Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/3eff7925-cb5c-39cc-b9b9-04fa31cca8e9.roa
File:                     3eff7925-cb5c-39cc-b9b9-04fa31cca8e9.roa (raw, json)
Hash identifier:          HLJo5HiCvtM9aZWk0/lCPiqbNJGWek/KsK6O3DMpGu4=
Subject key identifier:   7A:46:86:D5:A6:3E:03:9C:59:1C:D8:19:49:47:1B:FD:5F:65:71:57
Certificate issuer:       /CN=ee9986fc-001f-49c5-949c-333fec29fe66
Certificate serial:       010D0C9F4328584AD59633684891ADCDFC408500
Authority key identifier: 2C:6A:93:4E:58:18:37:EB:09:24:3D:FC:9A:24:D0:3A:36:A9:59:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/3eff7925-cb5c-39cc-b9b9-04fa31cca8e9.roa
Signing time:             Tue 12 Aug 2025 17:50:35 +0000
ROA not before:           Tue 12 Aug 2025 17:50:35 +0000
ROA not after:            Mon 10 Nov 2025 18:50:35 +0000
asID:                     8075
IP address blocks:        170.170.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:96:33:68:48:91:ad:cd:fc:40:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee9986fc-001f-49c5-949c-333fec29fe66
        Validity
            Not Before: Aug 12 17:50:35 2025 GMT
            Not After : Nov 10 18:50:35 2025 GMT
        Subject: CN=1059b681-2b0f-4c78-8210-72ebe9c6608c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c0:ba:84:0d:7d:20:8c:d0:68:5e:41:53:b8:
                    91:5c:42:e2:ae:4c:2e:2c:27:d9:e1:75:7c:5e:32:
                    27:9d:b0:63:2c:f8:5c:88:aa:c8:1c:f9:ab:1a:8e:
                    c2:da:98:c9:c0:50:1c:5d:51:58:df:29:cd:0d:05:
                    fb:3c:e1:f1:cb:2a:d4:b1:1b:93:c3:5b:a7:f7:69:
                    5b:2e:8b:05:80:5e:2e:b3:ef:47:bc:be:70:06:77:
                    10:e0:62:ec:74:3d:db:94:b5:dd:aa:1d:09:1c:92:
                    04:42:92:f3:79:aa:cb:8f:4a:83:3a:4c:13:a4:e9:
                    37:84:82:6f:f1:6a:93:26:68:7a:bb:96:aa:13:2a:
                    ba:b7:89:d7:9f:8d:46:6f:80:0c:d3:03:53:0f:b3:
                    cf:bd:ba:4e:a2:5e:3a:98:c0:2d:80:19:5b:b4:a3:
                    ba:47:ea:ed:f9:c6:e5:aa:61:83:64:d6:d6:1c:4f:
                    37:1a:7e:bc:e2:61:3b:f0:6d:ba:ad:4e:e6:f6:f5:
                    c6:b4:35:56:d6:f5:66:92:12:cf:0b:90:a8:b2:b8:
                    ce:8a:a2:a4:86:2b:50:98:24:38:2f:66:90:af:ed:
                    3e:9f:ca:a5:3c:cd:4e:ed:c5:bc:20:8c:4a:b6:17:
                    43:88:f6:78:c9:6c:2e:7b:df:ec:b2:c4:1f:03:66:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:46:86:D5:A6:3E:03:9C:59:1C:D8:19:49:47:1B:FD:5F:65:71:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/3eff7925-cb5c-39cc-b9b9-04fa31cca8e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66/ee9986fc-001f-49c5-949c-333fec29fe66.crl

            X509v3 Authority Key Identifier:
                keyid:2C:6A:93:4E:58:18:37:EB:09:24:3D:FC:9A:24:D0:3A:36:A9:59:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee9986fc-001f-49c5-949c-333fec29fe66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.170.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:39:c2:48:68:a2:2a:53:c9:30:c8:99:f5:a9:c5:12:a7:81:
         71:b6:64:ef:ee:a2:b9:ea:b2:65:f4:e4:a6:d9:b6:f1:ae:89:
         c9:b7:77:9d:84:f5:ee:bb:56:93:dd:f9:c1:40:78:95:a8:8c:
         1b:52:0c:86:bc:4a:d4:f1:22:02:fa:df:0a:1c:2c:c8:6e:36:
         6b:7e:ed:ba:a7:51:ff:69:d5:52:3c:a2:99:24:ec:99:88:ad:
         76:74:51:7e:54:24:62:29:58:d0:32:28:23:82:a6:dc:3c:0b:
         a7:93:45:eb:cc:64:66:fa:92:14:d9:98:bd:94:f4:82:1e:fb:
         2f:6c:d8:92:ee:dd:c5:1f:d4:b0:a5:32:0d:9a:f6:33:d9:da:
         3f:58:4c:ec:54:cb:f0:a8:0e:dc:fe:a1:17:07:c3:57:50:d2:
         21:71:c3:94:7b:0a:47:79:d4:8d:cb:0e:2f:c5:d8:cb:16:b9:
         86:e3:20:79:32:84:d2:9d:39:ec:8e:5f:f0:92:29:57:20:bf:
         64:98:36:67:5e:76:6d:1a:75:e9:ce:76:21:8c:4e:3c:ee:24:
         49:b1:41:81:d7:59:37:45:3b:19:b2:e7:77:f3:40:cd:e6:70:
         3e:d0:45:1f:27:07:54:80:20:cc:18:81:05:3c:21:6a:e9:1c:
         34:f8:e1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 05:22:09 2025 by rpki-client