Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cfdc02a7-dd19-37ba-86fb-ab7a6659e646.roa
File:                     cfdc02a7-dd19-37ba-86fb-ab7a6659e646.roa (raw, json)
Hash identifier:          7qr5BtjmsjRne8BOYJxgDwgl8FUk4elUgZwlz3OkAo0=
Subject key identifier:   30:CA:6B:DC:A7:91:D6:33:B2:1C:23:15:A5:0A:E7:AF:48:9D:CC:EC
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584ADE5973F3EAC3AD076B3B3780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cfdc02a7-dd19-37ba-86fb-ab7a6659e646.roa
Signing time:             Fri 15 Aug 2025 21:10:27 +0000
ROA not before:           Fri 15 Aug 2025 21:10:27 +0000
ROA not after:            Thu 13 Nov 2025 22:10:27 +0000
asID:                     31898
IP address blocks:        140.245.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:59:73:f3:ea:c3:ad:07:6b:3b:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 15 21:10:27 2025 GMT
            Not After : Nov 13 22:10:27 2025 GMT
        Subject: CN=3776508d-f107-4404-a47b-927bfad22d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:ed:a1:f1:05:60:a8:c5:85:b5:50:f2:af:
                    4a:9f:32:f3:95:38:cd:e8:35:1b:0f:38:20:0c:21:
                    65:3b:c8:2f:48:49:75:fc:a5:42:eb:c7:6c:11:62:
                    1b:c7:1b:1c:56:b5:9e:b2:fc:0c:3d:1c:29:2f:10:
                    e5:82:55:a1:23:f7:38:9f:46:ef:ce:97:80:20:ee:
                    f0:15:c6:db:af:b3:da:e7:ea:da:18:17:a5:0e:18:
                    a2:45:12:19:1b:6c:01:f6:5b:d9:9d:98:f1:82:10:
                    a8:96:39:ff:5b:ff:de:64:d4:36:c1:1b:23:ae:9f:
                    5a:60:3d:ed:cd:f4:03:f9:a4:fa:35:3f:3e:e6:83:
                    84:b9:83:90:c2:0d:1f:7d:c3:e1:81:99:76:93:73:
                    61:5a:ed:47:30:9c:72:da:23:71:e7:f0:be:ac:58:
                    5a:5e:e4:a5:27:f6:dc:9e:ec:69:a4:27:07:2d:81:
                    36:6a:b2:59:99:c5:95:6b:78:2a:15:71:2f:f2:ab:
                    63:1c:e6:45:1d:dd:8d:16:b3:ae:f0:a6:bb:b2:11:
                    08:18:59:3a:ce:7b:4e:81:a3:27:be:1a:99:b2:d0:
                    ed:70:7f:f2:4c:ab:a4:40:41:03:49:18:f8:bf:2b:
                    3a:12:60:fc:99:85:f2:f6:2d:f1:80:3b:f5:e2:b5:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CA:6B:DC:A7:91:D6:33:B2:1C:23:15:A5:0A:E7:AF:48:9D:CC:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cfdc02a7-dd19-37ba-86fb-ab7a6659e646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.245.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ef:bd:33:70:7e:31:b7:53:08:1e:a6:07:1d:49:8a:87:91:
         8d:9f:a8:d6:dd:b0:a2:8d:a0:ea:8a:e3:1c:e2:ce:2f:d2:b2:
         88:b8:43:08:07:6c:50:66:f8:61:cd:97:ad:74:fb:05:ba:46:
         02:b8:51:6d:40:e3:d6:59:bb:1e:7a:e7:7c:43:be:7a:ea:11:
         2c:b2:4f:12:85:4c:f1:84:85:ea:0e:7a:f7:87:08:70:26:30:
         5c:d0:9e:59:98:68:5c:d0:bd:42:cb:ca:fc:93:fd:bc:d5:28:
         77:d7:d6:62:58:5b:96:fc:34:f2:9d:71:a1:1b:03:2c:1f:b1:
         ae:2a:73:c2:4e:f7:03:20:66:2a:cb:36:c2:4b:d9:cf:06:03:
         bb:68:04:68:f1:ce:a8:38:85:41:c3:fa:5e:57:9e:93:bd:cb:
         34:72:b8:4f:b0:39:06:a2:80:59:f3:48:85:bd:72:0b:27:d9:
         aa:18:1b:28:e1:9c:7f:9e:23:a4:7a:7c:9a:28:24:9b:c0:5b:
         7c:01:cf:30:bd:3f:ab:e9:a4:c5:95:f8:24:8c:88:ae:bc:23:
         a1:f3:f8:f1:6c:95:19:3d:17:c0:07:20:b2:10:23:3e:e8:dc:
         79:7f:29:4c:dd:8e:46:27:5d:e3:bf:6f:8e:59:83:ec:4e:43:
         65:31:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:42:47 2025 by rpki-client