Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/b9d42abc-2171-3691-94bc-daa4312c4aa6.roa
File:                     b9d42abc-2171-3691-94bc-daa4312c4aa6.roa (raw, json)
Hash identifier:          GZLhDH26mxgFnHQ+X+B/1ExG9dBXjST98nxzX+9+xps=
Subject key identifier:   2D:6A:66:75:AE:A5:26:EC:13:89:EF:8B:6F:38:FA:77:35:93:79:5C
Certificate issuer:       /CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
Certificate serial:       010D0C9F4328584AE1969118982B013B19805F80
Authority key identifier: 32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/b9d42abc-2171-3691-94bc-daa4312c4aa6.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     26380
IP address blocks:        205.233.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:91:18:98:2b:01:3b:19:80:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=6c4350a0-a290-4faf-ae86-03aab88a0a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1c:5e:85:b3:ff:bc:6e:32:0e:ef:0a:65:c2:
                    4e:63:ef:b6:0e:bb:d7:c9:86:88:b4:57:d1:46:89:
                    d0:32:c8:34:6c:dc:81:01:70:49:57:e0:14:46:38:
                    64:0a:70:99:1d:dc:9f:44:48:86:ec:52:40:32:05:
                    b0:1a:b3:1a:fa:50:95:a9:8c:d3:0d:12:4d:3c:77:
                    71:32:b7:26:b9:76:b9:54:03:8f:0a:de:d0:b5:b7:
                    35:6d:12:48:19:90:b7:ff:ae:a6:d6:e6:d2:20:9a:
                    b0:ea:44:3c:9f:ac:63:85:53:46:62:5e:9b:4e:8c:
                    4f:59:95:46:20:8c:ea:7e:19:9b:87:94:4d:a0:d7:
                    35:be:66:2b:9b:bf:8d:82:ca:83:ab:6b:25:08:f2:
                    b8:84:1f:69:6f:d4:df:89:04:78:1d:d3:b6:d1:84:
                    33:97:0a:b4:b7:7d:6a:b2:d9:26:9b:c8:8a:36:4b:
                    bb:54:8e:f7:1b:b1:bf:21:17:d5:a5:d1:ce:25:4d:
                    11:05:17:f1:61:69:aa:05:a6:1d:46:82:26:6e:c2:
                    19:de:60:fc:bd:df:27:04:79:59:bc:7b:2a:6d:2e:
                    f5:16:62:23:40:fd:50:47:fc:bf:17:e5:ed:8d:cb:
                    36:85:67:db:76:a4:35:c8:7e:e6:d9:8f:91:0a:11:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6A:66:75:AE:A5:26:EC:13:89:EF:8B:6F:38:FA:77:35:93:79:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/b9d42abc-2171-3691-94bc-daa4312c4aa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl

            X509v3 Authority Key Identifier:
                keyid:32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:55:d4:9d:02:d0:cb:4f:16:e0:82:ce:b4:6b:2a:f4:ef:ed:
         e3:87:3d:c7:2e:aa:e1:77:ad:71:99:c6:e7:95:d9:04:8e:92:
         0b:db:51:71:b0:79:89:46:1f:98:ce:f1:73:fa:e0:ce:b4:19:
         60:33:50:22:6f:cd:db:d8:af:a3:3d:0c:2c:21:7b:b1:24:7a:
         74:8c:f7:c3:ec:66:5c:82:4c:2d:a4:46:7c:4e:ef:5b:3c:f5:
         94:68:02:5f:53:29:a3:d5:67:a0:77:4e:67:46:f5:cc:e1:8a:
         79:ab:46:0b:84:96:64:09:63:52:27:eb:91:aa:2d:11:da:41:
         a3:0a:77:71:f7:c5:9f:cd:22:5e:ff:7e:cb:e1:2b:02:ef:cc:
         3d:78:a6:9d:27:7c:00:90:bc:0c:b0:12:8e:7b:af:f2:b2:0c:
         c3:d9:b3:5c:30:56:72:27:a3:c1:6b:39:14:67:16:a9:3f:f1:
         c6:41:cd:ac:50:05:cc:8b:49:a7:d0:c6:22:d1:f4:8b:b8:17:
         ed:1b:bc:a7:58:fb:b2:e0:e2:1d:6a:af:27:57:29:e1:11:2e:
         0f:cf:0e:9e:b7:90:57:c0:fe:7d:f8:29:01:5a:2a:90:fe:88:
         63:81:84:d9:56:cd:c2:7c:dc:e0:72:9d:21:98:29:9f:c9:49:
         46:41:11:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:07:13 2025 by rpki-client