Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/579b1e72-d7c4-3295-a82b-7730fc0dbf25.roa
File:                     579b1e72-d7c4-3295-a82b-7730fc0dbf25.roa (raw, json)
Hash identifier:          gM+PA8LVNM+KNjfK2CXQKQlhm5Zu0gT896jfe9+qZmI=
Subject key identifier:   E5:6F:03:F2:9F:FD:FF:A2:4C:D9:92:0E:D7:7C:AC:7D:68:60:FB:CB
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE977F7EFDB39B896365CD300
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/579b1e72-d7c4-3295-a82b-7730fc0dbf25.roa
Signing time:             Tue 19 Aug 2025 20:45:50 +0000
ROA not before:           Tue 19 Aug 2025 20:45:50 +0000
ROA not after:            Mon 17 Nov 2025 21:45:50 +0000
asID:                     31898
IP address blocks:        168.110.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:77:f7:ef:db:39:b8:96:36:5c:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 19 20:45:50 2025 GMT
            Not After : Nov 17 21:45:50 2025 GMT
        Subject: CN=14fb5824-e311-4054-b9b0-9e69e93a2b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:5d:0b:8a:0a:d1:e7:af:1a:dc:bb:93:7f:
                    74:ee:ef:ca:9e:94:6d:40:53:31:2a:7f:b8:c6:b7:
                    e8:e3:a1:c0:b9:cf:8e:71:cb:9e:44:ec:f4:28:d6:
                    10:96:2b:c3:fa:8c:76:66:24:4b:24:1c:6d:1b:9f:
                    dc:d0:5b:08:bb:93:43:cb:95:ec:a0:06:20:bf:22:
                    94:43:e7:18:d3:c7:2d:9c:9e:0c:68:31:07:32:86:
                    86:fa:46:81:e4:68:6d:b6:ae:a5:9e:85:b7:de:da:
                    00:d7:20:8f:59:cb:f1:63:a1:02:92:c2:f6:49:b6:
                    16:f4:6b:d3:cf:65:96:50:3b:23:c4:25:fe:bb:72:
                    d6:49:da:8b:89:b5:88:aa:22:44:08:55:46:76:5d:
                    5a:c3:8e:45:b2:6f:2b:29:c4:e5:21:f5:9e:b3:48:
                    c8:b5:e0:f5:67:7a:22:37:20:22:02:80:54:33:32:
                    e4:55:74:a0:c2:87:9e:f3:d2:64:ec:31:82:2f:29:
                    7f:2d:94:a6:eb:d5:01:20:1a:94:14:ca:ba:6f:99:
                    cd:35:5b:d8:40:e9:1b:5e:8b:27:e6:ce:00:68:b0:
                    2a:77:b7:31:80:80:c2:e6:ea:cb:2e:3f:73:14:53:
                    7f:f9:68:b0:d1:e6:3f:cf:c6:5c:13:41:d9:e0:78:
                    60:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6F:03:F2:9F:FD:FF:A2:4C:D9:92:0E:D7:7C:AC:7D:68:60:FB:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/579b1e72-d7c4-3295-a82b-7730fc0dbf25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.110.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:17:f6:3f:e5:b7:0a:31:4b:12:5f:58:0d:be:bf:f0:ae:69:
         7d:08:4c:ae:89:cf:6d:d9:9d:ff:ee:3c:e7:b1:10:ce:74:35:
         c9:0b:af:27:09:70:57:ad:1a:ca:4b:7c:89:a7:d9:69:17:89:
         4d:70:1e:06:8d:e7:40:2f:ec:2e:4b:c8:94:92:5d:a1:e2:29:
         1c:c5:9d:67:2a:9d:7b:d4:62:94:00:33:b2:1f:9d:cd:a9:9e:
         35:a7:57:78:10:f4:c8:58:9a:a1:bc:12:8e:98:5b:3e:39:12:
         15:78:cc:45:13:a6:e4:34:32:34:09:2b:0d:1a:6c:68:80:3c:
         bf:af:de:24:18:de:cc:f3:db:87:a4:74:69:7e:01:90:a4:ea:
         5b:ae:96:9d:0f:30:bf:47:86:a2:31:9d:5a:e8:8c:17:fd:49:
         89:97:31:3c:12:3e:35:4b:cf:9d:67:9e:0d:fe:9b:2c:ed:63:
         f2:cc:0f:17:7e:84:ce:0d:72:e4:d1:02:b2:11:16:3a:c4:73:
         97:48:36:59:47:45:ef:53:07:b4:7d:a5:3f:c1:8f:17:50:ca:
         a8:62:18:96:9d:06:37:06:73:be:c3:5e:2e:37:b7:93:9e:a1:
         83:0d:07:1e:44:44:9c:1d:63:16:5e:91:3b:7e:83:92:98:eb:
         70:69:65:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:44:21 2025 by rpki-client