Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/69faa5f2-bfff-3ca2-960e-a559b65fa040.roa
File:                     69faa5f2-bfff-3ca2-960e-a559b65fa040.roa (raw, json)
Hash identifier:          CAue6sP9ynUnSWskgyZa/NpXil6eJ9Gj4JgfkXKsLCU=
Subject key identifier:   6A:13:EA:50:28:9A:4C:BE:C1:88:6B:64:6A:F5:26:8D:CD:EE:2E:3A
Certificate issuer:       /CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a
Certificate serial:       010D0C9F4328584AD50661CC8957D5FCD77219C0
Authority key identifier: 5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/69faa5f2-bfff-3ca2-960e-a559b65fa040.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     11700
IP address blocks:        205.211.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:61:cc:89:57:d5:fc:d7:72:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=f75a1b24-e296-4b2d-871d-2d5bab018c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e8:8d:d1:bf:ec:76:02:aa:9d:3c:04:e8:f2:
                    7a:59:a3:85:2d:49:71:74:b6:30:91:08:d5:64:52:
                    63:70:99:66:dd:94:f9:21:78:03:dc:03:68:e9:a4:
                    3c:75:21:3b:d2:0e:a9:57:78:95:e2:89:ad:eb:ac:
                    43:fb:21:54:fe:ac:03:c0:55:53:d6:3c:c6:b0:8a:
                    af:c8:ea:69:4f:24:15:4c:f0:15:a4:7f:29:1b:bf:
                    0f:c9:72:b5:09:0c:4f:6a:4b:9c:51:ac:13:ba:08:
                    17:65:d1:0f:be:f7:8e:c9:f3:f3:66:6e:c2:0e:fd:
                    91:8e:9a:f7:df:f3:80:e3:6e:71:66:12:e7:2c:cd:
                    0f:50:3d:ce:af:4d:f0:4b:95:79:c4:cb:31:97:12:
                    71:1e:a1:0c:a8:f5:5e:64:d9:97:9f:fa:84:9a:ae:
                    e2:2d:af:48:2e:00:4f:bb:04:ed:cc:32:bd:f3:41:
                    6e:c4:a5:5c:33:f4:36:71:33:90:41:14:b2:62:88:
                    2a:2f:2c:27:d1:32:e7:ab:22:56:86:f2:b0:c2:d9:
                    d7:c7:71:3c:d3:43:d8:38:a8:6a:ac:e8:22:d9:f5:
                    de:ed:f6:63:4f:02:20:7c:e9:11:6f:64:a3:39:0b:
                    c8:58:00:31:5f:49:68:05:70:5f:36:2a:33:6e:3c:
                    ba:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:13:EA:50:28:9A:4C:BE:C1:88:6B:64:6A:F5:26:8D:CD:EE:2E:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/69faa5f2-bfff-3ca2-960e-a559b65fa040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.crl

            X509v3 Authority Key Identifier:
                keyid:5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:66:1e:39:f3:34:cc:61:08:9c:3b:c1:28:5f:90:bc:49:c3:
         bc:f5:a9:56:75:3b:6d:26:b2:26:c0:cf:7f:93:6c:74:37:7c:
         c0:fd:00:cb:36:85:7e:ac:bd:bc:f5:0f:ca:d7:4e:a3:87:1d:
         cc:cd:e4:b4:11:72:50:aa:c6:f5:4e:30:7b:51:db:a3:85:8a:
         08:2a:f0:93:03:b3:68:89:a0:9b:10:b6:8a:bb:95:51:76:21:
         59:6c:dc:ab:e5:6f:e3:5a:91:ca:d9:4c:f8:4a:ad:9b:a5:01:
         8f:3d:0b:39:2f:85:33:ff:6c:da:21:93:21:85:2c:83:6e:15:
         d7:7f:3b:17:62:9c:01:be:51:6a:f2:33:4d:98:7c:c4:29:22:
         56:6a:a0:f9:e3:9d:63:6e:83:37:d0:07:9d:89:11:ed:29:8e:
         37:c1:27:f6:d5:2a:99:df:d9:ea:b5:de:d3:27:58:43:f1:77:
         41:a4:e6:3e:a4:db:3c:32:f6:34:35:31:8a:38:f4:fc:d9:68:
         e7:bf:a5:bc:e3:b2:e3:66:4a:5b:7a:f8:da:58:3f:2b:67:7f:
         c0:c2:b1:09:a5:26:aa:5a:02:ed:c8:6b:21:51:73:17:7b:bd:
         cc:a8:d1:5c:a4:42:ea:25:1d:d0:5d:b3:be:df:b6:b8:33:09:
         8e:db:d5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:17:34 2025 by rpki-client