Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/6b5f7617-1a95-3d1b-ad32-758fc7bfc821.roa
File:                     6b5f7617-1a95-3d1b-ad32-758fc7bfc821.roa (raw, json)
Hash identifier:          EMGVIrGddACYJYuqIq1YhN/W06O5TVWIC4KufIIbI4s=
Subject key identifier:   EA:C7:3E:7F:3E:8C:F1:5D:D6:BA:CB:F3:58:E6:F4:A6:25:89:F5:30
Certificate issuer:       /CN=233d8eef-51df-487b-9edb-f16ba403f442
Certificate serial:       010D0C9F4328584ACE0B943EFC616E161ABDD440
Authority key identifier: 56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/6b5f7617-1a95-3d1b-ad32-758fc7bfc821.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     22652
IP address blocks:        192.102.255.0/24 maxlen: 24
                          2607:3380::/40 maxlen: 40
                          2607:3380:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:94:3e:fc:61:6e:16:1a:bd:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d8eef-51df-487b-9edb-f16ba403f442
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=04ff0818-bca7-41ce-9d5e-49a9cb457d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fc:5c:7f:59:f2:96:0a:e3:ae:b1:f8:b2:8a:
                    63:90:58:dc:2f:84:6a:8e:a9:ff:79:f4:0c:64:4a:
                    d4:9f:84:96:3f:3c:b4:db:6e:10:4b:41:f4:64:e0:
                    9e:8e:81:4c:bd:a6:15:18:e9:c0:0e:a7:4a:cb:3b:
                    f9:04:c0:7d:53:9f:63:e3:65:2e:75:76:1e:6b:4f:
                    43:3e:25:13:74:e4:03:bd:8b:58:aa:de:36:4e:11:
                    c3:9d:9c:04:81:d5:a9:b1:b1:c7:33:19:1c:4c:1c:
                    6d:72:56:10:fb:87:9f:e6:1e:75:fe:e4:50:6c:50:
                    59:73:0c:f3:5d:04:a6:df:ba:95:d2:4b:8a:3a:0c:
                    d6:ff:30:a3:01:69:4d:06:33:6f:72:e4:1a:7c:39:
                    45:a7:02:85:58:8d:f8:12:60:8d:4a:34:b5:c4:7a:
                    7b:27:f1:9d:19:4c:20:93:5f:2a:e2:8e:6f:a5:48:
                    d9:aa:4f:9c:9a:08:90:8b:b1:f1:23:90:ae:74:36:
                    4b:a7:65:de:b9:66:27:63:e4:a9:40:dc:4a:dd:b3:
                    5e:cd:d1:11:e9:16:46:20:cd:a1:e2:20:1c:a5:34:
                    38:5c:ab:40:04:9d:ff:6d:87:65:7f:80:04:4f:0e:
                    7f:93:68:8f:e3:9e:9f:0c:21:65:de:2f:53:11:94:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C7:3E:7F:3E:8C:F1:5D:D6:BA:CB:F3:58:E6:F4:A6:25:89:F5:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/6b5f7617-1a95-3d1b-ad32-758fc7bfc821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl

            X509v3 Authority Key Identifier:
                keyid:56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.255.0/24
                IPv6:
                  2607:3380::/40
                  2607:3380:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:4a:f4:32:14:30:61:e1:09:19:95:cd:fc:6f:5e:72:d2:7b:
         94:fc:74:2f:29:f3:df:f9:eb:d4:f2:5d:ca:85:8e:9c:58:ca:
         5e:64:ed:47:da:33:cf:01:a0:c5:08:03:ac:31:1b:3f:66:6f:
         89:50:70:de:43:21:4d:ed:d1:63:9a:60:98:f9:57:43:a0:8c:
         72:79:ba:c5:d7:91:7f:56:9a:59:06:aa:73:7e:e2:09:e4:ce:
         55:16:bb:47:8e:47:9b:47:29:18:dc:35:fc:b5:6e:6a:c7:0d:
         b0:26:7e:bf:ca:a1:bd:eb:7c:f5:59:3f:49:a2:21:7a:12:ea:
         6e:b7:e9:07:bc:f8:2f:97:ae:2f:17:da:2b:c7:df:24:c6:e5:
         77:87:d4:96:21:b8:c0:f9:01:7f:6e:57:be:4a:94:b6:02:51:
         de:92:94:50:62:f1:94:04:9d:22:50:7d:53:49:ca:9a:db:82:
         62:1d:c2:33:ea:e1:d0:45:eb:e2:38:26:8b:19:73:91:83:0f:
         fb:16:eb:b0:52:79:92:86:54:d6:80:52:b0:a4:3f:b0:73:22:
         11:80:0e:16:4c:cb:4d:20:bb:12:f3:4a:ca:4e:51:cc:39:16:
         84:6d:4c:a1:ee:b4:09:d0:4e:d3:1d:0d:7a:7b:1f:b4:06:be:
         73:bb:6e:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:17:26 2025 by rpki-client