Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c0b529f1-928a-3e8c-925c-e9b06c455bbd.roa
File:                     c0b529f1-928a-3e8c-925c-e9b06c455bbd.roa (raw, json)
Hash identifier:          Z5BhIovMl2lhIuNgsDOgVoxmOHmyX6FizvC/YaVzg04=
Subject key identifier:   BD:21:A7:3E:08:19:C0:95:6E:72:A7:46:7D:E4:59:A8:A0:47:37:DA
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584B004BE8877CF567AB70405DF8
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c0b529f1-928a-3e8c-925c-e9b06c455bbd.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     29802
IP address blocks:        181.41.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:e8:87:7c:f5:67:ab:70:40:5d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=f2ff0056-5c20-4a17-a922-e7502cdd2a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:eb:1c:81:7c:05:f9:4e:5d:bb:2b:fe:96:83:
                    1e:af:25:ba:bb:ba:00:5e:ce:fb:17:9d:89:14:51:
                    87:1a:95:e2:71:98:1f:3c:4f:38:22:59:75:5b:0b:
                    38:d8:79:14:dd:65:fc:7b:dd:cf:ab:e4:1c:66:55:
                    d1:63:69:5a:e7:7c:0b:c0:56:a1:90:1f:b6:3a:63:
                    a7:d9:d4:04:91:1a:f1:74:68:16:67:5a:24:45:19:
                    c5:8f:03:01:18:41:4d:84:2c:74:c1:78:b6:ea:51:
                    5e:66:90:d0:92:3d:c1:76:c0:c5:d3:4d:85:ec:c5:
                    d8:56:8b:2a:24:63:b7:fc:22:91:6b:e5:6a:58:57:
                    20:3d:2e:fe:7b:23:72:07:fb:32:da:46:d7:db:cb:
                    00:65:cb:36:fd:e9:30:32:3b:55:f7:14:f6:5c:d0:
                    69:28:ef:01:d3:45:f2:aa:5e:56:53:28:c4:96:0e:
                    f0:b1:cb:35:58:56:e2:f4:b2:46:5e:95:56:d2:6b:
                    32:58:b3:1b:4b:64:f3:17:2b:cf:86:cd:51:73:a6:
                    d8:54:c5:0e:d3:88:e0:af:39:01:8a:a9:fe:c5:23:
                    9f:ae:c3:31:72:a1:06:f0:84:4f:79:ac:2f:81:24:
                    6e:84:13:12:77:ab:89:c4:9f:ad:7f:63:41:7e:92:
                    12:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:21:A7:3E:08:19:C0:95:6E:72:A7:46:7D:E4:59:A8:A0:47:37:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c0b529f1-928a-3e8c-925c-e9b06c455bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ed:e2:52:d4:b7:9d:03:ee:a0:13:de:0b:11:5b:3a:5d:da:
         3c:bc:db:cf:d2:6b:8a:5d:41:ad:e3:bf:cb:0e:f7:b6:26:56:
         0b:9c:92:61:65:b0:52:7e:32:38:c6:7f:29:82:26:c8:a3:69:
         02:40:37:6a:e9:ea:6d:4f:8e:4a:53:8f:85:09:ca:69:6e:e8:
         92:be:86:5c:22:c2:56:53:a7:5e:5d:7c:67:3b:c9:e6:eb:d9:
         5f:2f:25:cb:27:05:6b:f6:09:00:34:70:13:79:3a:b4:8b:12:
         a1:da:e6:32:89:48:01:12:3d:81:c2:f4:10:e3:d7:89:60:06:
         c2:a0:8e:b0:f7:bf:e2:90:b6:f5:81:66:05:1d:49:c2:eb:87:
         c2:12:d5:c9:e2:18:4e:f0:f1:11:2f:66:88:24:95:0e:73:32:
         49:d7:8e:4a:df:86:0e:db:d2:f4:5c:59:4b:9a:cb:29:a1:9f:
         73:22:93:dc:fc:be:50:0e:b2:22:f8:08:87:fb:6b:0e:8f:eb:
         09:65:62:66:b6:5f:1e:0e:53:a8:2d:7a:8c:9f:50:72:c0:77:
         4c:23:62:31:c6:56:c5:42:49:1f:be:31:44:52:18:8c:c3:ea:
         71:f0:c4:5b:5b:d8:81:18:18:46:c9:02:1c:8d:cd:82:a4:14:
         d8:89:45:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 13:52:54 2025 by rpki-client