Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa
File:                     7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa (raw, json)
Hash identifier:          TelfUJ/tUIemoyDxkIIQiy7A7CZmB934H5PUTmXLtsU=
Subject key identifier:   4A:54:01:BB:06:F9:9A:B8:9F:A0:44:FA:74:A8:AC:EF:B7:7B:F5:31
Certificate issuer:       /CN=ef063323-5439-49a9-aad0-9dd33bb50925
Certificate serial:       010D0C9F4328584AE46124FB05A69CCDFDC70D40
Authority key identifier: 3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        165.109.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:24:fb:05:a6:9c:cd:fd:c7:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef063323-5439-49a9-aad0-9dd33bb50925
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=400776f9-f3f8-4e14-96a7-191a870a9422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a5:d3:38:82:2d:a9:17:54:a5:31:6c:ba:e5:
                    72:d7:02:b1:e2:90:a4:d9:5c:51:15:26:5b:88:a0:
                    00:42:b4:4f:63:f7:b1:2f:b7:5e:fa:b1:e6:91:86:
                    d5:ee:47:da:3f:3a:18:6c:df:4e:a0:ce:da:35:b1:
                    ee:0b:8a:d1:f1:27:5a:e0:dc:a5:0d:2b:b7:c3:02:
                    08:88:32:e7:d9:23:97:fe:30:9d:e8:dd:d4:d5:94:
                    26:ae:9a:eb:02:c2:c1:c3:c4:df:2d:ad:03:27:98:
                    43:ab:b4:76:23:4f:17:56:b2:88:86:bb:38:0f:b1:
                    f1:e9:e4:33:0b:56:e7:ac:a3:f6:65:5a:15:f2:96:
                    21:1f:a6:90:5e:c4:0f:f0:b5:8f:f8:af:af:01:91:
                    95:ec:6b:e6:0e:ad:98:78:cc:4f:6d:70:6e:48:60:
                    71:12:c4:c0:bd:99:3b:86:7b:c7:d4:e8:fb:4d:70:
                    1a:9d:21:38:b6:c9:3b:f9:a2:0d:fb:b5:01:32:f1:
                    10:bb:d1:7c:cd:de:92:e9:ce:b7:ff:56:b4:27:9f:
                    2d:cf:0d:fc:1f:60:06:78:ee:fe:ab:6e:86:30:16:
                    69:80:92:c0:2d:a6:19:29:2f:6a:76:77:e9:11:df:
                    1d:ea:d1:3f:86:03:1d:59:d3:45:68:18:3c:63:86:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:54:01:BB:06:F9:9A:B8:9F:A0:44:FA:74:A8:AC:EF:B7:7B:F5:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.109.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:11:66:14:ac:f8:4f:0d:17:5b:03:9f:55:55:fc:77:a3:30:
         76:e1:7f:e5:5e:0a:d5:bd:f0:2c:74:ce:33:9d:db:10:45:f0:
         6f:42:01:88:86:d6:5e:40:fe:1e:b4:2a:eb:38:8e:a1:6f:67:
         d2:40:ad:4b:cf:79:1a:2d:29:cf:f8:56:15:d2:9c:a8:b9:8a:
         2e:ba:2d:d7:ec:28:40:de:b7:e6:42:31:31:96:bc:7e:8d:92:
         d3:79:4f:e2:b9:8e:97:0e:de:97:28:b6:a5:6b:f3:2a:ba:45:
         cf:a7:4f:17:24:b8:60:3a:dc:08:93:80:02:a5:9f:da:d1:b1:
         fc:fe:c4:f8:6d:8a:b3:6a:f9:46:d4:cb:e1:e5:31:ae:48:23:
         a5:bb:f0:7a:4c:74:77:60:90:5b:f9:3a:76:dd:0e:fd:a2:08:
         80:5a:de:91:4d:ae:a2:97:82:6c:43:9b:3b:d2:a8:90:d0:c6:
         d4:89:5a:c0:f2:fc:89:d8:bc:2f:b5:c3:90:db:41:87:7d:6e:
         72:b9:34:3d:21:39:37:a1:a6:e4:f0:b0:9f:26:7e:24:cb:b6:
         3f:20:bc:88:40:14:70:0f:f2:99:0c:e4:0a:49:e8:7d:46:cd:
         eb:ae:f9:68:33:cb:0d:78:55:9e:bf:b2:5d:fb:ec:95:67:d8:
         6e:1d:9b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:15:27 2025 by rpki-client