Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0c3d3105-0d57-3b5d-89ea-ab13b831fc8e.roa
File:                     0c3d3105-0d57-3b5d-89ea-ab13b831fc8e.roa (raw, json)
Hash identifier:          M97RbJkMFYCliMEpdsKHJRk6RBhYQN+4F0A1r0o2VF8=
Subject key identifier:   B3:62:53:3B:A1:3F:36:33:A5:AA:7F:93:01:5D:0B:D6:F5:A0:7D:10
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A9E6530E748B5205BC61F2800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0c3d3105-0d57-3b5d-89ea-ab13b831fc8e.roa
Signing time:             Wed 23 Jul 2025 23:22:22 +0000
ROA not before:           Wed 23 Jul 2025 23:22:22 +0000
ROA not after:            Tue 21 Oct 2025 23:22:22 +0000
asID:                     7385
IP address blocks:        144.225.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:65:30:e7:48:b5:20:5b:c6:1f:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 23 23:22:22 2025 GMT
            Not After : Oct 21 23:22:22 2025 GMT
        Subject: CN=9c68e6ca-1912-43e1-ac61-eac420aa1f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:51:55:b8:23:32:9c:42:ca:b4:96:86:bb:71:
                    2c:40:bc:26:a7:ee:df:b1:73:cb:ec:e0:05:cd:01:
                    5c:34:0e:94:27:38:fe:bd:88:45:cb:a6:7f:05:86:
                    48:66:b2:8d:b4:dc:fc:b8:93:f6:a9:5a:1e:cb:ac:
                    77:1e:d1:b9:04:8d:20:03:26:5a:5b:15:36:a6:2c:
                    a0:e1:6d:a8:d1:58:a3:1f:f2:e4:52:1b:cb:4f:cd:
                    d1:9c:1f:5b:fd:3d:21:3a:f5:3c:fe:12:e0:cf:da:
                    af:74:d5:66:d4:1f:93:d3:d1:c6:bc:70:36:1c:d9:
                    d6:0c:da:50:b3:40:6b:bd:3a:b6:86:57:ac:71:1f:
                    17:d4:1a:5e:d9:79:72:75:35:69:6a:55:03:14:bd:
                    d2:19:5a:f3:10:24:79:7b:66:0b:97:6d:3f:af:44:
                    31:2f:3d:e3:70:95:88:49:62:a8:dd:d5:79:02:96:
                    81:a4:4d:1b:44:a7:b7:d0:55:e7:22:90:fc:a9:5c:
                    b9:b3:06:d6:ba:b9:ac:cc:d8:7a:50:a8:ac:e6:a1:
                    7b:6d:bf:b2:a5:d4:7c:f0:87:37:71:04:3a:df:ed:
                    57:1b:52:8d:c7:39:16:16:78:f7:e3:5d:45:cf:cb:
                    7e:62:09:14:8a:7b:ee:5c:a7:25:9d:da:94:3b:f3:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:62:53:3B:A1:3F:36:33:A5:AA:7F:93:01:5D:0B:D6:F5:A0:7D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0c3d3105-0d57-3b5d-89ea-ab13b831fc8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:42:2d:45:7b:79:34:94:09:08:30:a0:04:e8:28:a5:77:8f:
         d2:2c:05:c9:12:e3:5a:7f:7f:3f:88:69:b6:70:d8:33:2a:ce:
         e1:10:50:f4:af:ff:59:03:b4:d9:17:22:be:40:e9:58:26:54:
         55:6a:ca:59:7d:d3:01:ba:4e:33:1e:39:91:2d:1a:d0:15:e2:
         43:58:40:c0:85:6f:13:15:71:cd:04:aa:9d:3d:b4:77:29:17:
         2b:11:e1:0d:39:82:0d:fa:7a:93:24:a7:d5:dc:d6:02:7e:b9:
         cf:aa:93:37:99:d8:be:c1:82:d5:5c:95:20:6d:8d:5b:a9:44:
         74:72:7d:3b:37:7c:57:42:99:64:6b:28:d4:a3:e0:a0:c8:81:
         8e:63:54:31:9b:57:b1:78:b4:9d:3a:01:7b:95:be:9d:37:27:
         1d:aa:9b:be:4f:26:18:05:46:7a:a3:bb:55:19:be:fa:f4:41:
         38:31:f2:69:bb:1f:05:cc:ea:fd:f6:66:ff:a5:6e:8c:e3:2f:
         83:05:87:9e:c9:62:85:d9:3f:89:b5:86:4a:67:d1:11:e8:9d:
         f0:27:d6:4e:8f:28:af:e0:34:9a:e0:ad:5c:01:b8:8c:cf:e6:
         b0:48:f9:51:75:fa:c0:be:a9:f6:74:40:8f:c2:73:f6:6d:40:
         8b:47:8f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 13:06:19 2025 by rpki-client