Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/e240baa6-82c8-35cf-bea1-7070aa352e51.roa
File:                     e240baa6-82c8-35cf-bea1-7070aa352e51.roa (raw, json)
Hash identifier:          VcMwXZzzdDNUi5vC/tAfOS4VugRzwBosmPOKl0SkOYw=
Subject key identifier:   F4:8E:15:B2:0F:95:55:DA:7E:85:BD:B6:BC:80:0E:67:4D:8A:1A:62
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584B15237207EA07AB40341CE200
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/e240baa6-82c8-35cf-bea1-7070aa352e51.roa
Signing time:             Thu 04 Sep 2025 12:11:06 +0000
ROA not before:           Thu 04 Sep 2025 12:11:06 +0000
ROA not after:            Wed 03 Dec 2025 13:11:06 +0000
asID:                     16504
IP address blocks:        172.85.128.0/17 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:23:72:07:ea:07:ab:40:34:1c:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Sep  4 12:11:06 2025 GMT
            Not After : Dec  3 13:11:06 2025 GMT
        Subject: CN=a57e71de-e3c6-4c8b-8dbb-a571b30f508f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:61:ac:36:15:2e:7d:30:87:f5:5c:77:1c:30:
                    86:d2:dc:97:47:3e:80:35:8d:53:57:9f:38:d6:0f:
                    43:2e:a6:3c:2d:5b:fc:cc:63:43:d9:49:04:07:7c:
                    ea:33:33:b9:ef:a7:e7:48:58:4e:99:03:b8:b8:96:
                    00:1a:b3:05:c0:95:a1:e2:d0:74:10:5c:57:c5:6f:
                    a8:2a:c5:ae:4b:64:44:38:57:2c:bf:80:19:1c:4b:
                    7d:00:e5:ca:1d:3a:7a:17:e5:88:37:c3:05:30:4f:
                    e0:0a:6d:88:11:12:b8:73:93:c8:e2:40:e9:fe:22:
                    09:3b:34:12:64:f3:d9:9d:34:38:b3:46:9c:78:90:
                    dc:90:6a:c6:65:43:fc:98:e0:a0:90:ad:37:c9:6b:
                    08:d2:88:77:88:8b:cf:6e:e6:28:8b:94:96:29:5e:
                    df:d9:5c:61:5b:70:09:f4:98:0a:d9:22:c6:b4:56:
                    a9:5c:a3:41:e2:b7:45:80:d5:09:fd:ee:e9:2b:89:
                    cc:94:ff:21:26:63:84:14:ac:0b:8e:a9:db:f9:77:
                    90:60:46:6e:aa:ba:84:1a:ec:e9:fb:b2:a8:71:89:
                    fb:79:03:bf:11:8b:d1:54:e2:1c:5f:37:2b:b5:19:
                    6d:66:de:7a:e8:2d:47:b9:79:dd:8b:2f:7c:52:b1:
                    e2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8E:15:B2:0F:95:55:DA:7E:85:BD:B6:BC:80:0E:67:4D:8A:1A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/e240baa6-82c8-35cf-bea1-7070aa352e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a8:65:26:86:0f:b0:7d:02:46:53:e2:6a:80:6c:80:65:d4:
         e0:76:6b:e3:9a:1a:76:f3:2a:55:e7:c2:90:6c:f6:29:64:71:
         47:33:33:e9:40:9e:cc:05:19:61:54:49:41:12:a0:2e:e8:11:
         27:da:2f:25:14:48:75:4b:c4:43:9b:58:03:ab:e8:1a:38:7d:
         9b:85:5b:24:f2:76:d9:4c:dd:be:e7:ff:5d:3a:cc:c2:bc:25:
         a3:3d:8b:34:c3:bf:ed:da:ca:47:df:c7:a3:87:10:c1:82:78:
         c0:3a:3b:fa:5f:01:96:d0:42:37:1f:09:5a:43:0d:b3:9a:18:
         dd:be:f4:f1:be:52:70:e1:7f:4f:fc:c1:f4:8d:c6:9c:f4:25:
         b9:fd:4a:1b:7d:cd:4e:87:5e:35:8c:ab:80:c4:58:86:8c:77:
         2f:34:4a:3e:3c:64:f9:03:c1:84:8a:cd:99:79:87:40:1b:fe:
         ad:80:56:74:81:b2:88:b5:46:94:2e:52:a0:55:24:97:8a:11:
         43:18:01:6e:24:cf:16:de:78:71:50:77:d6:43:96:cc:60:b4:
         e6:d5:a1:bd:fa:83:c7:3c:66:9b:06:40:82:92:e1:8e:66:81:
         84:7a:73:03:78:4e:4c:2e:23:dc:8d:fa:be:11:3e:e1:f1:a2:
         bf:86:fb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:33:23 2025 by rpki-client