Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/4b8c8de2-3c99-33b7-8665-4fce5016c1a7.roa
File:                     4b8c8de2-3c99-33b7-8665-4fce5016c1a7.roa (raw, json)
Hash identifier:          nMvKA7gsE7VNoaDjGzE920S35zM9OcoScPCBHZWYv/Q=
Subject key identifier:   13:CA:24:89:E2:74:6C:EF:00:1A:0D:61:B2:A1:C2:3E:AE:7B:8D:C1
Certificate issuer:       /CN=93486113-52ec-4d22-9c7f-d493f8e27cb3
Certificate serial:       010D0C9F4328584AD23BB17AC63CE731E99489C0
Authority key identifier: 3C:A2:CB:86:C0:C6:7E:F3:71:43:38:DD:49:7C:F4:23:D6:A5:F4:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/4b8c8de2-3c99-33b7-8665-4fce5016c1a7.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     40328
IP address blocks:        205.185.128.0/19 maxlen: 19
                          205.185.128.0/20 maxlen: 20
                          205.185.128.0/21 maxlen: 21
                          205.185.128.0/22 maxlen: 22
                          205.185.132.0/23 maxlen: 23
                          205.185.134.0/23 maxlen: 23
                          205.185.136.0/23 maxlen: 23
                          205.185.138.0/23 maxlen: 23
                          205.185.140.0/23 maxlen: 23
                          205.185.142.0/23 maxlen: 23
                          205.185.144.0/20 maxlen: 20
                          205.185.144.0/24 maxlen: 24
                          205.185.145.0/24 maxlen: 24
                          205.185.146.0/23 maxlen: 23
                          205.185.148.0/24 maxlen: 24
                          205.185.149.0/24 maxlen: 24
                          205.185.150.0/23 maxlen: 23
                          205.185.153.0/24 maxlen: 24
                          205.185.154.0/24 maxlen: 24
                          205.185.155.0/24 maxlen: 24
                          205.185.157.0/24 maxlen: 24
                          205.185.158.0/24 maxlen: 24
                          205.185.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:b1:7a:c6:3c:e7:31:e9:94:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93486113-52ec-4d22-9c7f-d493f8e27cb3
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=94399b53-6b0a-4d90-902c-ee8532c01e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:dd:2f:b8:f3:56:4e:ce:4b:8a:36:7f:6d:
                    2c:0a:37:47:98:68:5e:98:c4:9d:e1:46:7a:02:01:
                    fb:72:ff:a1:b3:dd:5f:eb:60:aa:8f:86:94:68:f1:
                    61:7b:45:88:8e:1c:19:59:cd:2f:69:31:c6:2e:24:
                    44:95:af:ee:af:06:4f:f3:f5:41:80:0b:89:c5:1b:
                    8d:13:3e:56:ec:b2:fe:01:3a:ed:4b:54:0a:58:af:
                    f9:76:cf:1c:4e:93:02:19:24:b8:9d:a9:06:9b:48:
                    88:f3:53:64:c6:39:84:d3:37:a9:c3:4b:9c:24:72:
                    f9:bc:e8:8c:09:ac:f3:60:b1:30:f2:8d:a4:4b:41:
                    07:87:50:09:35:b0:c4:2e:77:1f:0e:3e:fb:ef:85:
                    e1:1f:b0:68:3b:2f:8f:13:e5:ac:30:0c:88:3f:8f:
                    ff:bb:39:a8:b0:6b:52:c4:e4:62:4b:da:3e:45:5e:
                    97:a8:b7:1f:bc:be:8a:25:62:e0:5f:46:b9:dd:f7:
                    a4:05:c9:ee:30:b0:0d:0a:81:c4:53:55:95:81:3d:
                    0a:bb:1a:f2:e2:ad:2e:d6:ed:0b:dd:fe:0e:ad:79:
                    63:35:e2:db:42:e3:30:eb:83:a7:57:31:df:79:dc:
                    2c:ba:a7:f1:38:01:01:0a:2f:69:20:f4:00:04:af:
                    cb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CA:24:89:E2:74:6C:EF:00:1A:0D:61:B2:A1:C2:3E:AE:7B:8D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/4b8c8de2-3c99-33b7-8665-4fce5016c1a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.crl

            X509v3 Authority Key Identifier:
                keyid:3C:A2:CB:86:C0:C6:7E:F3:71:43:38:DD:49:7C:F4:23:D6:A5:F4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.185.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c2:29:c8:f9:b9:6f:ab:85:99:3d:fa:21:2d:a8:f2:93:3f:
         86:70:93:1d:71:dd:46:a1:94:4b:15:31:b8:22:97:a7:63:17:
         af:5d:5d:11:ed:ea:46:e6:bf:ea:5f:ac:ad:9b:b0:65:00:cb:
         e1:5d:b0:cb:3c:af:a5:fb:a2:21:d9:21:50:83:76:6b:e4:8a:
         46:49:27:15:db:38:8a:b0:6d:63:27:81:1a:79:20:a9:dc:35:
         38:38:32:aa:f3:4f:44:d1:f0:c1:4b:5c:84:b2:f3:cb:c9:75:
         e2:e8:9b:d3:d0:bc:2d:04:b3:e6:cd:dc:b4:4d:c5:7a:1a:e2:
         74:e6:74:43:cb:a2:47:68:e5:d0:53:08:db:7e:87:7d:62:ab:
         07:68:49:e4:02:0b:be:42:42:26:47:6c:b0:3f:d5:bb:ec:69:
         8a:a6:7f:aa:34:08:63:bf:6a:a5:5b:e1:e6:b9:60:49:2e:80:
         e9:c3:05:fc:9d:eb:97:39:8c:ec:bc:55:b4:66:4f:e0:9b:d9:
         8c:0b:59:2f:04:a8:b0:75:59:ee:0a:4c:2e:d5:9a:84:1b:bd:
         13:95:39:75:37:86:ff:cf:83:7f:cb:0a:13:a6:11:34:71:18:
         5d:e9:0a:39:1f:1d:49:94:47:3c:cb:5c:09:bd:17:5f:d2:25:
         41:da:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:29:52 2025 by rpki-client