Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/623e2d99-79e8-3a5d-83ce-25292405eea3.roa
File:                     623e2d99-79e8-3a5d-83ce-25292405eea3.roa (raw, json)
Hash identifier:          ixUxd0/5PwkUi7kSmvcpVwShAiSQbo4UxHEB0AKA5w4=
Subject key identifier:   B3:33:0B:2E:02:34:B3:2E:0D:65:B2:70:01:4C:00:A9:87:B5:86:5E
Certificate issuer:       /CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
Certificate serial:       010D0C9F4328584AE72BB9883400822F7810F200
Authority key identifier: 0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/623e2d99-79e8-3a5d-83ce-25292405eea3.roa
Signing time:             Tue 19 Aug 2025 01:00:32 +0000
ROA not before:           Tue 19 Aug 2025 01:00:32 +0000
ROA not after:            Mon 17 Nov 2025 02:00:32 +0000
asID:                     31898
IP address blocks:        161.115.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e7:2b:b9:88:34:00:82:2f:78:10:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79591eb-f8ff-48f5-9ac6-e1afa23e53fb
        Validity
            Not Before: Aug 19 01:00:32 2025 GMT
            Not After : Nov 17 02:00:32 2025 GMT
        Subject: CN=79d4ef83-babd-4acf-8e73-14d5222d4383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:00:6d:0c:a8:83:62:7e:e0:e8:fa:16:ae:5b:
                    69:7f:84:f3:c7:d6:dc:07:2c:bb:e8:34:ab:ca:b3:
                    68:b5:82:b1:e5:0b:3e:8a:05:94:14:c3:80:95:05:
                    7c:70:52:ca:04:c6:b4:8a:2a:54:0a:cf:6d:c0:9a:
                    3f:30:27:d7:f6:b7:97:52:7c:15:b1:69:56:5a:6f:
                    1f:c1:76:ce:d1:a3:d6:eb:2f:83:47:fb:f4:7f:4e:
                    33:b0:54:89:88:49:eb:35:da:26:b6:d6:3c:3d:28:
                    e8:65:d4:1f:96:40:0e:cc:67:04:74:08:5a:7a:56:
                    ce:d4:df:0f:16:7e:2a:80:41:18:05:56:45:59:fe:
                    0f:f9:d3:65:8a:e2:51:cd:54:1f:04:f6:ba:a5:1b:
                    d2:27:08:15:8c:6f:f9:c4:77:48:ac:76:cc:7d:25:
                    de:37:d5:8b:93:22:89:f4:85:ff:5b:c3:44:2d:d5:
                    93:7a:77:44:c9:4e:15:a1:88:11:56:c5:ec:db:08:
                    ec:8c:02:ea:da:68:20:e9:5b:54:c6:dd:cf:c8:1a:
                    29:6c:02:40:8b:5d:16:e2:fc:56:33:92:4e:f6:d4:
                    02:b0:57:1e:58:95:e3:70:1c:d5:b3:c3:0a:4d:8a:
                    2e:12:d6:29:b4:3c:17:87:9a:85:7d:21:2d:e0:7b:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:33:0B:2E:02:34:B3:2E:0D:65:B2:70:01:4C:00:A9:87:B5:86:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/623e2d99-79e8-3a5d-83ce-25292405eea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.crl

            X509v3 Authority Key Identifier:
                keyid:0B:7A:E7:49:9E:38:74:DF:9B:2C:F5:55:F3:5B:32:97:6C:38:23:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f79591eb-f8ff-48f5-9ac6-e1afa23e53fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.115.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c5:7b:16:71:26:5c:9d:89:d3:15:88:30:3a:4d:c0:d9:01:
         9f:94:d2:09:00:9b:16:6a:8d:97:cb:7c:e6:b8:4a:da:a9:7a:
         0c:fc:63:38:4e:af:71:d7:fb:79:7d:45:4a:35:36:83:8a:07:
         02:c0:1e:27:52:d4:ee:f2:73:24:dd:c7:b9:fe:c8:e8:91:5e:
         3b:7d:a5:99:16:ee:ea:01:13:55:c6:c4:86:66:23:c7:8d:f5:
         88:c3:13:77:0e:da:c5:ac:e8:3f:d9:3e:3b:ab:78:70:6e:fe:
         42:67:15:22:5f:77:8b:dc:db:4c:c8:57:d0:09:0c:35:b9:17:
         e3:e9:f6:8f:e6:c9:aa:81:37:cb:cc:15:03:97:d0:b7:2b:e0:
         19:e4:f9:68:3d:05:c2:a4:bc:cf:b8:6c:4a:e8:3d:2a:e8:ab:
         7e:bc:de:72:66:e0:ad:62:ac:54:07:6c:9f:d2:69:b4:ef:5d:
         ec:a0:57:df:20:87:d5:48:45:21:25:76:97:82:52:c9:f4:34:
         8a:03:12:f7:c5:fc:93:4f:a0:6f:49:c2:8c:8b:b9:15:a5:9a:
         5a:b1:e4:cf:b6:e5:a5:18:2f:4b:d8:74:5c:66:98:b6:19:8c:
         86:25:7f:77:19:cf:26:95:c7:fc:1c:a6:60:a7:8c:e0:0c:6d:
         41:f8:65:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 08:06:03 2025 by rpki-client