Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/da6628f1-3dc0-3fae-9b65-f1adfb90d694.roa
File:                     da6628f1-3dc0-3fae-9b65-f1adfb90d694.roa (raw, json)
Hash identifier:          O2eDWXfFjBrL1tyLaX1xEnsGQEX7ZVShojaHMTOoSUw=
Subject key identifier:   11:B9:86:5A:25:4D:4A:74:B8:7A:04:F1:8C:A8:BE:D2:79:02:D5:8B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE6618B430F497343E877C540
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/da6628f1-3dc0-3fae-9b65-f1adfb90d694.roa
Signing time:             Mon 18 Aug 2025 18:13:13 +0000
ROA not before:           Mon 18 Aug 2025 18:13:13 +0000
ROA not after:            Sun 16 Nov 2025 19:13:13 +0000
asID:                     31898
IP address blocks:        151.145.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:61:8b:43:0f:49:73:43:e8:77:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 18:13:13 2025 GMT
            Not After : Nov 16 19:13:13 2025 GMT
        Subject: CN=d15ddea0-641e-4222-b643-c377702a1c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:2e:2d:b6:49:78:21:1f:ce:9d:09:ed:71:
                    1c:58:3d:33:b6:cc:a3:8d:4f:fa:64:ad:36:82:5d:
                    00:91:f0:65:ea:58:52:4b:e3:46:f0:8f:c5:b8:04:
                    71:0a:55:b1:b7:19:6b:fe:5a:78:5d:8f:f1:a6:73:
                    15:82:b0:f5:44:20:2f:65:ab:14:82:fb:7f:9c:44:
                    af:de:90:ad:66:9a:bd:ef:ba:cb:b0:de:61:b3:27:
                    d3:b1:48:ae:6e:a5:9b:2c:a4:0e:20:ab:9e:b8:80:
                    b5:dc:03:89:27:8a:87:d6:db:0e:a4:cc:bb:99:96:
                    e4:7e:b6:35:61:a3:64:ac:65:60:17:cc:4a:01:e6:
                    ed:c0:f6:8c:fa:b9:64:d2:a5:24:88:39:d3:bb:e1:
                    80:bd:8f:c4:09:31:45:4c:03:b7:db:3c:69:df:bb:
                    2d:be:dc:e1:12:b9:dd:4c:ce:8c:12:55:4e:26:4b:
                    d2:54:ed:60:37:18:6d:8f:0e:e8:f6:46:0c:27:ef:
                    8c:fb:b6:c9:69:c6:93:3f:f0:39:f3:92:d4:62:0c:
                    be:ee:bb:ac:60:ad:d6:e2:ef:db:3f:e1:06:3f:11:
                    e1:2e:16:4d:53:7f:f7:4c:73:3f:7c:71:bd:a7:67:
                    ea:39:a7:d7:4a:99:34:87:ce:88:fa:93:ef:4a:70:
                    6c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B9:86:5A:25:4D:4A:74:B8:7A:04:F1:8C:A8:BE:D2:79:02:D5:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/da6628f1-3dc0-3fae-9b65-f1adfb90d694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.145.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:52:00:06:c2:58:bc:6f:d5:61:20:2a:98:74:f6:97:80:84:
         c9:bc:01:0b:ed:d2:e4:5f:32:90:d8:4d:5d:e3:e0:c1:f3:d9:
         44:1a:7f:2f:ce:cc:5a:ae:87:d9:81:ac:f5:a2:84:33:7a:97:
         ee:23:89:91:36:35:5f:7c:64:64:7e:39:0c:d9:1a:75:bf:fc:
         8f:7f:7b:46:f9:e7:18:6f:96:e9:23:e2:17:26:09:c1:af:6d:
         71:ef:37:3d:4e:b8:5c:65:f9:b9:1c:92:de:94:5c:85:25:a6:
         76:e9:47:13:f3:a4:a0:3b:90:64:43:19:bb:3d:63:8e:e0:30:
         e2:c3:d8:1e:45:f2:0b:0a:a4:4f:7d:fb:ca:ec:4c:6e:ab:68:
         83:eb:16:4d:94:10:d9:e8:2a:49:42:42:d0:38:6c:b8:41:f3:
         48:0a:a0:3b:cd:47:26:7c:a4:66:f3:4c:ee:3d:49:5c:39:a5:
         10:7b:3b:88:9b:77:51:06:24:b4:30:28:eb:ba:77:f2:ba:bc:
         ec:c9:ec:6a:fd:97:dd:d6:4c:e8:9c:cc:e5:78:3f:d4:b6:f1:
         6c:c2:6b:cb:d7:fa:a1:9e:58:96:d3:6e:98:d2:61:35:35:a6:
         47:06:e9:44:64:d7:2e:20:f1:48:88:14:28:0f:70:21:e9:ec:
         12:dc:40:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:44:15 2025 by rpki-client