Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/83cac2c6-93a0-3e70-81e7-0153ee9608ca.roa
File:                     83cac2c6-93a0-3e70-81e7-0153ee9608ca.roa (raw, json)
Hash identifier:          tL6QGs12x/FaAL6dfOojqLCGgCkiRwLqVCWvI0uGGiM=
Subject key identifier:   EF:C7:41:B8:1C:8F:39:92:D1:5A:17:37:7C:C6:2F:7E:01:46:AD:BE
Certificate issuer:       /CN=81fb7701-7454-4b9b-810d-3d604f504467
Certificate serial:       010D0C9F4328584ADA9BBFF066113FB5D34E6500
Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/83cac2c6-93a0-3e70-81e7-0153ee9608ca.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        199.65.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:bf:f0:66:11:3f:b5:d3:4e:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=b491ac80-edbf-4ba3-8020-0a8abe0a06f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:1b:96:fb:82:29:cc:07:6d:de:5a:0e:6d:
                    1a:f7:81:07:88:52:f1:79:4d:f4:70:a1:4f:d1:3c:
                    22:ec:cb:dc:14:52:cd:9a:1e:37:fb:b5:63:d4:44:
                    b8:0a:d5:2b:4f:1b:65:2f:1d:4a:73:09:04:62:6c:
                    e3:6f:45:cd:38:c1:4a:35:18:c1:4a:57:59:23:2f:
                    ba:c1:1b:39:5c:4b:62:fb:f8:d0:a4:50:9f:54:8a:
                    88:cf:44:e0:c0:65:f1:26:b3:1b:15:a1:ca:d6:ea:
                    10:a7:59:68:15:5d:36:06:ab:28:ee:0c:5d:a0:be:
                    52:74:77:4c:cd:bf:55:0a:c1:b3:4e:e9:16:a8:08:
                    0f:af:47:ab:47:06:a2:eb:56:8e:dd:83:a4:a1:8e:
                    7f:ea:91:60:4c:2a:78:41:65:ba:9f:3c:3c:aa:1d:
                    15:cf:e4:ae:33:d1:d5:eb:2d:38:2d:c0:40:ce:c2:
                    34:9c:59:14:80:d4:28:0a:af:0c:fb:5d:42:40:1b:
                    69:47:64:53:bc:57:fc:81:02:31:40:82:d1:5b:4a:
                    bd:47:5c:f9:b6:71:af:31:62:50:4c:3a:53:fb:f0:
                    44:cd:be:ef:6e:7b:a5:71:8d:da:e5:46:b3:25:47:
                    b7:48:c0:01:6c:6f:19:2b:79:c8:ef:aa:62:b4:60:
                    3f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C7:41:B8:1C:8F:39:92:D1:5A:17:37:7C:C6:2F:7E:01:46:AD:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/83cac2c6-93a0-3e70-81e7-0153ee9608ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl

            X509v3 Authority Key Identifier:
                keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:62:33:fc:0f:e2:7b:9f:04:4f:5c:d2:c3:9a:aa:fc:8e:e5:
         9e:b3:65:e8:a2:62:7b:55:85:a4:58:de:fc:c7:bb:7c:ef:09:
         32:ba:38:95:ca:58:05:f9:ff:9d:ef:b9:28:31:8e:aa:6b:36:
         29:50:79:08:2e:4e:59:4a:92:e6:eb:b4:c0:35:51:8d:dd:03:
         c1:e2:75:6f:20:68:10:fb:07:8a:a4:11:1c:3a:99:69:a5:81:
         44:67:b7:ee:81:0a:b7:20:4d:82:b8:a7:6f:09:fd:db:24:7b:
         db:14:fc:fe:91:17:68:54:6c:18:c4:35:f0:9f:7c:6d:db:d6:
         f5:96:82:33:fd:86:2e:77:02:dc:3e:65:1a:0f:54:d8:77:cb:
         0e:9f:e8:2c:16:88:3a:98:51:90:b4:5d:1d:b5:56:33:17:6f:
         91:db:2d:0e:cf:38:6a:a3:ce:22:ec:31:d3:aa:26:77:d0:0f:
         96:b9:bc:88:99:5c:48:08:3c:14:98:97:2a:af:7f:44:74:1a:
         72:8d:23:79:3c:e6:fa:68:5e:a7:f0:d4:72:30:94:ab:49:68:
         ff:66:a8:93:51:8c:d3:83:dc:8b:f0:70:16:ff:88:27:d0:69:
         da:43:f6:17:bd:36:42:e5:82:9a:d2:72:26:e8:34:33:96:38:
         15:2e:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:23:28 2025 by rpki-client