Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/dc3e2c0e-a603-3db1-beb9-a47ddfd0b57b.roa
File:                     dc3e2c0e-a603-3db1-beb9-a47ddfd0b57b.roa (raw, json)
Hash identifier:          DPkOEb9fAU7cMezUcT4u5X3SXBDpZ9KFnZnUeikdyJ0=
Subject key identifier:   0F:20:A7:04:63:87:65:D3:40:E5:33:74:02:5B:38:F2:2F:CD:FE:37
Certificate issuer:       /CN=11111c75-ef67-41bd-b074-4c401bf74ccd
Certificate serial:       010D0C9F4328584AD23BA5E2C9A0354C562EEF80
Authority key identifier: 29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/dc3e2c0e-a603-3db1-beb9-a47ddfd0b57b.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     8047
IP address blocks:        65.74.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:a5:e2:c9:a0:35:4c:56:2e:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11111c75-ef67-41bd-b074-4c401bf74ccd
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=0dec7baf-9a5b-4492-ab7f-865d5b3b587b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c5:c8:91:93:a2:c6:17:fa:2f:3a:04:74:3b:
                    c3:62:56:e5:72:d4:8a:e6:a9:33:1d:b3:29:a2:69:
                    1e:f4:9e:19:6d:57:69:a6:d3:04:cd:4d:12:47:d9:
                    3c:0e:de:f3:ae:83:c0:8f:88:a5:c9:7c:66:6d:a4:
                    47:00:2d:52:5a:e8:95:f2:0f:f0:78:e7:e0:e9:ed:
                    ac:6d:bf:d4:59:e2:9e:da:37:f5:e7:71:7a:aa:35:
                    47:fc:1b:11:9e:cf:1d:62:38:45:54:ae:e0:26:b4:
                    04:92:56:e2:33:47:ec:98:83:99:8b:7d:fe:41:fd:
                    e1:77:0f:8b:ee:59:ce:04:01:b0:08:cd:8f:b7:a3:
                    cc:49:68:16:93:ed:a4:d6:9b:62:d1:72:47:15:f0:
                    a1:5e:5e:5d:4b:d7:9b:94:87:24:f4:09:05:79:ce:
                    71:c0:85:1c:57:b6:6a:d8:90:a4:de:c6:38:56:72:
                    a6:5b:f8:09:d9:4c:ae:fe:17:63:8b:72:f7:dc:93:
                    b4:5d:a1:10:f2:2d:cd:5e:73:87:47:43:74:5e:93:
                    2e:09:60:ba:fa:57:85:25:c5:9d:f4:a2:4b:78:27:
                    e0:3f:53:40:3b:e9:7b:2c:64:9b:45:11:84:73:64:
                    f7:e7:f5:12:6e:b1:af:42:7f:1c:97:cd:3f:e3:00:
                    5b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:20:A7:04:63:87:65:D3:40:E5:33:74:02:5B:38:F2:2F:CD:FE:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/dc3e2c0e-a603-3db1-beb9-a47ddfd0b57b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl

            X509v3 Authority Key Identifier:
                keyid:29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.74.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:35:80:59:54:60:45:d3:07:7b:48:ef:6f:bd:cf:ce:6a:5b:
         fe:1f:37:ba:ca:4e:79:b3:25:3f:20:b9:3e:c8:14:37:95:ab:
         da:0b:aa:c7:68:49:28:5e:74:e6:0b:0a:e9:02:05:49:a9:15:
         f8:2e:99:2d:dd:6a:fe:c7:ea:68:4c:82:db:6f:7b:2d:78:74:
         69:92:8f:2d:7d:fd:1e:ed:f4:59:30:c2:55:f7:80:79:35:fd:
         88:ab:36:4e:9d:63:d2:7a:13:67:11:3a:ee:ca:99:e2:74:54:
         b2:0d:47:84:7e:38:f8:aa:eb:d5:0b:14:d6:5a:60:84:34:1a:
         9c:73:41:72:14:7d:d2:49:f4:62:eb:b0:eb:98:2d:d7:fb:1f:
         43:b4:e7:3b:6e:b9:14:e7:ef:1a:f9:d8:b8:4c:f6:ca:e1:38:
         6d:03:bd:92:fd:15:6d:d6:ff:74:3d:80:8a:e5:e4:38:96:a9:
         bb:22:48:18:22:12:30:d8:52:d4:4d:5c:27:8f:f7:2e:1e:7f:
         5f:62:62:ec:19:66:1b:2e:48:4d:bd:12:cd:aa:af:fc:46:14:
         ba:96:29:31:87:4b:36:46:d1:da:8a:e8:97:10:97:1a:f9:41:
         1d:a0:dd:62:bd:65:63:84:02:11:8d:a5:ac:53:8e:98:a3:39:
         8c:fe:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:36:16 2025 by rpki-client