Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2543cb40-bc8f-3873-a98e-9351cb6f6757.roa
File:                     2543cb40-bc8f-3873-a98e-9351cb6f6757.roa (raw, json)
Hash identifier:          YkiljrqcHEF/HNsh8sIkMRLjrrTm354w+cv0Rtkf4bY=
Subject key identifier:   C7:06:0C:CA:24:A1:67:1C:A8:DE:45:12:01:1D:85:2B:3B:4A:9F:E1
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F4328584A560045ABEB156CF44C4782E0
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2543cb40-bc8f-3873-a98e-9351cb6f6757.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     54004
IP address blocks:        65.87.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:45:ab:eb:15:6c:f4:4c:47:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=e7998b57-8f3c-4812-a0bd-dc5a66004876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ad:12:b4:78:fc:97:c4:40:72:ad:73:97:94:
                    ad:54:3e:5d:12:82:4a:93:fe:ec:1b:a3:49:c5:0c:
                    b3:c7:55:c8:fd:76:7c:d1:9c:86:ad:3b:f4:c7:9d:
                    d3:31:bb:cd:bb:1a:80:64:26:09:56:86:06:47:06:
                    c3:2e:db:9a:a0:f0:8f:f6:4a:49:7d:8b:84:af:f1:
                    b9:72:7f:d1:27:32:25:7f:ef:9e:3a:55:8d:c3:81:
                    90:55:dc:35:e5:60:04:9e:a2:f4:8e:8a:db:25:5a:
                    38:6a:60:a5:44:f3:1b:e4:b2:ee:8b:53:27:af:79:
                    ed:33:4e:c6:e8:27:83:83:ad:a9:f5:a2:dc:8b:53:
                    3f:d9:c6:12:7f:82:ee:3e:ef:f0:e8:65:d7:cc:59:
                    7d:ec:89:9a:73:94:d0:c8:34:27:c9:78:9a:bb:42:
                    3f:34:14:97:af:bf:6c:05:b2:34:42:55:83:72:20:
                    29:16:19:d4:b0:2c:19:b1:70:31:4e:19:83:46:ed:
                    43:8f:d1:1e:d0:b1:71:89:95:2b:fb:f1:9e:ef:35:
                    1d:50:10:c8:8b:dc:60:eb:0e:02:1d:f8:61:e6:d6:
                    e8:06:06:1c:16:8e:dd:ef:db:7f:cd:07:83:2f:db:
                    f7:be:df:78:88:9f:74:55:b5:f2:23:09:1a:32:50:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:06:0C:CA:24:A1:67:1C:A8:DE:45:12:01:1D:85:2B:3B:4A:9F:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2543cb40-bc8f-3873-a98e-9351cb6f6757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:84:e1:90:3b:48:9e:a9:0e:ea:7e:6c:32:c7:94:11:39:b3:
         4a:87:4c:29:d8:74:ec:17:d9:97:f5:f7:40:3a:92:05:b0:d0:
         07:85:2f:8a:39:37:72:e6:e6:04:0e:15:4f:5a:f7:1b:b3:9e:
         d6:0a:5f:86:b9:a1:74:ea:23:d2:1d:79:8f:d6:5c:cb:7a:a7:
         6a:b7:12:52:d9:ba:f3:57:b4:19:0f:2c:f8:f8:a5:1e:8e:d3:
         1f:03:2b:dc:22:4a:91:92:ed:84:86:84:67:de:5b:90:8d:cc:
         f3:72:44:b9:1c:18:75:29:62:f7:12:e4:9e:4d:8c:6e:a8:2f:
         99:3b:76:03:be:90:ea:1a:9f:c4:47:2d:f5:95:29:a7:3e:f1:
         f2:11:13:c7:10:ff:84:a7:65:f2:9b:9e:73:0c:16:e1:10:af:
         09:b1:0c:a6:38:d5:36:e1:08:19:5a:ab:2d:0c:71:27:7a:06:
         98:53:fc:9e:c1:db:b5:18:01:c2:fa:1d:11:00:c8:8b:b7:ec:
         e0:11:53:ce:a8:70:d3:55:0d:05:48:bb:26:26:ae:e0:6d:cd:
         bc:00:68:04:28:10:99:5b:91:71:75:60:0d:13:7f:16:b2:b7:
         4a:47:2d:2e:7d:96:69:36:36:f3:2d:3d:52:7c:2a:7e:eb:b0:
         4c:5b:77:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:47:06 2025 by rpki-client