Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc65e1b4-e76b-31c2-9b7f-873703b2c9a2.roa
File:                     cc65e1b4-e76b-31c2-9b7f-873703b2c9a2.roa (raw, json)
Hash identifier:          2gD7g8r0IGTWIEb9Cauys28GwKEuXKSwc27TbPnlXPk=
Subject key identifier:   0B:74:4A:EE:65:C6:8A:71:04:D3:86:92:DF:CF:39:B1:F7:5E:33:A1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584ACF7104C439FF84A4BEAF9980
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc65e1b4-e76b-31c2-9b7f-873703b2c9a2.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     54113
IP address blocks:        131.125.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:04:c4:39:ff:84:a4:be:af:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=9f6c649c-2b90-48f1-8632-ad3d0501dcd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:41:48:c9:a5:6a:73:14:58:73:53:50:df:41:
                    ce:c2:ae:c6:69:3d:f9:06:83:c1:c4:b7:07:5d:18:
                    7b:5f:48:44:f2:b1:ca:b3:10:02:b7:66:56:7c:77:
                    2c:7f:87:5c:66:83:d2:1b:d1:54:ab:2f:2c:3f:fb:
                    57:0e:58:fe:ea:b9:25:48:a4:41:35:fa:a8:82:41:
                    8d:94:34:02:ed:00:4c:21:9b:6d:5e:25:91:da:69:
                    aa:4e:e4:b6:a6:42:b9:b1:fb:e1:0f:ed:2e:78:2b:
                    4c:4d:ae:90:90:88:08:f4:f1:3b:fe:66:29:c4:ca:
                    fb:ad:dc:a8:64:3b:3e:34:d1:3b:ff:4d:2e:87:25:
                    bd:50:a4:87:7c:b1:a8:fb:6e:35:eb:5b:bd:46:e7:
                    b5:b3:7d:78:dd:09:a2:e2:e1:44:dc:6f:f2:15:f7:
                    2b:f2:66:39:b7:aa:f4:a6:b2:2a:c2:40:ec:37:b5:
                    b2:43:cd:b6:f2:9a:b9:5a:56:7d:ad:00:18:00:c1:
                    13:c7:d8:1f:85:ad:c3:5f:70:5c:8f:4d:09:ea:e8:
                    bd:f5:18:12:0f:cb:72:fa:4b:4f:e0:dc:55:4b:f3:
                    b4:05:50:d9:81:82:28:93:a7:60:3a:39:11:10:58:
                    6a:d1:1d:1e:9c:6d:40:7c:27:db:eb:89:8a:b2:01:
                    ec:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:74:4A:EE:65:C6:8A:71:04:D3:86:92:DF:CF:39:B1:F7:5E:33:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc65e1b4-e76b-31c2-9b7f-873703b2c9a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ab:5b:6b:06:90:c5:33:c2:cd:a8:ef:f0:13:ec:99:74:90:
         13:d1:ec:48:12:fc:c1:bc:92:23:d2:1f:98:9a:c0:71:2f:05:
         2a:c3:f1:f1:0c:43:04:38:73:1f:ca:2d:e1:43:42:03:19:9a:
         a1:b0:58:4c:0d:d6:1c:97:82:a3:78:aa:e8:c6:d3:5b:b8:1b:
         24:22:18:a7:f8:54:40:12:6e:68:83:35:8d:9c:49:43:d9:59:
         74:b7:a6:88:28:75:12:a5:e2:98:9e:f2:a8:c9:f4:5f:7a:66:
         b3:1d:9e:61:1a:4c:d8:98:80:e3:aa:1a:57:48:23:8f:fb:e1:
         f1:53:a6:3e:a4:d1:6f:ce:f4:ec:c4:8c:35:bb:82:42:90:c9:
         e9:ae:c2:a1:57:61:e3:5a:bd:86:ce:e9:cb:e9:19:df:11:f4:
         e8:d2:5e:03:de:83:ff:a0:1e:6d:50:19:7c:fd:f5:d0:3a:ab:
         5b:ec:4a:0b:93:56:50:05:bf:ef:a6:03:5c:ad:54:02:c8:c6:
         6b:dc:de:62:d6:1f:24:c5:87:9e:a5:dc:65:6a:65:03:5f:24:
         0d:66:59:cd:c6:06:d8:17:43:80:a1:00:9b:ed:4b:2e:3f:8c:
         0d:7d:4c:8e:d7:3e:2c:93:63:a2:ec:7e:15:43:83:7b:15:a2:
         15:b7:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:50:50 2025 by rpki-client