Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa
File:                     300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa (raw, json)
Hash identifier:          acO28m69zZXbvFfffnW+uUXmPwbhm8clgMy1oaUMRp0=
Subject key identifier:   0D:19:6C:1C:BE:CE:30:08:88:6D:AD:4E:1E:F5:76:D5:11:23:49:EA
Certificate issuer:       /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
Certificate serial:       010D0C9F4328584A9900C2A0E103AB69F16173C0
Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     2728
IP address blocks:        162.255.88.0/21 maxlen: 24
                          199.185.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c2:a0:e1:03:ab:69:f1:61:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=568e6bda-c76d-4b69-bed4-35c9f66b7805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:c1:5b:50:e3:33:f5:06:57:dc:a0:55:f2:
                    2b:1e:e0:fc:16:aa:c4:f5:5f:45:f7:d6:66:cd:ea:
                    55:ba:9f:f9:90:94:33:a4:b1:29:68:c1:e1:34:19:
                    d8:0b:7e:46:09:12:06:10:74:88:09:c5:05:86:9a:
                    0e:ce:86:27:c1:f8:b0:6f:2f:23:48:76:46:a8:ee:
                    ed:d6:dc:3e:2e:07:f9:19:4b:12:73:18:31:6e:74:
                    37:05:74:db:d2:56:5e:26:1f:a9:66:e1:45:17:28:
                    be:3c:6c:55:ab:93:ba:0d:ee:b9:df:0a:73:5f:71:
                    23:be:d4:b3:bc:a8:99:40:2d:12:97:03:26:bd:fd:
                    e5:6c:b5:5b:47:48:03:7b:84:a5:79:2a:bc:80:e1:
                    ac:0a:eb:a4:81:dd:d2:17:9e:22:a5:68:89:13:6f:
                    04:8d:d6:37:ad:1f:4e:98:d5:4c:04:cd:22:48:8f:
                    d2:e9:32:3c:08:25:40:5c:71:a4:02:fb:29:d9:d8:
                    d4:07:b1:96:6c:95:83:9b:66:58:cb:ee:b4:a5:7a:
                    e8:ba:0b:6a:06:a3:d2:73:de:d2:12:44:37:46:68:
                    56:9f:33:32:7d:3c:e9:e3:ea:8d:fb:8f:5b:4d:6e:
                    05:bc:10:3e:1b:12:ff:dc:f9:92:db:76:ee:09:5b:
                    27:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:19:6C:1C:BE:CE:30:08:88:6D:AD:4E:1E:F5:76:D5:11:23:49:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.88.0/21
                  199.185.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d5:d7:b8:6a:61:21:87:05:c8:9f:c6:b6:7a:ca:7b:42:71:
         97:09:7f:74:a5:5d:0b:cd:e5:c1:77:93:ed:ba:a8:45:4e:f8:
         e6:a5:00:2c:f4:9a:2e:8c:4a:98:a7:73:23:9b:70:7d:7e:d2:
         e6:f5:b9:1d:b1:49:bd:8b:9f:a4:b4:f9:8d:dc:d1:99:99:a7:
         ce:f6:18:08:69:34:9b:2c:59:5f:b3:2e:ab:24:31:bf:ec:f2:
         73:69:38:1a:bd:5f:f9:54:21:7c:cc:df:13:f2:c9:10:e0:33:
         8b:68:36:75:90:41:9e:3f:72:94:1d:9b:15:e5:0b:20:2e:01:
         16:60:88:bf:a6:d7:75:bf:12:76:f5:f0:cd:89:44:f2:15:b3:
         d9:50:87:3c:06:3c:7a:90:e9:3e:1f:ae:16:1b:83:24:1d:b8:
         df:cb:5c:13:11:66:5c:3a:db:3c:57:64:43:88:e0:ad:72:1b:
         8f:74:37:4b:8c:fd:1b:0b:5d:da:fd:39:cb:bb:99:68:64:31:
         8c:e1:02:17:d8:30:c3:8f:09:d3:1c:4d:f3:19:c3:d4:2f:da:
         ee:a6:23:01:75:a6:86:d9:c9:11:0b:30:fc:b5:7e:8e:8e:5e:
         a6:17:f5:28:32:96:47:47:5c:7c:73:5f:a5:28:84:9b:da:76:
         2c:0a:f5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:24:52 2025 by rpki-client