Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa
File:                     65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa (raw, json)
Hash identifier:          amAzLAwu1nwsPVjhJvaBNJpR8KmcmoxdqbiOWNDGmqQ=
Subject key identifier:   6C:DA:53:D7:FF:5C:E4:13:7F:50:30:BA:39:87:80:36:49:85:88:0E
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584ADA9BC33EA1B1BBD046C51400
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     6079
IP address blocks:        162.250.96.0/21 maxlen: 24
                          162.254.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c3:3e:a1:b1:bb:d0:46:c5:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=1e0bf292-3599-419b-a3eb-0a54697e3fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:32:a6:ec:77:8c:0c:85:06:e4:5c:4e:43:b7:
                    e8:f3:44:2d:0e:fb:a8:de:c1:c2:2f:f3:dd:67:e8:
                    06:29:fa:1d:75:77:94:0a:02:6f:d9:53:70:25:5f:
                    98:38:25:ac:66:c0:c3:d9:8f:68:47:b1:ac:0a:e9:
                    68:57:d8:f9:21:74:d5:be:c4:20:e0:dc:85:92:cf:
                    f2:02:36:38:56:b2:84:c4:0d:bc:55:03:a0:8d:be:
                    d8:00:1e:85:9c:3f:4d:ca:17:ff:58:fa:80:97:39:
                    ea:c8:a4:d0:b7:61:4b:c8:2b:d9:20:d9:d5:97:40:
                    40:1c:d4:d3:d5:8c:fc:f4:d4:7f:31:93:a2:db:91:
                    55:fd:78:51:17:29:8a:ae:c7:6d:72:40:64:d2:6c:
                    8c:c2:31:94:38:cf:82:f5:2b:08:24:49:21:df:d9:
                    63:c0:4d:68:74:0b:b8:88:d0:e2:4c:9b:e1:b3:e8:
                    6b:e3:57:1b:a3:d1:66:f6:20:0f:dc:ff:ea:b2:bd:
                    5a:6f:a0:f7:57:4e:80:1f:62:31:fb:70:b8:73:e9:
                    a2:1d:af:64:30:8a:21:88:cd:e0:03:1f:bb:21:35:
                    ba:b0:38:4a:fd:d2:96:58:83:6c:80:cb:4e:58:87:
                    54:33:a0:7a:b5:52:39:71:11:42:82:e9:74:b3:df:
                    8a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DA:53:D7:FF:5C:E4:13:7F:50:30:BA:39:87:80:36:49:85:88:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/65ad56d8-2c2f-3c1b-900e-8f61b34d0dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:9c:cd:1a:dd:dd:21:73:e9:31:6a:87:42:94:be:05:ba:63:
         99:ef:3d:6d:9b:2a:43:89:e4:b4:c8:c1:91:86:f3:15:4d:9b:
         41:8a:70:c6:05:63:e4:8e:e7:b5:fe:59:f6:ae:07:93:ad:d8:
         dd:f6:65:25:a7:9f:fd:5c:4a:f2:11:69:98:83:db:25:1c:92:
         ba:90:74:53:f8:03:72:ea:fe:b1:e8:ac:aa:c3:5c:ac:ff:0d:
         03:40:4c:a9:a9:74:de:50:5c:93:94:e1:b1:ca:c2:0c:31:8f:
         b4:0e:27:2a:03:fd:1e:ef:ba:1a:bf:25:91:0c:e9:07:7f:d3:
         05:b1:c6:2f:31:7b:d0:dc:f0:27:a1:a5:33:d7:69:67:4e:cb:
         16:b8:e0:5c:8e:24:be:b2:53:dd:fb:6f:54:45:e6:41:c0:b9:
         f6:b2:a9:35:99:d5:a1:d4:9e:bd:e9:2b:74:5e:21:9c:8b:57:
         3b:49:3c:a2:1b:ba:2a:9c:4b:23:43:ce:ad:de:67:f4:1f:b9:
         05:f7:bb:e5:d0:4d:a8:1c:9f:23:25:34:0c:20:4f:5e:30:6b:
         69:45:2e:f5:5e:3f:5f:f8:10:81:9d:56:ce:25:1d:3d:21:08:
         e1:6f:6e:3b:fb:51:f9:c4:a2:0a:9b:21:51:3f:57:6e:e7:b9:
         48:11:93:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:47:53 2025 by rpki-client