Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c65a2db-0da6-34ad-a0f3-1e6760344465.roa
File:                     5c65a2db-0da6-34ad-a0f3-1e6760344465.roa (raw, json)
Hash identifier:          78kpMbtvLSa4PDLqbSqn1g8T6+OZUHiehgnzf1FQZtk=
Subject key identifier:   7A:5D:73:DD:FA:4E:76:F2:2A:0E:3A:A7:61:19:09:35:F2:5B:10:73
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584AE1966BC725825086A5A61740
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c65a2db-0da6-34ad-a0f3-1e6760344465.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     7922
IP address blocks:        202.165.72.0/21 maxlen: 24
                          202.182.64.0/20 maxlen: 24
                          216.185.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:6b:c7:25:82:50:86:a5:a6:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=f38dab87-c7f6-4e47-937f-4dcfa8c050a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:52:0b:a0:ce:6d:30:26:09:6d:0b:52:31:97:
                    56:ab:55:7c:6f:ff:59:20:6d:f9:1e:2e:47:2a:73:
                    ee:89:03:23:18:ee:2f:43:6d:45:ac:ee:54:7a:d5:
                    dd:1c:31:bc:d5:40:37:8e:46:53:27:23:8a:7f:ce:
                    55:52:8b:ad:46:44:1c:07:af:2e:dd:6d:f8:a6:c5:
                    26:48:51:ee:c3:ad:8e:91:98:75:3c:ef:b7:15:f2:
                    94:65:85:d5:b2:5b:a7:33:11:af:b5:4d:5f:22:20:
                    19:1c:a4:70:bf:bc:23:b5:19:a6:88:ac:cb:47:6a:
                    44:b1:18:28:87:df:33:88:d0:80:28:f4:be:f1:2b:
                    9e:2b:8c:c2:ae:32:43:8f:a7:3e:d3:cd:5b:3d:d4:
                    03:f0:c5:55:98:49:72:1d:53:77:f0:45:b8:98:98:
                    84:18:b1:17:0a:30:4e:fd:4f:81:7a:e6:22:f4:60:
                    b2:4f:f1:b2:49:cb:81:1d:4c:df:84:62:1a:24:e7:
                    47:73:43:15:67:67:34:c6:2a:12:2b:a5:79:11:b4:
                    e8:67:3f:66:47:18:ff:bc:46:83:df:70:9a:7e:b3:
                    a0:52:b9:29:2b:c0:92:04:a1:41:dc:f6:ce:69:27:
                    23:57:b9:c5:d0:5d:27:a8:19:a0:db:52:97:03:d6:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5D:73:DD:FA:4E:76:F2:2A:0E:3A:A7:61:19:09:35:F2:5B:10:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c65a2db-0da6-34ad-a0f3-1e6760344465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.72.0/21
                  202.182.64.0/20
                  216.185.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:58:07:c2:18:41:49:42:03:fe:59:b1:f1:f4:66:7c:ae:05:
         7d:16:13:9b:4d:31:b2:a9:4e:e3:d5:a1:dd:83:8e:ca:c0:f2:
         7b:63:9d:02:3b:38:80:83:d7:17:6b:18:e0:df:46:a6:13:9d:
         6d:7f:3a:5f:fa:00:f9:da:a7:4f:d4:5e:15:77:28:12:80:49:
         06:e1:c3:ee:c2:b2:79:02:2d:fe:76:70:e2:fa:67:39:ef:5a:
         fe:ed:e4:a7:32:4d:e6:3f:a1:4b:24:de:02:87:aa:ff:96:14:
         94:75:70:25:49:2b:79:8e:5b:51:f0:7c:9b:f9:a2:7a:9b:86:
         f4:c9:d8:97:29:da:2c:92:9b:30:be:14:9e:ab:ac:a5:3d:7c:
         f1:15:41:24:18:41:e2:c3:0b:fa:67:2f:8a:a9:85:60:71:f4:
         a5:99:bf:8d:e1:eb:58:ad:1b:ac:63:c8:f0:61:1d:08:b9:df:
         f3:ed:0d:e5:ac:0d:6b:7c:d4:74:49:4f:66:39:5c:ac:04:a2:
         5b:ec:bc:59:46:25:cc:a1:36:bb:8a:c6:a5:41:28:71:87:81:
         39:bd:ce:7e:62:8b:e6:06:3b:7d:3d:54:33:5d:95:36:23:ca:
         ea:c7:f6:61:91:a9:95:1a:d2:bd:31:00:1c:84:2c:85:87:b9:
         f0:e2:01:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:45:59 2025 by rpki-client