Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/0075cb7c-32f4-3754-8d3d-bd0e50ec70bd.roa
File:                     0075cb7c-32f4-3754-8d3d-bd0e50ec70bd.roa (raw, json)
Hash identifier:          xvIfYCHxA3jYgSLMKDCRY8AI3CUudgb5UKYarVU+Bk0=
Subject key identifier:   0D:31:5C:A0:35:48:E5:F3:F8:23:95:89:57:40:3B:34:89:05:A3:55
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584AF52156BB72EBB5C88B5A5E00
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/0075cb7c-32f4-3754-8d3d-bd0e50ec70bd.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399575
IP address blocks:        216.205.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:56:bb:72:eb:b5:c8:8b:5a:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=325e1db2-080e-405a-9788-d78f088fee5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:43:fb:96:96:4a:d6:41:84:a1:d2:ac:5c:25:
                    28:74:f5:e5:30:6c:fd:b1:15:a5:e1:cf:7f:35:e1:
                    24:32:0e:6d:33:8a:6d:2f:4b:db:f9:83:a9:3d:b0:
                    d6:cb:1b:89:35:57:d6:c1:14:c8:91:ad:17:02:5c:
                    c4:31:79:6c:69:d7:5d:c0:8c:3e:12:65:fc:62:bf:
                    c9:14:8e:a4:44:15:e6:c5:3f:70:9c:83:5f:5a:eb:
                    f5:fc:67:89:4e:e0:f8:1f:00:44:ac:00:34:a2:84:
                    72:2c:40:76:87:0a:d3:ec:0a:8c:67:80:62:55:39:
                    99:da:3d:13:e4:3a:d2:9f:a9:94:c8:26:d2:10:18:
                    69:cb:ed:5a:81:55:af:9b:95:98:9d:fc:e6:e1:27:
                    f6:26:7c:62:85:e8:de:c9:39:0f:5e:7f:2b:d9:fc:
                    09:6e:1e:0e:5d:3a:2e:30:8b:44:44:2c:c8:c3:96:
                    ae:17:5e:b1:f6:0b:3d:27:11:56:a7:cd:1a:2a:7d:
                    f5:10:cb:b1:de:bd:d6:19:fb:36:60:2f:58:d0:0a:
                    45:08:35:11:ff:1a:a1:4b:c1:d8:43:34:27:a4:92:
                    1a:68:3a:54:c0:f5:26:c5:10:07:53:b8:31:13:53:
                    94:e2:6b:8c:0a:d2:2d:4e:dd:3f:72:24:fa:3f:60:
                    72:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:31:5C:A0:35:48:E5:F3:F8:23:95:89:57:40:3B:34:89:05:A3:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/0075cb7c-32f4-3754-8d3d-bd0e50ec70bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:a8:97:e7:2a:ef:1a:47:12:9a:34:3e:8e:1a:3b:e8:eb:dd:
         fc:52:55:91:b1:e8:bd:f3:93:63:4c:11:a8:6e:4d:28:00:5d:
         9b:bb:61:48:75:b6:8b:3c:69:da:9c:b9:a5:4a:b5:5f:61:c3:
         91:02:e7:5c:e1:c8:75:a5:f5:8a:e8:30:5f:a3:07:ab:8d:8e:
         24:cd:4f:3a:f6:25:17:24:87:41:cb:bf:00:67:88:d7:fe:57:
         ff:9d:d9:75:cf:32:4f:7f:f5:aa:2a:2a:59:85:61:ff:48:0b:
         dd:a7:6b:4e:83:a9:6e:bd:7e:f1:81:e5:63:bb:be:d8:48:75:
         ae:3d:fb:37:49:bd:b8:45:4b:23:77:bd:c7:97:a3:2a:1f:30:
         be:5a:78:16:65:97:f2:2f:22:5b:db:fa:01:11:cf:1d:78:45:
         29:84:86:ec:1c:74:4d:ab:68:33:0a:86:fc:ab:a2:bc:69:8f:
         1a:5d:3c:7b:1d:c8:84:38:b9:86:7d:ee:1a:c4:16:fd:8e:c8:
         de:f8:56:45:09:2a:f1:a3:a8:d3:9c:df:46:6b:09:6b:ea:ae:
         ae:97:13:05:bd:f4:49:75:2b:7d:c7:f1:91:d6:c6:95:e0:23:
         b8:16:4d:db:7d:a9:d2:c5:c0:5e:2e:32:18:fe:fe:75:d7:eb:
         8f:65:9f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:18:47 2025 by rpki-client