Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/5925a732-37e4-38f1-b869-f45e205b206d.roa
File:                     5925a732-37e4-38f1-b869-f45e205b206d.roa (raw, json)
Hash identifier:          AI4CdQXPYxKpLswo6A1Gl4FJiqirDrEbBVmk+aOofvg=
Subject key identifier:   BE:72:0D:E2:CD:92:E5:39:EA:E8:DA:FF:23:7E:4C:C4:BA:2E:E4:80
Certificate issuer:       /CN=2ff822df-fd2d-4fdf-8320-3c5a61d09369
Certificate serial:       010D0C9F4328584988CF32E6268BD4C5BA711380
Authority key identifier: 12:BB:91:00:0A:6C:5E:97:61:21:EF:C3:80:BB:27:03:11:47:ED:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/5925a732-37e4-38f1-b869-f45e205b206d.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     27370
IP address blocks:        192.80.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/2ff822df-fd2d-4fdf-8320-3c5a61d09369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/2ff822df-fd2d-4fdf-8320-3c5a61d09369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:32:e6:26:8b:d4:c5:ba:71:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff822df-fd2d-4fdf-8320-3c5a61d09369
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=85d5aa5f-7f93-41f2-aec8-491b1f9a3634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c1:d4:b6:6b:35:c6:3d:cb:0d:f9:0b:d7:72:
                    6b:8c:0e:37:8a:36:f3:58:f1:ec:e0:85:75:46:3b:
                    bb:60:f9:2d:a6:4a:78:b6:69:2f:c7:66:3f:73:ce:
                    ef:c8:7d:4c:d3:e5:37:47:7a:0d:a3:94:cc:a2:b4:
                    aa:f8:5b:11:88:0e:65:f7:5f:0d:02:49:1c:86:9d:
                    63:43:95:5a:07:b8:e4:60:83:bf:54:8c:2c:0e:34:
                    1e:04:c1:fb:f5:c6:6a:42:b6:28:e0:94:8a:a2:4b:
                    02:3b:45:ed:ee:98:63:02:ed:7f:68:64:6c:12:da:
                    82:ec:ce:58:2f:87:d7:08:5e:52:cf:63:7e:15:6f:
                    4d:c3:cb:6e:1f:17:50:8d:99:4c:12:90:bd:2a:49:
                    d2:6b:eb:af:8f:c8:7e:01:1f:74:b7:21:7a:da:ff:
                    1f:43:a9:8c:5c:cd:12:35:db:ff:7e:c3:3c:ce:4e:
                    a1:db:c0:58:80:de:ed:3b:10:b4:f6:68:c2:75:ea:
                    ad:d1:a8:69:4e:c6:13:03:83:18:fd:d9:ec:2a:22:
                    bd:24:73:81:a0:d9:ef:eb:51:f3:a3:b5:ea:79:13:
                    21:c7:f6:82:ae:c0:d9:35:d6:c8:de:a0:cf:65:74:
                    8f:63:b2:00:90:cb:ea:ac:b5:bc:6c:c5:88:96:2a:
                    0a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:72:0D:E2:CD:92:E5:39:EA:E8:DA:FF:23:7E:4C:C4:BA:2E:E4:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/5925a732-37e4-38f1-b869-f45e205b206d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/2ff822df-fd2d-4fdf-8320-3c5a61d09369.crl

            X509v3 Authority Key Identifier:
                keyid:12:BB:91:00:0A:6C:5E:97:61:21:EF:C3:80:BB:27:03:11:47:ED:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c0:f1:1e:f8:35:fe:b9:fa:df:e5:0d:c0:f9:f3:29:9b:16:
         6e:1e:45:c3:a2:23:25:8c:01:71:7c:eb:5b:43:4d:07:ad:a7:
         fe:a4:08:ad:d0:80:6a:e6:b9:e8:a0:b2:e5:63:3e:72:e6:b0:
         11:3f:7c:df:99:63:12:6f:3f:24:c7:89:08:a1:de:d2:a3:25:
         15:75:17:5a:c5:18:84:62:f2:a3:f0:b2:0e:7c:28:9a:48:1a:
         31:5b:52:62:f0:d8:23:9e:85:42:8a:83:8b:20:1f:d4:27:4c:
         51:e5:86:bd:11:c8:44:2d:b7:6b:df:32:a2:ae:94:f1:94:9c:
         80:24:49:a6:dc:bf:09:3b:a6:d2:10:67:10:af:cc:4d:18:5b:
         6c:f0:03:eb:2e:d5:1d:df:11:12:1a:43:0e:28:e9:90:ab:c2:
         88:75:e2:88:a4:e7:fa:2b:22:bd:42:6c:9f:18:44:be:da:40:
         d4:11:b3:5a:64:0b:5c:56:59:1d:8e:75:3e:af:7f:c1:3b:e8:
         4f:f2:d2:cd:1c:b5:34:a6:11:bb:58:dd:45:85:8c:97:10:98:
         d7:2d:04:78:06:c9:43:7e:14:fc:3f:2a:f8:d7:86:0f:1e:5c:
         a8:72:94:c9:b1:2b:d3:6c:61:16:0e:71:d7:bf:09:cb:70:c1:
         0c:ee:32:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:50:54 2025 by rpki-client