Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/f1f7f812-6d5b-3c23-978c-2533bdd61bc1.roa
File:                     f1f7f812-6d5b-3c23-978c-2533bdd61bc1.roa (raw, json)
Hash identifier:          DKNDHqrN9f7vLm4TLO0pKe7Nj532s7EDpGPLRNi3oz8=
Subject key identifier:   02:DB:C8:2B:33:4E:10:1E:14:53:C0:2C:E8:36:D5:AA:D7:4E:CA:62
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584AF0F14AFE7A9F71DBFFA48D2C
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/f1f7f812-6d5b-3c23-978c-2533bdd61bc1.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     399575
IP address blocks:        206.204.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:4a:fe:7a:9f:71:db:ff:a4:8d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=3c69e289-20de-44d6-bf1c-b417e2fa3a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:41:6c:01:cf:ae:8a:2e:5c:bc:49:86:62:
                    b0:9b:78:86:b8:29:bc:08:eb:fd:5c:ed:49:00:ff:
                    ef:e7:52:e5:5d:a7:54:1e:7a:52:76:72:91:a0:48:
                    e9:74:33:97:29:92:89:51:d3:94:32:7d:84:cf:f3:
                    5a:cd:2f:75:07:22:e0:1e:c1:0e:95:02:67:90:5b:
                    f6:72:a5:b2:58:df:6b:b7:fc:6c:20:d2:b7:01:1a:
                    6d:67:49:f6:0f:a7:53:09:11:f4:fc:ad:83:66:e2:
                    1e:1c:7e:06:b4:ae:4e:e5:67:ac:2e:bc:8a:bf:64:
                    db:fa:b9:76:72:e4:d4:44:8e:44:c7:e1:ed:22:ac:
                    63:c1:04:d7:f7:b3:9d:4e:ab:db:e2:98:f7:e5:83:
                    5e:de:3d:9a:4d:e4:8f:76:1e:03:16:17:73:d6:a8:
                    ee:f9:4b:17:28:d1:da:99:dc:95:f8:36:77:8c:4c:
                    02:07:78:92:72:8c:88:1e:a3:0e:8e:83:52:f4:4d:
                    30:ce:3b:01:3c:56:15:96:2a:e8:27:b4:f2:a0:d8:
                    6a:83:e5:49:e7:8c:00:73:0d:90:fc:74:5d:61:54:
                    71:fb:c5:ac:a8:3b:63:91:bc:9e:ce:98:45:5d:f3:
                    fe:3a:ca:23:93:00:76:5d:10:6c:f8:01:cb:b2:1d:
                    ef:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DB:C8:2B:33:4E:10:1E:14:53:C0:2C:E8:36:D5:AA:D7:4E:CA:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/f1f7f812-6d5b-3c23-978c-2533bdd61bc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:05:2b:40:b2:3e:9a:7c:e0:4c:ac:9a:3d:51:fd:4d:36:59:
         a6:63:52:13:01:0d:30:c7:b1:c7:7c:4b:ff:11:12:de:2d:1b:
         4a:8a:57:d5:83:80:53:de:02:11:ba:e3:96:72:39:fd:aa:e2:
         d9:40:22:82:80:cc:99:c9:0a:85:71:df:86:d8:a4:59:a3:e8:
         93:56:b2:8a:5f:84:03:fe:02:49:6c:22:d1:da:05:cf:b4:52:
         1b:b3:b0:ac:73:4f:59:14:12:cf:95:74:9a:17:66:0e:24:70:
         3d:c1:e4:99:92:d0:8c:d5:93:9f:ec:fa:bf:9a:a2:a4:ee:51:
         32:9d:25:0e:fc:65:b9:d6:30:53:c0:52:e1:a4:80:76:87:e8:
         8d:8e:f3:8a:74:27:20:9e:fd:56:a0:8b:16:1e:93:7e:d8:a2:
         1e:f2:1d:74:0a:d1:a1:a9:02:1f:ad:26:c6:f6:8b:61:a9:2a:
         93:c9:b7:8e:69:fc:16:15:8d:ec:67:6a:f4:5a:51:2b:28:d5:
         c5:10:17:49:5d:b0:9c:b0:58:17:94:d9:15:a8:75:a4:47:76:
         cb:4c:78:4b:9e:a4:6f:dc:04:92:27:b8:76:0d:50:a6:c1:9d:
         0c:bd:cc:67:21:f1:04:71:4b:04:fe:10:d0:a2:e3:66:21:b6:
         44:c4:49:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:30:44 2025 by rpki-client