Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa
File:                     771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa (raw, json)
Hash identifier:          KkRMsmrbjbkIhI/10kYCR/ADKSW2gaFIHE+IsJOWJMc=
Subject key identifier:   63:04:1F:7A:DF:CF:89:37:15:4D:25:15:B8:40:D6:1A:45:26:2D:8F
Certificate issuer:       /CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
Certificate serial:       010D0C9F4328584ADECBC4155B61E0FA68B04C80
Authority key identifier: FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     13506
IP address blocks:        164.95.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:c4:15:5b:61:e0:fa:68:b0:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=956db135-094c-4df9-b352-3f9c0f6fc85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:41:da:e4:5f:09:0e:96:93:af:0e:c3:78:f5:
                    68:92:c3:55:27:81:6c:7b:85:22:7c:0e:01:c8:15:
                    97:93:5f:b7:30:0c:ac:ee:36:b9:68:cf:5a:80:3c:
                    a2:8a:b7:88:9e:e5:b7:9b:ad:b1:5e:8b:69:de:47:
                    f3:d8:26:49:b4:68:2a:98:5a:90:a4:33:f3:ce:c8:
                    27:65:ed:2d:66:a4:d9:77:c4:97:1f:23:bf:ad:d0:
                    a5:08:49:b8:8e:df:b5:61:8f:34:75:35:f9:d3:33:
                    4f:51:99:ea:e4:2f:cb:53:65:b4:1b:c2:77:c6:8c:
                    db:8b:29:b2:ca:c8:9a:10:5a:e8:6b:d1:76:e2:bd:
                    a9:1e:3d:fa:54:0d:27:a0:24:c5:75:67:01:79:9a:
                    9d:f3:18:8d:9e:8b:42:45:3d:15:e3:8a:95:aa:6d:
                    f6:74:b8:da:1d:e0:6d:60:ef:a8:cd:09:91:fb:9e:
                    12:86:32:f9:5f:89:10:36:c5:51:71:c0:c2:0b:7d:
                    2c:a1:42:3c:f0:0b:e4:55:59:7b:08:e5:2b:88:94:
                    97:e0:d9:d2:99:10:72:f1:5c:ce:82:32:5d:22:d8:
                    0b:8d:92:cc:30:eb:40:ff:68:00:20:5b:f2:09:ec:
                    96:02:7c:3b:b5:31:b5:7e:56:ec:a0:f8:93:f9:f4:
                    0c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:04:1F:7A:DF:CF:89:37:15:4D:25:15:B8:40:D6:1A:45:26:2D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl

            X509v3 Authority Key Identifier:
                keyid:FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:91:99:d9:5a:aa:4b:b1:e2:eb:35:d4:2a:9c:a1:30:f1:ef:
         af:0b:7e:24:86:14:f4:a0:06:c9:71:32:36:17:6b:5e:98:d9:
         4d:b6:1f:41:63:cb:79:bc:64:65:60:c5:bb:42:e3:da:dc:3d:
         31:4b:3f:7e:31:28:96:82:fd:2f:0d:be:f5:b7:ab:f0:7e:dd:
         1e:30:71:fd:5f:89:46:69:52:26:b6:98:16:e9:79:6d:55:cf:
         ba:87:2c:46:e4:2e:02:ec:41:02:bc:4d:23:af:cf:2f:07:be:
         e7:e3:c8:a6:8c:13:14:69:8e:5a:50:35:43:89:32:47:8c:5c:
         ba:a9:db:64:57:a9:50:bf:a2:85:02:ed:89:c5:ee:ef:7b:5b:
         35:0d:f6:9d:f9:13:31:ac:cb:1d:53:87:27:ba:49:cb:fe:f5:
         30:bc:c8:60:4f:3d:e7:6a:93:d7:59:cc:ce:cb:a3:8c:cf:14:
         b1:01:bc:5f:79:23:b4:97:07:25:cf:25:3c:4b:9f:ad:10:ac:
         64:ea:3a:0f:f5:d2:71:31:60:ee:dd:67:0c:e4:ff:6d:2d:d4:
         c6:1e:27:bd:36:e8:56:57:39:43:5b:35:35:e0:05:15:e9:2e:
         d1:35:23:dd:30:ab:f0:9a:1c:ce:f7:f1:fd:c7:e8:15:90:27:
         0a:1c:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:29:38 2025 by rpki-client