Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa
File:                     b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa (raw, json)
Hash identifier:          SUgaobB7EZGIXOe6WqESBlRfpoED/urfPiApN38dlts=
Subject key identifier:   82:78:7B:23:07:3B:82:8A:9C:80:6E:0D:31:9D:C6:BD:BC:AA:30:35
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584B0CDC1BCBFDFB167E9C532FA0
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     852
IP address blocks:        43.245.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:1b:cb:fd:fb:16:7e:9c:53:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=3dc2bfe3-9e90-44ad-aa81-ad88549d2feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c3:e3:ee:1a:a8:09:82:31:49:17:28:a2:f8:
                    d9:2b:5a:19:fd:80:d5:9b:d1:d1:0f:c8:1b:b0:47:
                    f1:69:8f:b0:a9:e2:be:7e:62:7b:1d:e2:a1:2b:ba:
                    40:31:ed:43:a0:64:6c:66:a0:9f:87:ca:b9:d4:19:
                    0f:0f:5e:69:e3:b9:fe:49:fe:96:50:a8:50:7b:ea:
                    25:71:36:83:03:99:23:fe:22:37:73:0b:3d:d1:81:
                    9d:52:15:4a:7c:06:99:2b:e5:51:2b:18:17:36:44:
                    f4:fb:d0:5e:54:12:f6:3e:99:9d:d4:ea:06:2c:94:
                    2e:88:86:4f:d3:24:fb:00:9b:04:30:52:07:16:db:
                    2e:08:d4:c8:ef:e0:b4:70:06:da:46:5d:12:d9:bd:
                    5b:42:af:18:b5:88:32:97:6d:b8:99:b0:b8:b1:57:
                    e6:7f:90:01:11:ae:1e:e3:89:48:fa:44:62:bd:ea:
                    11:8b:8d:2d:c5:d1:97:47:e1:27:32:fb:16:f2:87:
                    47:d0:4d:4b:70:b6:d9:07:3c:1a:61:41:83:a9:82:
                    2a:2d:64:d5:20:dc:27:06:50:c9:75:9f:08:ba:d2:
                    76:f0:6d:95:ea:fe:7d:99:e5:5d:a4:f7:26:46:73:
                    48:68:e0:0c:e7:d9:d5:4e:f0:0c:a3:a1:2f:70:1a:
                    b3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:78:7B:23:07:3B:82:8A:9C:80:6E:0D:31:9D:C6:BD:BC:AA:30:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b4648fdc-ac99-31eb-8591-7ffa3ffc4150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:fb:20:3b:ca:c8:92:91:94:75:40:92:f8:dc:bc:f4:f0:72:
         5c:aa:44:7f:75:0c:2d:fc:e6:04:98:6c:c0:1b:c8:b4:40:50:
         32:ee:35:a6:65:67:7f:9b:4c:0b:5b:5f:3c:9c:d1:76:c3:d9:
         42:bc:0c:9e:d6:70:34:0d:40:e6:f0:50:56:58:b1:22:2e:2c:
         cb:7a:8a:79:3c:57:78:b6:1a:c9:70:c9:12:4e:27:22:35:72:
         1b:51:d6:45:a5:a6:77:82:d8:b2:72:72:43:fe:b4:49:45:fd:
         ab:d7:d5:69:c5:ab:00:6e:10:71:8d:a4:e5:c1:d4:c5:80:b4:
         82:c1:f4:2a:65:1c:84:eb:83:99:43:e4:3f:1c:f6:84:2b:5e:
         5f:98:95:c8:8b:1e:48:60:ce:34:6d:71:7f:f9:2d:9a:ab:92:
         f9:d8:e5:98:09:45:d1:57:78:ea:37:75:5d:04:f2:19:94:4b:
         23:73:ab:62:f9:78:a4:e2:20:b2:f3:e4:f2:ff:e0:20:c5:fd:
         cf:cc:c7:41:d7:c9:69:b8:63:5e:89:6b:23:c5:01:cf:a8:76:
         2c:a4:c4:a0:48:be:4e:e4:f1:59:92:e2:7e:3b:7e:62:9c:25:
         1f:96:b1:95:e2:d8:90:5a:09:e3:e6:2e:af:44:11:4e:fe:99:
         48:9c:a8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:19:52 2025 by rpki-client