Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/5c53ae5b-7530-3f5b-a004-33f5575ea34b.roa
File:                     5c53ae5b-7530-3f5b-a004-33f5575ea34b.roa (raw, json)
Hash identifier:          fwk0sZsQtd52UvuyPwlquU6g8OqvPTAscf76/QX/cyQ=
Subject key identifier:   7F:B5:8B:A4:04:7B:03:2C:59:8C:5E:4A:FB:21:AE:24:8B:EF:82:B5
Certificate issuer:       /CN=f08438f2-f343-4b2c-b0be-ac56b734d48d
Certificate serial:       010D0C9F4328584AFAB680A12177CE707F672280
Authority key identifier: 0C:19:B9:07:16:CE:1B:F8:24:47:E0:05:9C:02:C0:30:96:A6:17:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/5c53ae5b-7530-3f5b-a004-33f5575ea34b.roa
Signing time:             Tue 26 Aug 2025 01:00:32 +0000
ROA not before:           Tue 26 Aug 2025 01:00:32 +0000
ROA not after:            Mon 24 Nov 2025 02:00:32 +0000
asID:                     17303
IP address blocks:        185.212.4.0/24 maxlen: 24
                          195.85.116.0/24 maxlen: 24
                          206.55.212.0/24 maxlen: 24
                          208.67.108.0/22 maxlen: 22
                          216.250.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fa:b6:80:a1:21:77:ce:70:7f:67:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f08438f2-f343-4b2c-b0be-ac56b734d48d
        Validity
            Not Before: Aug 26 01:00:32 2025 GMT
            Not After : Nov 24 02:00:32 2025 GMT
        Subject: CN=2c264a83-1d65-484c-b71b-93b76e211324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ef:62:ce:bf:c9:ad:50:e3:e5:02:d5:4c:8f:
                    df:96:d1:0d:96:c1:4b:a6:6b:c9:1d:c6:94:4a:37:
                    81:07:85:c4:9d:1c:c7:15:e2:a0:eb:ae:7a:37:0b:
                    97:e5:52:f1:68:2e:5a:e0:ec:4f:81:8c:1e:f6:bd:
                    e0:bd:5e:9d:07:c4:7d:cd:e4:60:bf:68:30:7f:c0:
                    84:30:a5:a3:f1:b8:b3:c3:98:d7:49:72:e1:f8:1c:
                    bc:a8:68:2a:30:f1:3e:ad:41:1f:e2:99:af:ab:73:
                    1c:3e:df:29:67:e7:68:54:0b:63:a9:aa:54:a9:18:
                    9a:42:b5:f8:76:89:31:d2:dd:fd:e8:4c:e2:cc:b9:
                    95:44:74:a5:ca:1c:86:a5:74:e6:86:95:b7:74:18:
                    4f:4f:66:8c:dc:6d:b2:4c:fd:56:fa:61:b0:78:38:
                    88:1c:29:27:d8:13:82:e3:88:48:fe:b8:e7:5c:49:
                    d3:2a:18:c1:eb:2b:da:0d:ca:fd:e5:bc:10:97:d1:
                    d0:e1:06:92:c9:00:fb:df:d9:00:df:24:51:7b:4b:
                    74:08:ce:a7:34:b2:b4:14:92:ae:a1:e6:48:b1:3b:
                    05:ba:50:98:e6:7a:94:d2:12:a9:6b:c4:33:75:e0:
                    03:26:af:a2:7d:7f:6e:85:eb:58:2a:fc:7a:f1:b2:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B5:8B:A4:04:7B:03:2C:59:8C:5E:4A:FB:21:AE:24:8B:EF:82:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/5c53ae5b-7530-3f5b-a004-33f5575ea34b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d/f08438f2-f343-4b2c-b0be-ac56b734d48d.crl

            X509v3 Authority Key Identifier:
                keyid:0C:19:B9:07:16:CE:1B:F8:24:47:E0:05:9C:02:C0:30:96:A6:17:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f08438f2-f343-4b2c-b0be-ac56b734d48d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.4.0/24
                  195.85.116.0/24
                  206.55.212.0/24
                  208.67.108.0/22
                  216.250.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:af:a5:32:76:91:55:1b:e6:1a:e1:c3:f6:76:d4:fd:20:ec:
         19:fc:41:89:53:9f:fa:08:98:39:49:26:41:78:88:e8:9e:fa:
         12:e7:0c:58:fc:a9:91:af:f5:e8:7f:f4:38:60:a8:57:85:5e:
         4b:19:12:bc:bf:d0:49:9a:d0:f6:fd:05:11:84:8a:1c:f4:9b:
         d4:6b:c8:92:33:25:93:a4:44:99:44:dd:16:b0:3f:de:c2:5f:
         2b:04:6e:9e:a7:4b:f8:b7:07:76:e2:bc:2d:bc:86:49:33:f7:
         39:f0:03:fe:dc:38:d5:17:dc:42:f1:ef:ec:98:00:03:03:4f:
         1b:b4:fb:0f:4b:08:82:23:c9:a9:03:cc:fa:54:15:5c:9f:97:
         01:26:da:10:d8:91:04:80:f6:ce:f4:21:4e:32:7f:34:c4:71:
         ab:97:c5:56:87:b6:50:91:8b:f3:91:48:bb:3d:4f:23:8e:e3:
         b4:26:d1:ed:7a:19:1c:1c:1e:67:98:9d:88:1b:62:b8:c3:ca:
         41:9b:28:02:56:f9:40:03:57:bc:ce:48:72:af:e1:f3:a2:38:
         3d:59:df:0b:c6:5d:84:f8:fb:22:d8:b8:65:f7:9c:36:31:d1:
         9e:ea:20:c0:df:99:4f:1f:d0:43:8b:b4:c6:fd:01:e7:ed:66:
         11:36:d7:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 17 00:44:14 2025 by rpki-client