Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/82817994-b32e-3a32-8426-b7b2e607e1ad.roa
File:                     82817994-b32e-3a32-8426-b7b2e607e1ad.roa (raw, json)
Hash identifier:          E1rojgFtFobY+MnoFKegSJzFCNSd5l91JS1+33QeXI4=
Subject key identifier:   5A:27:39:3F:7A:2D:5E:69:0F:91:C6:14:D2:C3:89:13:96:58:31:96
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584B2496D30A48FA7BB5DEB6D680
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/82817994-b32e-3a32-8426-b7b2e607e1ad.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     40568
IP address blocks:        149.112.121.0/24 maxlen: 24
                          149.112.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:d3:0a:48:fa:7b:b5:de:b6:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=038c3200-bceb-42e0-829b-44939b152948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:1e:2b:c4:7e:b8:40:82:da:53:d7:ee:a3:
                    85:35:5c:2c:bf:97:06:04:6e:7b:d8:77:31:92:2d:
                    d3:a0:c4:cd:f6:da:12:ee:05:3f:4d:26:a9:da:1b:
                    b4:3d:da:56:ef:6a:0a:ec:65:8c:f7:ab:6f:2d:92:
                    87:eb:3c:ec:b5:ca:32:76:cf:c8:e7:d3:09:62:4c:
                    cd:f3:85:46:13:f7:c7:96:15:4c:f6:81:ca:c7:1f:
                    71:96:11:25:e2:1f:37:a3:29:2c:fb:4e:99:7f:bf:
                    29:52:73:d1:18:ef:4b:61:94:ef:1e:96:6d:6e:31:
                    36:c1:bf:f3:7c:97:40:5e:87:b8:33:36:63:a7:56:
                    13:99:3c:cb:08:86:f5:1f:7b:b2:00:b6:1b:64:83:
                    28:7f:c8:bc:ef:b7:dc:04:12:fd:f7:01:ae:75:2c:
                    4c:15:07:09:7a:69:62:17:5e:61:08:34:21:b8:48:
                    9a:19:2a:e7:1f:60:16:95:34:f9:56:0d:e6:3c:3f:
                    af:8b:d6:6f:1f:cc:d6:8b:e4:88:20:4d:98:72:0c:
                    cc:89:15:e0:e1:be:40:52:d0:41:21:9d:0f:03:3e:
                    94:c4:5a:5b:b0:e2:16:ca:67:df:80:fa:bb:80:e4:
                    7e:61:39:c6:f0:23:3a:f0:68:6e:41:6d:5a:55:cf:
                    d5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:27:39:3F:7A:2D:5E:69:0F:91:C6:14:D2:C3:89:13:96:58:31:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/82817994-b32e-3a32-8426-b7b2e607e1ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.121.0-149.112.122.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:0b:fd:d4:a7:7b:0d:47:cc:44:de:d2:f3:94:29:4a:f7:b8:
         7d:fc:9c:4c:2f:2f:6f:dd:29:a9:2c:98:19:a7:d5:ad:14:b2:
         96:a7:15:8f:02:44:37:86:73:25:34:08:aa:56:78:99:bd:e3:
         15:20:8a:a1:64:63:cc:9c:c0:8d:0e:4f:75:46:78:0c:89:c2:
         14:f9:d7:91:93:1e:f9:1e:2c:c1:d1:52:e6:16:98:d8:b3:e7:
         17:db:0b:ef:e3:ea:8a:95:36:51:8f:f2:67:61:3b:19:09:7b:
         41:4b:8e:91:54:96:9c:6b:b8:0c:a8:f7:31:56:d0:84:52:86:
         e2:43:7e:fc:a9:c4:f3:34:2f:21:bf:48:77:bd:50:b1:9a:81:
         7c:70:5e:65:a5:ea:2d:5c:f4:75:7e:03:d7:6c:30:74:62:c8:
         6c:57:71:27:78:f0:ae:55:ca:0a:bc:51:58:39:88:3f:39:af:
         d1:e3:e5:7a:d3:6d:3a:b2:35:95:f2:af:20:d9:8d:8e:62:fb:
         9a:6f:f3:46:d6:a2:18:25:7b:0b:dc:99:09:41:4d:67:41:cd:
         cc:b3:d5:be:57:03:0b:1b:2a:16:b2:b8:19:ea:f3:26:09:66:
         93:ae:5a:e6:ad:e2:e0:78:7a:96:30:4d:98:e2:29:c7:c2:d4:
         57:21:1b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 07:12:29 2025 by rpki-client