlen: 22
                          207.174.157.0/24 maxlen: 24
                          207.174.175.0/24 maxlen: 24
                          207.174.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:8e:04:0c:fd:68:9b:f1:5b:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=e2401f55-b58a-4e46-bbd1-95883a6cda9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:27:5e:10:90:30:93:4b:87:a0:d4:12:39:57:
                    9c:4a:e1:b5:67:83:c2:b2:07:89:59:2b:8b:d7:3f:
                    16:e2:a9:40:5a:f4:7c:53:3b:7b:20:1a:4b:ae:7f:
                    17:9d:01:fe:96:99:64:dc:2f:e9:b9:9e:26:9b:74:
                    63:8c:5c:c1:07:ae:31:2d:dc:d5:de:43:0c:46:47:
                    f8:90:bd:1d:cb:27:ba:43:e9:88:80:d9:d4:0a:d7:
                    66:36:d8:80:a8:c2:83:41:9d:f2:e8:93:33:99:53:
                    f9:bc:20:26:66:e9:8d:f6:d3:59:0d:88:05:80:3f:
                    29:cd:33:73:62:e6:02:38:24:b4:11:7a:45:18:5d:
                    22:6a:e5:05:5a:b7:71:f5:83:63:ad:ef:b7:eb:4f:
                    f6:f9:67:ff:83:31:cf:52:94:15:c2:03:10:0c:af:
                    18:e0:4f:c4:e3:07:44:c6:fa:a4:45:1d:5d:34:cd:
                    66:73:dd:71:09:a4:7f:4e:84:8d:eb:1f:6d:de:00:
                    b0:05:40:67:11:85:8e:1c:f6:ca:fa:fc:f3:30:3f:
                    5e:d9:1a:d3:d8:ff:5f:97:4e:bb:65:58:30:9c:ac:
                    b9:0e:a4:98:d7:04:01:9f:ae:05:94:35:ba:02:34:
                    9b:6f:9e:4c:ba:ee:a1:d8:cc:a1:4c:07:e3:76:4d:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FC:B2:40:CC:6C:3C:1B:ED:B4:43:E9:E0:E7:7C:E2:C7:62:9C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/4f5ebe88-46ac-3a57-8035-953f0f8e7eb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl

            X509v3 Authority Key Identifier:
                keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.236.0/22
                  199.127.200.0/22
                  204.144.128.0-204.144.134.255
                  204.144.140.0/23
                  204.144.180.0-204.144.184.255
                  206.168.13.0/24
                  206.168.39.0/24
                  206.168.96.0/24
                  206.168.187.0-206.168.188.255
                  206.168.216.0-206.168.220.255
                  206.168.222.0-206.168.231.255
                  207.174.21.0/24
                  207.174.72.0/23
                  207.174.76.0/24
                  207.174.113.0/24
                  207.174.117.0/24
                  207.174.130.0/24
                  207.174.137.0-207.174.143.255
                  207.174.157.0/24
                  207.174.175.0/24
                  207.174.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:0c:32:d6:c5:80:19:3f:ac:c9:cc:c4:50:71:fc:3f:e3:
         90:a9:30:ee:43:2c:41:b0:6f:fc:4b:02:96:19:64:0f:14:7e:
         f4:f6:25:09:5b:5c:08:87:a4:9e:8f:ab:b5:b1:4e:45:a2:fe:
         57:34:cb:d7:53:57:fc:96:ed:35:9d:d8:25:60:38:ae:47:88:
         da:56:07:0a:1c:43:c9:fd:93:b6:35:5d:ef:4b:0c:6a:53:55:
         34:26:ce:9a:bd:ee:8c:5d:b5:66:ee:74:fb:98:9d:a0:29:da:
         6a:80:83:0f:3e:b8:e7:1d:ff:02:0e:da:65:83:06:bf:c8:3c:
         e8:d4:3b:c4:3f:9d:57:4e:68:63:47:04:05:95:11:1d:4f:1f:
         29:e3:77:e3:fc:fd:23:77:7b:45:8d:3b:29:60:22:44:89:ed:
         7f:0f:d1:18:58:7e:59:a4:77:24:84:89:1a:5a:14:ab:c2:35:
         3b:75:0d:55:e7:f1:fe:0e:79:9c:2b:2d:47:1b:b5:21:42:f7:
         35:04:98:bb:e2:c1:8a:28:a2:d1:78:35:57:b0:e8:64:dc:9a:
         1a:99:33:6b:cd:9f:23:68:ad:7d:d1:5a:ef:c1:84:d3:7c:f3:
         a7:d4:d0:a4:d1:b2:d3:f6:a5:98:db:22:19:7c:c5:2c:84:f5:
         61:22:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:34:10 2025 by rpki-client