Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75f4a3ec-91da-3251-a5b3-13b673ef7c78.roa
File:                     75f4a3ec-91da-3251-a5b3-13b673ef7c78.roa (raw, json)
Hash identifier:          ZUJ+5I5qkgjvZB/Mm6YOHjMhHr1iagDbnc5pC0RpUUk=
Subject key identifier:   E8:35:2F:98:19:F7:2B:E2:5D:01:22:31:79:07:F9:02:A3:02:BC:E8
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AF9C8733732B8B97A2F399000
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75f4a3ec-91da-3251-a5b3-13b673ef7c78.roa
Signing time:             Mon 25 Aug 2025 17:00:55 +0000
ROA not before:           Mon 25 Aug 2025 17:00:55 +0000
ROA not after:            Sun 23 Nov 2025 18:00:55 +0000
asID:                     31898
IP address blocks:        194.164.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:c8:73:37:32:b8:b9:7a:2f:39:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 25 17:00:55 2025 GMT
            Not After : Nov 23 18:00:55 2025 GMT
        Subject: CN=db53ddfb-ea55-4cdb-9bf3-9796d13e81a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:62:51:41:99:45:3f:88:56:4e:ec:45:07:
                    9c:33:e6:db:14:3b:f0:8f:a9:47:1b:02:1b:26:7d:
                    6f:85:99:96:89:42:91:af:8f:2e:30:3b:5c:30:43:
                    d6:ea:2b:1e:b0:fb:34:69:0c:ec:cb:20:0f:f9:61:
                    12:87:d1:c1:e7:ae:e5:56:e7:50:fb:93:93:41:19:
                    64:db:6b:72:aa:8d:b0:86:cf:3b:a9:b8:2b:70:44:
                    49:ce:e8:b4:3a:05:8e:b0:ff:5a:ae:e8:e0:ac:54:
                    ee:aa:4b:14:dd:de:23:f8:fc:5d:2d:64:ae:f7:23:
                    44:67:76:a2:7e:f5:5a:f9:8e:64:1b:76:0a:30:37:
                    47:ac:00:97:cc:02:0d:be:0a:94:e0:18:16:f9:bb:
                    dd:19:a4:43:22:b2:39:dd:1f:11:75:1f:97:fc:c9:
                    0c:0a:ab:18:db:ee:3d:38:e2:2f:4b:a5:63:5e:14:
                    5a:e1:14:c9:2f:6b:8c:3e:e2:48:31:0b:b7:c9:cc:
                    6f:8a:bd:0a:f8:e3:99:a1:71:34:9b:92:f0:64:aa:
                    df:42:04:1f:74:a1:5a:90:c0:07:54:e3:07:2b:f8:
                    33:1b:17:93:7d:cd:fc:a7:13:ef:58:6f:f0:13:60:
                    2b:c8:51:7a:17:81:d4:97:77:b9:9c:ac:1d:ba:09:
                    42:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:35:2F:98:19:F7:2B:E2:5D:01:22:31:79:07:F9:02:A3:02:BC:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75f4a3ec-91da-3251-a5b3-13b673ef7c78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.164.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c9:91:47:7d:00:b3:13:97:82:cc:fd:d7:35:95:24:b3:9e:
         10:70:90:ed:a1:0a:78:b7:05:91:18:92:8f:d4:98:75:49:be:
         26:78:b7:e8:b9:27:fa:84:15:00:0e:7a:34:b3:63:d1:e3:52:
         3a:f0:0e:c6:76:04:df:f2:54:74:39:88:8c:f8:7f:f3:41:8e:
         04:6b:a6:af:83:6d:83:fd:7f:a1:f7:58:e5:e7:cd:ac:1d:d6:
         66:ce:2a:98:bc:e3:30:6c:07:30:21:9e:8b:f4:ab:3d:31:5d:
         46:7c:b4:df:92:92:70:4f:0d:c9:6c:64:7a:de:37:2d:a4:d7:
         a6:6b:54:5f:78:6f:62:4d:77:b4:95:6b:6e:06:4b:d9:5c:8b:
         6f:c4:ad:98:db:74:31:ba:48:1b:90:2f:7c:32:0b:96:a8:78:
         a6:4d:35:d4:3e:15:03:44:fd:14:ce:2c:d5:c3:9c:95:73:32:
         3c:63:53:fc:4b:9d:5a:b0:06:8a:76:0d:c9:fc:78:c6:f9:90:
         65:3f:ea:e9:e4:88:ea:91:98:7a:99:12:63:81:3d:d5:93:e1:
         91:b2:53:cb:bc:79:f3:3c:87:4c:02:84:28:23:e0:f5:d6:69:
         80:58:47:a7:55:7f:8d:6d:d2:c3:35:79:b9:d5:bd:29:ee:0b:
         6b:01:fe:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 00:56:01 2025 by rpki-client