Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/fec5555d-db4c-36dd-8f4d-0aefe55de0f8.roa
File:                     fec5555d-db4c-36dd-8f4d-0aefe55de0f8.roa (raw, json)
Hash identifier:          CSonyU+y2/chtWGiYNAjSKfC6+428yvgyltELdGC9tM=
Subject key identifier:   97:44:2B:90:2C:CE:F7:69:25:DE:2D:D6:C5:04:1B:21:21:3B:C7:8B
Certificate issuer:       /CN=aa750f8e-a6ce-4a3f-8257-bc12479a72b1
Certificate serial:       010D0C9F4328584AD3A12AD5119241CC67FA07DC
Authority key identifier: D7:16:B1:3C:45:DF:41:9A:DC:28:CA:D8:B1:30:C0:CB:BA:9F:C4:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/fec5555d-db4c-36dd-8f4d-0aefe55de0f8.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     64264
IP address blocks:        167.253.110.0/24 maxlen: 24
                          2602:fb6b::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:2a:d5:11:92:41:cc:67:fa:07:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa750f8e-a6ce-4a3f-8257-bc12479a72b1
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=b92d3781-5c6c-4e6f-9c0c-de47d4c58d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a6:aa:e9:3d:ae:49:2c:d7:6f:13:52:a3:dc:
                    4b:de:53:fa:8a:60:14:82:38:87:8e:0e:ff:26:61:
                    72:eb:19:c0:7a:ed:7c:93:b4:9f:db:35:f0:cd:bf:
                    eb:78:89:d0:c5:31:98:6d:c2:17:f8:96:3c:99:95:
                    10:f9:15:4a:75:1a:37:03:11:fe:24:80:23:90:66:
                    c7:e3:0c:d5:11:f6:ce:c5:b5:d6:1c:52:47:8f:23:
                    6d:b4:15:f0:67:1a:69:7b:5a:d2:20:fd:31:e9:94:
                    1e:3b:66:81:e2:12:a3:69:34:2f:d2:a6:ac:aa:f3:
                    77:e9:cd:4f:78:1e:e6:4b:2e:bd:a2:d7:2a:3e:28:
                    a0:f3:06:72:60:56:97:9a:41:80:15:bf:53:1f:c0:
                    9a:25:d1:02:30:7a:c8:8b:b0:b1:74:de:bc:a8:3b:
                    b9:44:a6:87:f9:ec:4c:fc:ab:4d:5f:d2:25:7e:41:
                    29:67:02:2d:ca:2f:15:41:de:ad:2b:17:80:88:18:
                    b8:07:3a:a8:65:54:cd:c8:f0:a2:ff:59:86:06:13:
                    56:32:9f:9f:39:e4:9e:fa:15:a3:1d:48:d8:0e:03:
                    60:f2:6d:81:69:a1:79:fe:76:c2:87:c2:86:b5:8f:
                    e2:ee:71:bc:ec:49:6d:5f:c5:c8:7f:cc:6a:e5:11:
                    cd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:44:2B:90:2C:CE:F7:69:25:DE:2D:D6:C5:04:1B:21:21:3B:C7:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/fec5555d-db4c-36dd-8f4d-0aefe55de0f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.crl

            X509v3 Authority Key Identifier:
                keyid:D7:16:B1:3C:45:DF:41:9A:DC:28:CA:D8:B1:30:C0:CB:BA:9F:C4:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.110.0/24
                IPv6:
                  2602:fb6b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5c:b6:a2:c7:cf:b8:d0:4a:77:05:80:9b:fa:02:48:92:76:
         2a:31:c5:5c:43:c8:0f:9e:41:27:82:dc:3f:59:6e:92:b8:d6:
         52:5e:ee:ec:ed:78:c0:16:e1:37:54:af:9f:25:a5:c4:ae:38:
         0c:fe:43:69:fc:f8:96:bd:e2:5a:90:dc:0d:7d:19:c0:f9:f4:
         9d:27:85:11:8b:0a:de:4d:e2:4e:8b:c8:e7:e8:9e:6e:8e:6c:
         5b:19:69:0c:97:f1:35:1b:85:fd:3a:e0:76:9d:65:7b:d4:dc:
         91:23:fb:d3:4e:48:89:3f:6c:9c:07:ce:88:95:4a:a2:49:6c:
         9f:94:d9:b9:3e:b0:ce:32:3a:be:eb:b5:8d:45:9d:ba:a5:b2:
         47:3b:33:35:ad:73:f1:c6:a1:25:b1:f4:63:61:94:49:11:db:
         7b:e4:9e:b8:2b:72:d7:be:1f:82:92:e7:a3:84:f1:2a:88:bd:
         51:1c:60:48:e7:ad:67:ea:37:03:25:bf:0d:3b:70:58:b0:1b:
         0d:ad:45:b4:26:e0:89:1a:af:ae:eb:b0:f4:e9:e6:e8:9a:2f:
         ac:af:4e:61:50:a5:84:a7:ac:45:9d:d6:d5:d2:84:3a:a0:28:
         01:57:35:1a:d7:7b:fd:11:51:a9:9d:f0:8d:80:8f:3f:e3:ec:
         5a:d7:38:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:45:35 2025 by rpki-client