Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bc01fd0a-c636-3a4e-85b1-88d1e8563f6e.roa
File:                     bc01fd0a-c636-3a4e-85b1-88d1e8563f6e.roa (raw, json)
Hash identifier:          4CgaMppFI9UnSjKmlkfcLocOZV1HtR07PpjxAgagO8M=
Subject key identifier:   95:DC:9F:6A:FA:88:A0:B9:06:E0:24:90:48:B3:4E:E3:36:79:A0:AC
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584AC2E0FF498C829A832B154790
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bc01fd0a-c636-3a4e-85b1-88d1e8563f6e.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     16696
IP address blocks:        192.81.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:ff:49:8c:82:9a:83:2b:15:47:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=8e2e2e56-ed52-4f91-9ba8-eca073cfcf3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:18:8d:d4:4d:6b:13:0c:06:12:43:db:15:8c:
                    09:ba:0c:bd:e2:a7:60:17:eb:a8:09:2a:98:5c:ba:
                    83:66:6b:ac:1e:69:11:19:df:4f:97:89:c4:c9:1c:
                    fd:73:b5:b5:49:f7:d0:cd:ba:27:7d:5a:e4:6b:ee:
                    2f:b2:1d:be:2b:d8:03:73:9b:ad:9c:3f:62:d6:cb:
                    de:c2:70:0b:4e:5a:1f:d6:62:23:bd:34:4b:2d:37:
                    dd:db:be:db:54:4d:a3:fa:de:85:eb:33:0e:de:7d:
                    e2:86:a0:90:eb:51:36:5c:5e:64:82:b2:89:0b:da:
                    90:2b:61:90:36:f4:7d:57:45:28:f3:93:01:18:77:
                    55:ba:42:8b:0e:1f:09:82:2e:22:93:b6:96:4c:c7:
                    ab:5b:70:ff:2e:04:71:fd:c5:28:62:a5:f7:5b:4a:
                    20:02:bd:3d:1f:ef:3c:38:9d:85:46:95:4d:b6:21:
                    c5:8d:59:5f:10:a5:5f:23:af:c7:a8:65:e3:92:ea:
                    54:a1:dc:75:f0:40:86:78:82:07:c9:c8:b4:1a:90:
                    de:59:88:93:ca:06:8e:fd:d3:f7:a9:cb:9f:e7:db:
                    28:40:8f:fd:ff:9d:b4:c8:79:3f:5e:02:15:80:de:
                    71:81:21:45:09:28:3e:8c:29:8c:c2:54:71:bb:7a:
                    68:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DC:9F:6A:FA:88:A0:B9:06:E0:24:90:48:B3:4E:E3:36:79:A0:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bc01fd0a-c636-3a4e-85b1-88d1e8563f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4f:59:4e:9b:59:2b:1d:69:78:4b:a6:a8:39:dc:d8:3a:e7:
         0b:25:f5:e3:57:57:b7:b1:4d:09:9b:6d:15:ea:34:be:75:ab:
         27:e6:76:2e:94:b2:e1:d1:94:16:83:43:de:9f:aa:18:5c:09:
         51:98:5b:a8:24:fa:91:41:97:e2:db:37:5f:7e:d7:94:d5:f0:
         84:28:17:78:c8:65:dd:32:b1:4e:ce:25:d1:87:e4:46:89:24:
         b9:9d:00:2f:80:96:84:7f:f7:98:04:7d:d4:df:97:c2:f4:59:
         33:1d:8f:d2:d0:e0:4d:4f:72:0d:42:f6:16:7f:3d:81:08:1a:
         48:ce:dd:ac:2e:96:78:80:3c:91:09:a2:49:e7:38:86:6a:94:
         cb:69:1a:ea:b9:c1:91:96:8d:a3:1e:34:5a:05:62:62:cd:4b:
         3f:aa:cf:d2:a4:e3:06:92:b0:07:ae:44:8b:60:e2:8b:82:df:
         76:4e:73:b6:b4:f3:e0:40:2f:69:63:b6:3c:23:90:23:2b:cf:
         41:27:b2:12:8a:df:8d:98:20:ee:f2:93:57:d9:48:55:33:ee:
         93:3b:1d:60:c2:02:e2:bb:fd:a8:29:a1:f5:1e:2f:79:bc:3c:
         c6:e0:41:93:4e:93:51:9f:ca:14:db:4b:7d:35:92:69:a1:75:
         cb:38:e9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:31:47 2025 by rpki-client