Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/8c0e7ebd-72f6-3469-940e-787b11bb350a.roa
File:                     8c0e7ebd-72f6-3469-940e-787b11bb350a.roa (raw, json)
Hash identifier:          Hgz9gTL+2e4aU6hs8NTfELY0JiYJdxNZCdrAL7jGmWI=
Subject key identifier:   B1:8B:8F:2C:BE:CF:13:4E:BC:C5:8B:9D:F4:6F:2D:A1:32:49:E5:1A
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584AE4611111ACBB23FD9EAA8F80
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/8c0e7ebd-72f6-3469-940e-787b11bb350a.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     14061
IP address blocks:        64.227.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:11:11:ac:bb:23:fd:9e:aa:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=4ffae13a-dc7b-4d10-9b9d-02834eb285c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c3:87:66:03:1e:85:e5:fe:a0:4a:91:04:a1:
                    ad:f7:48:ec:65:a2:8c:21:47:a9:75:76:41:89:1a:
                    96:cb:42:f0:cd:15:5e:1f:68:e5:a6:8f:ba:d7:c9:
                    09:1f:87:4d:ed:6d:41:78:10:fb:9d:84:7b:0e:58:
                    7c:f4:5e:67:76:76:02:cc:28:06:a5:d2:62:fc:98:
                    e4:56:d4:67:de:7a:18:1a:e2:cb:8f:08:39:ed:f7:
                    cb:82:b5:c8:a0:a9:ff:1f:b9:a0:ae:ea:56:6d:1f:
                    8b:d2:d3:5b:b4:03:4a:a5:7b:20:e0:c6:e8:23:63:
                    7a:ee:00:43:fc:69:aa:c4:19:41:02:bc:97:1d:2d:
                    f0:5e:2a:81:f7:a4:7a:78:1d:90:6c:bd:2a:77:c4:
                    17:46:e0:9d:90:97:13:4a:f2:bc:07:6b:a1:d8:a9:
                    c8:f7:ec:54:6a:87:5c:23:c9:65:ac:e9:be:06:85:
                    c4:69:50:8d:f7:12:b8:78:47:bf:55:3d:31:de:0a:
                    08:ba:ef:0b:28:94:da:c0:39:c0:87:2b:df:3d:24:
                    ed:00:8a:96:c5:9c:46:61:0d:45:57:f6:0e:a8:d7:
                    a5:26:d9:a3:f0:15:51:8c:e4:3f:e5:0d:d9:21:92:
                    1f:24:26:26:33:66:8b:af:e2:95:a1:72:d4:40:b6:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8B:8F:2C:BE:CF:13:4E:BC:C5:8B:9D:F4:6F:2D:A1:32:49:E5:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/8c0e7ebd-72f6-3469-940e-787b11bb350a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:f3:8b:f2:59:80:b2:44:eb:03:0c:d3:38:1c:26:5c:64:91:
         9d:b1:cf:13:28:ae:4f:d4:74:24:6c:3f:45:8e:26:cf:a3:76:
         84:21:49:91:f5:46:25:1f:36:fd:7d:3f:f0:86:8b:35:52:cd:
         c0:6a:6c:32:36:83:8c:69:23:f7:7c:1b:0a:a4:e8:f7:55:a1:
         49:6d:d2:e4:21:d8:a4:bc:45:d6:68:0e:ac:9d:4d:c9:34:71:
         32:35:6e:a3:14:d5:71:1e:e4:9c:0b:5c:b6:2d:41:cb:0b:f1:
         0d:86:4b:e5:6d:87:d7:2a:bc:48:d1:dd:ee:b3:5c:37:68:8f:
         31:46:a4:b9:59:13:c7:35:53:79:62:5d:e5:1d:48:20:c5:47:
         ef:db:bf:6e:7c:0c:ff:36:d9:19:e0:19:49:84:b9:28:80:35:
         32:73:fc:04:47:4a:f0:52:65:4c:be:0a:21:db:9a:37:93:b2:
         b2:cf:0f:b9:f4:0d:1b:79:5b:2b:13:4c:09:46:36:c9:99:62:
         a2:8b:0a:bd:83:1e:1c:ff:f9:0f:2a:83:2a:e4:4c:19:56:57:
         86:61:e3:59:1a:ab:a7:fe:9a:05:ce:ff:ae:31:bb:92:ca:40:
         d1:8a:34:9f:e2:7a:84:75:57:ed:07:b4:68:7f:e1:2d:12:19:
         d4:46:de:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:59:57 2025 by rpki-client