Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa
File:                     12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa (raw, json)
Hash identifier:          LmwgS1Hg3t9STrYkN+aRkLXWuLiEsnYtUx2xlg5HGZw=
Subject key identifier:   59:53:EF:C6:44:7C:4C:10:97:6F:7A:0B:FF:69:7F:33:6B:F8:9E:65
Certificate issuer:       /CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
Certificate serial:       010D0C9F4328584B13D6AD1E01E074271B7822A0
Authority key identifier: 51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     7018
IP address blocks:        199.83.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ad:1e:01:e0:74:27:1b:78:22:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=17f88586-3c81-4e07-a246-54c3bbc1294f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:45:6c:a2:ab:8c:64:ff:d4:c5:63:c9:ef:cd:
                    b6:52:91:20:21:da:87:30:6d:8b:f0:7d:66:b0:2d:
                    17:7b:ea:27:12:7a:c2:d9:70:53:f8:0d:ca:b7:8b:
                    40:e4:40:11:a0:6c:26:67:3a:da:d4:4a:07:1e:95:
                    6c:13:8d:ad:21:26:1c:0f:10:08:ed:be:36:c9:4c:
                    3a:96:7f:66:6d:e6:2a:66:41:55:34:46:bb:94:bd:
                    88:2e:cc:3b:84:82:84:6c:9f:cb:7e:a3:bf:7b:fa:
                    01:c3:56:eb:2e:1b:9e:bf:19:97:fc:1b:30:d1:a0:
                    34:46:73:42:95:fc:33:c7:83:06:58:e7:45:f0:7d:
                    3d:1d:de:23:c8:37:84:35:27:1f:72:2d:1d:33:1f:
                    01:3b:c0:16:ee:56:0b:74:f2:c5:78:48:d6:47:88:
                    b9:c1:d8:b1:25:15:99:de:3c:61:f9:b5:2c:42:e9:
                    d9:ac:4e:19:d0:f0:57:22:f7:71:63:86:8f:11:5c:
                    f6:10:86:00:59:b2:23:8a:7a:16:65:2c:65:49:99:
                    2d:57:84:83:be:eb:50:88:c5:fd:75:7b:4e:75:5a:
                    37:53:68:51:2a:b7:25:ec:da:fc:06:08:99:2a:f6:
                    d5:d5:b8:8f:ac:34:97:ac:da:12:27:cb:3d:de:52:
                    47:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:53:EF:C6:44:7C:4C:10:97:6F:7A:0B:FF:69:7F:33:6B:F8:9E:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.crl

            X509v3 Authority Key Identifier:
                keyid:51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:9e:3c:00:af:6d:43:0f:52:5c:d8:ba:ec:3d:88:df:71:2c:
         29:08:8d:3d:b8:24:ea:96:de:a3:c1:b2:e8:27:97:76:b3:1f:
         5a:18:ed:50:39:bc:bf:79:84:7f:41:c5:9d:38:98:29:f4:a0:
         d6:94:35:86:ca:f3:0d:64:36:a3:e7:35:26:80:e3:1c:d0:2a:
         6b:22:95:7e:34:68:66:3c:60:db:ec:4d:3f:12:0e:bb:6e:73:
         58:a7:5b:4d:fc:90:ee:4d:8b:f7:63:45:f5:8a:8a:11:26:85:
         39:80:d8:79:ba:8c:d6:a8:4c:1e:aa:78:53:1c:b9:7a:bc:77:
         62:5a:b1:9d:94:bc:ad:3c:40:ca:39:5b:cb:a2:39:1e:b1:68:
         67:69:be:7c:cf:12:8e:0d:22:65:8a:7a:9a:cc:ca:b3:3f:bf:
         33:c8:0c:86:1b:33:27:70:da:83:70:47:07:5f:f9:11:7d:54:
         7e:c0:a9:4e:5f:e4:1e:80:83:9a:21:a8:6b:65:9d:06:e3:5c:
         f8:a4:7d:36:73:28:0c:10:32:68:4d:0d:08:13:da:ce:80:f2:
         c9:00:53:e8:f8:f8:7f:36:bb:d4:d4:32:80:b9:28:25:fb:bb:
         63:1d:9b:8b:1d:db:48:09:80:f8:71:32:f3:9e:b7:77:dd:a1:
         3c:76:1e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 10:05:03 2025 by rpki-client