Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/5f7add25-c7c9-31c6-a087-fab6388f2ac4.roa
File:                     5f7add25-c7c9-31c6-a087-fab6388f2ac4.roa (raw, json)
Hash identifier:          yf+7S4Y9TJ93riXksDd0amFSAM5T1e8Sb3qOSuGPlAw=
Subject key identifier:   47:54:2C:E2:64:03:73:58:83:E9:4E:51:33:47:9D:36:65:D3:13:3E
Certificate issuer:       /CN=73980674-4684-4801-b116-e9e08b4ff9f4
Certificate serial:       010D0C9F4328584A9636946F3DEC5FFB973A7A00
Authority key identifier: 14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/5f7add25-c7c9-31c6-a087-fab6388f2ac4.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     81
IP address blocks:        152.37.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:94:6f:3d:ec:5f:fb:97:3a:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73980674-4684-4801-b116-e9e08b4ff9f4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=89f362e5-1f4d-449b-95e3-05101f82675a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ec:38:a0:db:fc:5b:96:d8:a7:9c:a9:e2:79:
                    3c:05:b7:0b:b5:13:7a:a7:a7:36:3e:6c:93:28:5d:
                    72:fd:9e:ba:ee:52:8d:a4:3d:fc:36:40:47:66:65:
                    f2:0d:ac:18:98:4d:97:02:41:37:78:6d:78:d6:04:
                    56:19:70:a2:c9:bc:41:30:7c:1c:97:e5:0d:32:07:
                    2e:1d:32:0c:13:62:a4:52:11:ad:71:9a:cf:2d:2e:
                    42:58:f2:02:21:b1:85:ef:44:1e:c1:87:31:7c:89:
                    e9:38:3e:d2:98:4b:3c:e5:1f:09:05:cc:f2:9d:0b:
                    de:5d:07:42:4c:9e:b6:29:59:ef:98:b2:a2:ec:bd:
                    fa:c7:3c:6c:7e:1b:2d:a2:b3:4b:46:5c:8d:3a:8d:
                    1a:70:bd:02:1b:c2:e4:af:4f:9c:dd:04:5e:55:50:
                    7a:4d:c5:d6:55:e9:b8:f8:de:ff:60:9e:9a:d1:e9:
                    86:e9:52:2d:e4:37:1a:27:6c:c1:dd:c9:da:cc:7f:
                    e4:a1:c7:ca:b2:d7:78:86:21:e8:f7:81:a1:5e:92:
                    f4:1e:ca:92:8c:0a:f2:8a:ea:bd:45:c5:75:04:31:
                    bc:05:85:f2:e1:71:65:8d:6d:96:c8:59:02:13:cf:
                    0e:05:ed:f2:76:70:1c:7d:28:be:ea:46:2f:8e:b0:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:54:2C:E2:64:03:73:58:83:E9:4E:51:33:47:9D:36:65:D3:13:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/5f7add25-c7c9-31c6-a087-fab6388f2ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4/73980674-4684-4801-b116-e9e08b4ff9f4.crl

            X509v3 Authority Key Identifier:
                keyid:14:DD:E8:8A:3F:2B:21:89:32:80:26:85:A2:B1:DD:8F:BB:30:75:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73980674-4684-4801-b116-e9e08b4ff9f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.37.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:38:1d:15:a7:2c:ed:d1:5d:99:b8:1d:bb:23:00:16:60:f6:
         81:0d:07:55:39:27:18:d1:ea:19:52:ca:24:08:43:b8:2b:b9:
         fa:5f:a1:af:a0:55:15:57:77:7b:13:59:51:56:ea:f1:5f:fe:
         46:3b:81:cf:18:f7:fb:6b:84:59:91:7e:f8:83:28:63:3c:3c:
         f1:df:29:6c:d1:71:20:78:24:ad:6d:bb:8e:0f:b0:09:25:db:
         b4:8b:8f:9a:06:9a:4e:9f:d6:ff:99:c9:80:e6:d1:8e:25:c3:
         35:35:3c:0d:7d:ce:93:f8:0c:12:b1:de:74:27:40:ba:04:a6:
         37:5b:54:07:62:0f:66:84:75:38:de:c7:6f:ca:d8:26:93:cc:
         24:f8:d1:70:99:1b:60:68:64:d7:64:1b:c4:65:77:74:4b:5f:
         36:c6:c6:ce:16:a9:04:7a:af:fa:5d:9a:c9:8a:62:0d:2f:80:
         bc:34:d9:6d:99:ef:be:95:fa:2d:3e:66:d7:4a:5a:76:41:d9:
         a4:49:48:01:70:99:82:9b:d1:28:6b:40:88:17:b9:b3:ce:2c:
         b7:8b:ea:69:c6:18:68:4b:c5:ff:3a:7a:40:32:80:2b:dd:06:
         0d:2f:07:f7:26:f0:63:cb:64:ea:11:38:fc:cc:85:af:18:5d:
         3e:6d:91:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:50:19 2025 by rpki-client