Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e/4a1317b3-2257-3278-81c4-1ec5cb08a4d8.roa
File:                     4a1317b3-2257-3278-81c4-1ec5cb08a4d8.roa (raw, json)
Hash identifier:          QlT3951fOwqtF7vGW2UuZGyd48aArs+MRGVztjQwuqg=
Subject key identifier:   42:63:CC:02:C2:35:E6:BA:AA:38:1A:D7:C4:30:A4:9B:19:DE:F6:C0
Certificate issuer:       /CN=f5fedd98-99a2-4e17-b0a9-6871061bbe5e
Certificate serial:       010D0C9F4328584AF9D3753CAE498EE440A88E00
Authority key identifier: 90:16:F1:4E:0B:EF:C1:73:26:8B:12:A4:1E:FB:3E:0D:CF:72:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e/4a1317b3-2257-3278-81c4-1ec5cb08a4d8.roa
Signing time:             Mon 25 Aug 2025 17:23:06 +0000
ROA not before:           Mon 25 Aug 2025 17:23:06 +0000
ROA not after:            Sun 23 Nov 2025 18:23:06 +0000
asID:                     10753
IP address blocks:        170.39.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e/f5fedd98-99a2-4e17-b0a9-6871061bbe5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e/f5fedd98-99a2-4e17-b0a9-6871061bbe5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:d3:75:3c:ae:49:8e:e4:40:a8:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5fedd98-99a2-4e17-b0a9-6871061bbe5e
        Validity
            Not Before: Aug 25 17:23:06 2025 GMT
            Not After : Nov 23 18:23:06 2025 GMT
        Subject: CN=8c23c60c-f95a-4774-a728-9731b07b701e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d5:d9:3f:81:52:d8:b5:89:c6:2b:02:ab:fa:
                    14:d6:c9:48:f9:3b:22:11:f7:3c:28:14:58:8a:f9:
                    7c:25:37:51:20:d6:64:26:c8:c9:7b:b2:52:fe:c2:
                    8e:ed:5d:30:3c:db:28:39:ad:24:df:71:6b:8a:61:
                    f7:54:69:95:d1:9f:d6:4f:04:83:d2:c3:46:ed:47:
                    e4:63:3e:46:d3:78:8d:a2:ed:25:ac:9d:96:cd:1e:
                    a2:c1:e4:9b:e6:e2:15:64:bf:59:94:66:ed:4b:96:
                    04:b4:e6:a1:44:48:d5:9b:b2:a2:99:71:ad:9c:a4:
                    54:3e:76:2c:fe:1c:c2:90:9b:60:d5:b6:1d:3e:ec:
                    c9:8a:40:88:ec:e0:d9:d5:16:78:02:0e:8d:b3:8f:
                    73:05:27:55:c0:9a:fb:41:12:87:8d:a7:a2:83:2a:
                    eb:ac:25:4b:05:12:bd:1f:38:99:e8:3b:a3:4c:79:
                    63:e8:3b:c4:de:10:71:99:77:6f:16:16:0c:39:40:
                    06:ba:2c:aa:4a:b2:7e:33:23:1b:87:bd:5d:b9:50:
                    0c:7e:6e:be:6a:02:2d:fc:24:68:6a:fb:a7:6e:31:
                    d7:ad:f9:b2:7f:db:41:2e:a1:15:54:be:2c:bb:7a:
                    13:43:2a:81:88:cf:50:ac:af:b5:01:bc:f3:e8:76:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:63:CC:02:C2:35:E6:BA:AA:38:1A:D7:C4:30:A4:9B:19:DE:F6:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e/4a1317b3-2257-3278-81c4-1ec5cb08a4d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e/f5fedd98-99a2-4e17-b0a9-6871061bbe5e.crl

            X509v3 Authority Key Identifier:
                keyid:90:16:F1:4E:0B:EF:C1:73:26:8B:12:A4:1E:FB:3E:0D:CF:72:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5fedd98-99a2-4e17-b0a9-6871061bbe5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:bb:40:6e:35:60:68:83:cf:31:a8:86:63:f4:4a:9e:88:cc:
         54:64:fa:49:ba:62:56:69:72:bc:62:9f:66:36:1e:e8:44:54:
         22:df:92:83:22:97:5c:10:10:8f:01:2d:9a:c7:ac:cf:dd:91:
         8d:64:6e:e1:d9:23:56:9a:41:9b:f1:fa:14:7f:21:e4:a6:16:
         85:83:66:4d:6d:c6:a4:8c:45:40:f0:2e:7e:5c:1c:4c:41:a6:
         de:af:fb:8e:21:d5:9f:20:86:0c:f4:bf:8c:f2:08:0f:2c:51:
         c2:e0:3c:01:87:14:03:2c:71:55:19:90:21:e6:fb:b1:55:42:
         e8:cd:4d:74:06:78:57:7f:0c:a8:47:5b:6d:f3:b9:fa:23:d3:
         fb:0c:f2:b4:2a:c3:f0:72:3a:ef:1b:c7:23:92:a6:c2:38:98:
         b3:c6:34:ad:01:69:32:96:45:43:07:8e:0c:12:55:e6:e5:fd:
         7f:55:13:fd:97:35:58:86:ec:dc:19:25:95:3e:1d:0c:bd:18:
         77:88:c8:ad:cf:c8:75:1d:5c:97:a1:44:9b:80:70:70:e6:73:
         a5:71:28:1c:29:16:45:57:52:eb:dd:2e:df:97:e9:43:45:1f:
         bf:a7:17:ff:e0:c5:f6:7a:54:bb:8d:46:81:89:f8:fa:6f:f5:
         fa:90:02:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 17:01:03 2025 by rpki-client