Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2054c310-0e3b-3368-b12e-ea712380783a.roa
File:                     2054c310-0e3b-3368-b12e-ea712380783a.roa (raw, json)
Hash identifier:          3giVx/Xz94S/XOJfEO06zL9lvzXx/neVvDI7kxBBZfg=
Subject key identifier:   54:A8:73:4A:81:84:B3:04:B5:A8:B1:31:F9:61:2E:E5:E4:9F:39:09
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A8B0B62CE7576BA3FA664C440
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2054c310-0e3b-3368-b12e-ea712380783a.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     9009
IP address blocks:        162.246.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:62:ce:75:76:ba:3f:a6:64:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=55ab98c9-b63d-4a43-8b96-60ab0cb8d827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:8c:2a:c6:b1:10:ac:93:02:4d:04:07:dc:
                    79:8c:50:bb:93:50:a8:21:29:8b:e9:e8:37:db:53:
                    6b:b7:41:01:66:e5:0b:de:e8:02:98:96:f5:0e:5e:
                    7c:c7:b6:b2:ed:90:7c:ca:de:6d:d9:ab:88:9a:42:
                    e9:20:75:9f:d1:ab:c4:21:b3:75:99:d0:10:41:20:
                    b7:36:ed:cb:ad:54:7b:54:24:3e:6d:98:5d:62:7a:
                    f6:a8:29:6e:db:5f:ec:ae:ef:5d:fb:78:01:e2:67:
                    ea:e6:54:a2:d8:71:4e:ea:46:f7:70:1c:71:9e:51:
                    a8:b0:f8:02:b0:74:61:03:cd:21:59:46:80:b8:fb:
                    86:3a:97:ee:db:9d:47:bd:e2:ff:84:ca:c5:c6:0e:
                    30:01:be:89:b2:06:67:df:e0:93:de:1c:3f:55:1b:
                    7f:b9:d8:67:74:c5:5f:7b:57:2b:ee:80:9b:06:bf:
                    16:84:80:61:52:9e:27:fa:fa:fe:8b:f6:a0:0d:d7:
                    4f:b9:61:cd:1c:3b:da:b9:76:cd:fc:fe:89:19:73:
                    51:fc:4e:f5:13:d3:9c:5c:9d:71:00:8a:b1:62:96:
                    53:f0:49:de:d0:77:63:3e:55:31:f8:1c:c4:9d:26:
                    8c:8a:39:55:a5:bb:6c:9b:69:31:0c:bf:1e:2f:b2:
                    90:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A8:73:4A:81:84:B3:04:B5:A8:B1:31:F9:61:2E:E5:E4:9F:39:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2054c310-0e3b-3368-b12e-ea712380783a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b5:7d:3e:da:60:0e:b8:a2:90:71:07:5f:76:8e:4f:f6:ff:
         e2:ab:5f:ba:53:52:5a:ad:db:ec:36:a6:f0:5d:58:9b:ec:c7:
         69:1b:c9:e0:bc:48:99:7a:e3:e9:e8:df:32:86:e2:b5:17:ca:
         b6:3f:67:a2:44:4e:81:e1:56:83:e4:e1:5d:12:9f:16:2f:8d:
         13:49:ea:2c:d2:c3:01:c9:97:94:87:c2:9a:cb:44:3e:fd:46:
         0a:17:dc:03:e4:51:2f:e9:66:ab:6e:3d:16:a1:65:3a:4c:8b:
         be:34:83:63:3e:e0:bc:cc:63:68:db:14:c1:3b:78:5c:af:4b:
         20:f0:f7:91:7b:c2:92:78:a1:a5:d9:e9:85:b0:84:a5:3f:76:
         53:6f:bb:bb:14:31:3f:f3:9b:c7:a3:ac:c0:0f:22:07:c8:e8:
         d0:94:a7:df:55:d5:11:83:15:58:2e:3b:61:dc:fe:a1:27:5e:
         74:47:0b:03:10:34:c4:00:f7:8c:55:96:9d:6b:70:4e:48:fc:
         46:a2:0c:3c:f5:01:5c:94:83:97:04:74:36:4f:f8:96:a7:85:
         12:a2:f8:91:fd:e4:79:86:5e:3a:44:4b:5e:31:57:1d:38:6c:
         06:47:a4:09:e4:c1:a7:8d:39:80:8a:90:17:55:a0:7c:b6:47:
         06:a0:96:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:19:06 2025 by rpki-client