Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/54f5f71f-2eae-3a6b-87ce-a179934f4f47.roa
File:                     54f5f71f-2eae-3a6b-87ce-a179934f4f47.roa (raw, json)
Hash identifier:          GUEcg/DsJTC1SHCRqXmQ3qXi+nB+6iYFNZXFsY18DG8=
Subject key identifier:   AF:47:BC:5C:F2:AC:41:35:C1:01:0C:DA:B8:72:DF:6A:16:14:E6:29
Certificate issuer:       /CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
Certificate serial:       010D0C9F4328584B03168FEAAEF0C3DE8B4611E0
Authority key identifier: 0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/54f5f71f-2eae-3a6b-87ce-a179934f4f47.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     10490
IP address blocks:        192.245.221.0/24 maxlen: 24
                          192.245.222.0/23 maxlen: 24
                          192.245.224.0/24 maxlen: 24
                          199.33.130.0/23 maxlen: 24
                          199.33.132.0/23 maxlen: 24
                          199.33.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:8f:ea:ae:f0:c3:de:8b:46:11:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=fdb0e510-ffb2-4de6-a723-4e0903bb3a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:36:72:42:7d:82:70:92:ac:6c:5c:fc:f9:ae:
                    05:76:7f:b4:b4:d7:c8:ba:a6:f0:03:92:55:ef:6d:
                    54:e0:35:84:88:16:cd:9f:24:b7:89:da:7a:43:cf:
                    35:2e:d1:88:7c:b6:9f:ef:1b:b1:f8:5c:ff:9a:35:
                    71:b4:8e:4e:26:d5:39:01:60:75:56:16:12:bf:32:
                    98:6a:f5:77:14:fd:58:ac:d3:42:e3:da:55:57:c6:
                    8f:a3:7e:77:1b:f6:5a:a2:8d:56:1d:71:81:47:f9:
                    60:54:4e:22:18:25:54:2b:73:55:9f:eb:d3:cd:ac:
                    36:33:fd:e5:c6:d1:9c:88:f2:b4:9c:b1:63:67:e8:
                    b8:4a:0c:54:fd:12:83:91:8b:0f:8c:af:6a:42:51:
                    bf:97:9a:69:2c:92:26:11:2a:73:98:d4:b0:be:24:
                    a5:4f:96:00:5d:03:a0:93:8d:cf:15:ee:ed:22:ce:
                    87:f7:1e:e0:a8:27:a3:03:15:94:2d:00:e1:c7:8a:
                    7a:56:54:7a:c0:c2:92:24:56:ef:bb:87:16:18:58:
                    01:63:38:1b:0b:b3:ff:a5:46:31:fb:b7:7c:12:ac:
                    0a:78:23:46:df:c6:84:04:13:72:e6:09:6b:98:16:
                    c7:64:fe:80:fd:2d:58:ea:61:ea:db:64:6a:a7:64:
                    e2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:47:BC:5C:F2:AC:41:35:C1:01:0C:DA:B8:72:DF:6A:16:14:E6:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/54f5f71f-2eae-3a6b-87ce-a179934f4f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.221.0-192.245.224.255
                  199.33.130.0-199.33.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cd:30:81:a1:cf:c5:76:42:24:61:09:b7:e1:71:c2:20:d7:
         76:7b:ba:9a:a5:2b:bf:42:bc:de:61:0d:79:04:66:c3:cd:81:
         15:aa:10:bd:a0:64:2f:0a:2b:1d:0b:72:4b:25:20:9d:a4:23:
         05:70:f1:f9:eb:b0:72:7f:d7:e6:57:14:f9:60:3c:df:e9:a7:
         f2:8c:9e:7b:51:22:59:70:c3:d6:6b:2b:41:12:b2:b2:75:0c:
         e7:5e:7e:53:78:6f:db:9b:72:0f:9e:fe:a0:44:aa:4c:45:6f:
         5f:08:1c:1a:f6:30:6d:01:a3:28:56:88:f9:1e:0d:f2:bd:33:
         da:02:84:0b:b7:37:9d:8c:40:4f:82:eb:14:e8:b4:17:3f:0c:
         dd:54:64:37:be:6c:15:d1:81:6b:1b:f9:6b:38:11:7f:24:01:
         c0:a7:da:4f:ef:46:d9:6a:f0:bb:8c:d1:61:08:25:96:93:f5:
         7d:d2:8b:60:d1:dd:ee:95:6b:a7:ad:c8:7d:0f:51:f8:3a:f2:
         07:b2:9e:52:14:2b:a9:7b:c0:ce:c3:8e:2d:e3:58:65:70:52:
         2d:ba:c4:65:71:30:07:cb:39:08:3f:da:9c:31:11:bd:2b:53:
         09:52:89:e1:d1:07:9e:38:b1:13:b6:b3:e5:98:98:bc:6a:e8:
         0a:90:2d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:21:45 2025 by rpki-client