Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/abf701ec-494a-39e4-b346-585255e4aae7.roa
File:                     abf701ec-494a-39e4-b346-585255e4aae7.roa (raw, json)
Hash identifier:          h8o4w57zQaa6JlePfEG4LzOrHHSLg1iiWXU9raTnYh8=
Subject key identifier:   6F:D4:4C:BF:6C:E8:D6:03:A4:0C:68:EA:34:AE:77:54:B4:1C:86:67
Certificate issuer:       /CN=ae6e260c-421d-48c3-b47d-d76ac074fbba
Certificate serial:       010D0C9F4328584B0B76A8399A985E5F104F4540
Authority key identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/abf701ec-494a-39e4-b346-585255e4aae7.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     19782
IP address blocks:        163.245.0.0/16 maxlen: 24
                          205.215.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:a8:39:9a:98:5e:5f:10:4f:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6e260c-421d-48c3-b47d-d76ac074fbba
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=1da0ea43-a81d-49db-bf1d-251217e829ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:53:ed:e1:70:9d:18:78:b8:d7:6a:75:5f:
                    55:1a:25:6a:05:61:60:49:5c:c4:22:6c:fc:98:c5:
                    38:bc:73:17:3d:2c:77:36:15:eb:c0:df:4e:dc:bf:
                    c4:d8:43:3b:34:dc:34:3b:db:c7:9a:92:8b:3e:d4:
                    05:94:a4:46:71:a4:d6:36:89:ce:31:fa:42:bc:5e:
                    7a:0c:0a:d8:8b:0e:95:37:27:ae:39:cb:f2:b6:e5:
                    47:81:36:02:91:b0:60:f1:ee:70:c0:94:2d:e1:8b:
                    dc:aa:52:0c:63:0c:b0:f6:d9:08:5f:c1:ae:88:30:
                    76:e0:ab:4c:8d:05:3a:07:31:b4:d8:82:8b:d9:b0:
                    bb:35:7b:50:4f:72:71:65:95:64:9a:08:f0:33:2d:
                    63:05:7b:c9:4f:02:4f:26:f4:21:fd:40:39:fc:01:
                    87:fc:e5:23:4e:79:7f:86:00:d5:07:8a:37:03:f2:
                    ed:18:fd:4e:f3:35:1c:3e:a0:82:57:69:ac:7e:58:
                    2d:31:ce:7f:11:fc:1a:c0:4d:99:00:a9:37:f0:25:
                    59:2b:a8:ae:29:f9:e8:81:1d:07:95:ed:49:68:5d:
                    6d:5f:e6:45:9c:14:8d:fb:ba:3e:5c:a3:18:15:b3:
                    d8:03:37:4d:7f:65:b8:cc:fb:0d:1e:5a:fd:bf:ad:
                    31:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D4:4C:BF:6C:E8:D6:03:A4:0C:68:EA:34:AE:77:54:B4:1C:86:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/abf701ec-494a-39e4-b346-585255e4aae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl

            X509v3 Authority Key Identifier:
                keyid:74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.245.0.0/16
                  205.215.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:2f:cf:cd:94:49:89:e5:e0:bb:cb:80:46:0d:22:34:bd:7e:
         09:bf:28:34:09:0f:f7:45:d8:1f:1c:c0:85:1c:09:16:8b:40:
         2a:5f:12:c6:40:cb:0b:bc:a5:e7:79:a3:16:8f:41:d5:53:f0:
         d8:07:5b:fe:0b:df:01:4f:4b:4c:16:59:85:70:bd:d3:88:ab:
         40:15:ea:fc:04:8c:ff:a3:ac:43:7b:67:c1:a5:8c:6f:2d:bb:
         8a:a5:33:49:3a:e6:55:b4:b5:de:ee:c7:3a:5f:ab:ce:3d:ea:
         02:d1:31:d7:3a:60:96:d1:7b:07:e0:7f:c5:ae:f0:f2:2a:67:
         7d:bb:41:93:80:02:e4:c9:f2:f8:34:35:eb:58:55:e9:8d:45:
         f8:22:91:cd:a9:dc:bf:3c:b4:47:17:09:c3:64:b0:28:37:dd:
         4b:60:ba:6f:e8:7a:8d:03:5b:6b:0f:63:c4:0f:3f:d8:4c:cb:
         7b:d4:58:3e:a1:55:3a:c2:0b:47:ba:ad:f5:88:59:54:3d:6e:
         df:31:46:c6:be:60:bc:66:0d:8f:ba:57:94:d4:09:b3:82:54:
         fe:bf:a7:28:0c:e6:59:23:74:ad:0e:8f:fa:45:e4:87:a1:5f:
         68:aa:9d:c7:af:15:32:f7:ae:58:1a:3a:ad:26:34:30:26:91:
         c2:7c:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 01:17:43 2025 by rpki-client