Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1f444393-5c7d-35c2-b597-09f46b8fdadf.roa
File:                     1f444393-5c7d-35c2-b597-09f46b8fdadf.roa (raw, json)
Hash identifier:          cZr2BHAfcCo7vfG9oSZAnPvZh3WGuJQ7vT1GuJPJe/0=
Subject key identifier:   13:DD:F7:16:4D:CE:2B:D1:4C:42:86:AE:66:D5:D0:BB:DE:8B:47:16
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A73EB7AE12778E7210EE81940
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1f444393-5c7d-35c2-b597-09f46b8fdadf.roa
Signing time:             Tue 08 Jul 2025 18:13:11 +0000
ROA not before:           Tue 08 Jul 2025 18:13:11 +0000
ROA not after:            Mon 06 Oct 2025 18:13:11 +0000
asID:                     401152
IP address blocks:        144.225.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:eb:7a:e1:27:78:e7:21:0e:e8:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  8 18:13:11 2025 GMT
            Not After : Oct  6 18:13:11 2025 GMT
        Subject: CN=642fe295-9353-43a1-85c9-4877fcd6dd39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:65:a8:8e:cf:3b:59:07:00:b3:51:40:f5:0d:
                    ad:d3:01:ea:40:72:34:e6:79:f0:1d:9c:06:c5:94:
                    e4:06:a1:e3:75:a7:3c:10:53:29:8a:d6:50:8e:63:
                    a9:ad:83:b8:d0:2f:8a:8f:4a:f4:f3:e0:5f:10:b1:
                    eb:40:f0:69:1a:8b:2e:b6:7e:79:ca:1b:86:75:ba:
                    1c:d8:8c:bd:62:67:88:6f:f8:04:1f:8d:16:56:e9:
                    e9:fa:1b:53:1c:04:b1:33:9b:4d:35:74:98:cb:f7:
                    15:78:10:95:25:32:9f:27:d6:3f:6f:4b:4d:09:97:
                    b6:dd:a8:15:31:2b:6a:79:bf:ff:67:4c:39:5c:ea:
                    f6:69:05:ee:0a:7e:1a:7e:8d:ec:b6:f8:e0:59:2e:
                    b2:d6:65:21:46:08:89:d6:18:8c:b3:04:7f:12:c4:
                    3c:00:98:6b:25:2c:1d:1b:de:9c:70:55:2e:17:cb:
                    64:57:23:76:88:5f:65:da:cb:21:2d:d7:df:c7:0f:
                    e5:c6:0a:92:69:10:10:5c:c3:9f:ad:71:24:71:e6:
                    9a:00:f3:aa:6a:3d:45:d3:9c:a6:cf:4f:f9:cd:08:
                    aa:69:65:28:82:aa:76:41:0e:ff:6d:0d:4b:e7:ff:
                    55:f9:51:ec:fb:69:d1:2e:40:f1:e7:fb:c4:f9:1e:
                    28:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DD:F7:16:4D:CE:2B:D1:4C:42:86:AE:66:D5:D0:BB:DE:8B:47:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1f444393-5c7d-35c2-b597-09f46b8fdadf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:91:42:d5:f6:f0:69:fb:f4:92:b1:93:d3:82:e6:f5:33:0b:
         33:71:c3:98:a9:fb:ab:1a:e2:d7:2a:43:25:31:ce:fe:c9:39:
         0e:0a:fb:8a:a9:a0:6f:bc:a2:7c:d9:08:5b:38:01:ff:dc:ae:
         46:d4:21:17:e5:eb:ed:7b:ab:43:ec:b1:46:a5:42:7b:92:8d:
         cd:82:8d:b8:7b:6d:3c:11:a5:5c:23:6a:01:60:80:99:81:c9:
         48:5f:75:35:41:68:71:b2:08:b7:9d:bc:92:bc:a7:e3:58:26:
         b1:ff:04:1e:f7:da:71:92:f6:63:f0:aa:ed:b1:43:4a:2b:c7:
         c5:f6:a3:1d:e0:3a:05:36:53:8e:7e:74:6a:6a:e7:d7:7e:f2:
         e7:16:80:bb:2a:2c:7f:aa:81:bd:98:25:e7:fb:d1:74:b2:a9:
         53:70:05:d8:40:df:b7:26:9a:38:90:17:d6:08:88:7c:58:28:
         53:64:66:0a:0c:bb:cd:1d:28:21:93:5e:53:37:b2:93:e4:40:
         68:ab:72:af:64:d3:73:d6:9d:d7:02:73:4a:e4:70:35:c7:43:
         fc:bd:13:b3:bd:32:b5:5e:5d:56:d3:fa:d4:19:e9:bf:e0:d2:
         b7:ef:32:63:b4:ed:b5:4c:12:1a:a3:98:8b:d8:eb:f5:7e:09:
         0a:14:00:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:46:34 2025 by rpki-client