Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/0dfd3e25-c4cc-3813-8714-9c669957c21d.roa
File:                     0dfd3e25-c4cc-3813-8714-9c669957c21d.roa (raw, json)
Hash identifier:          b+xQCMGJ4iTdoDBtTxE8IAbsKuNuEivE82m6i41DydQ=
Subject key identifier:   1E:09:FB:D8:CC:4B:40:74:7A:ED:E4:E0:0B:BE:A4:4E:1B:76:EA:8D
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584AECC124D16D739614E44874C0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/0dfd3e25-c4cc-3813-8714-9c669957c21d.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     54004
IP address blocks:        65.51.0.0/20 maxlen: 24
                          65.51.16.0/21 maxlen: 24
                          65.51.24.0/22 maxlen: 24
                          65.51.30.0/24 maxlen: 24
                          65.51.32.0/19 maxlen: 24
                          65.51.48.0/20 maxlen: 24
                          65.51.64.0/18 maxlen: 24
                          65.51.80.0/20 maxlen: 24
                          65.51.96.0/20 maxlen: 24
                          65.51.112.0/20 maxlen: 24
                          65.51.128.0/17 maxlen: 24
                          65.51.144.0/20 maxlen: 24
                          65.51.160.0/20 maxlen: 24
                          65.51.176.0/20 maxlen: 24
                          65.51.192.0/20 maxlen: 24
                          65.51.208.0/20 maxlen: 24
                          65.51.224.0/20 maxlen: 24
                          65.51.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:24:d1:6d:73:96:14:e4:48:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=1e61a9af-9dba-43d7-8355-23f1719019e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:08:88:af:e4:9d:3e:49:b9:ce:02:b6:eb:
                    30:80:6d:2e:b0:09:be:42:8c:b2:65:cf:4d:97:83:
                    2b:1b:57:13:81:e7:13:b8:03:f3:4b:7a:27:35:b9:
                    ce:92:5d:23:ba:66:2f:aa:cf:b8:e9:99:aa:2b:d3:
                    2e:33:c1:a3:ec:4a:2b:90:bd:b8:b8:a8:5f:70:5b:
                    86:2c:94:05:37:ff:6d:b8:a2:fe:e4:8b:03:4d:f9:
                    60:b1:ba:fb:35:08:95:44:47:d4:f2:dd:00:54:7a:
                    01:db:53:e2:01:a1:ba:1f:21:10:03:63:29:f7:d5:
                    9c:6b:a2:5a:ea:7f:3d:f6:e2:ed:35:52:89:36:29:
                    fe:78:bd:da:9d:b0:54:64:cf:1e:ef:78:aa:17:26:
                    2f:7e:52:b5:bd:b3:ac:69:78:c7:f7:7f:50:c5:22:
                    94:e3:d8:18:44:ae:df:36:00:3d:54:d0:bb:c4:c6:
                    e0:2f:8e:9d:4a:a9:17:2e:7e:0a:c6:02:83:e9:08:
                    9c:3d:df:ec:cf:f8:36:66:c2:f6:d6:9f:71:17:1b:
                    3e:4f:27:57:fd:88:61:0e:e1:62:24:9c:1d:cb:61:
                    3a:e8:28:49:7f:ec:83:f6:57:c7:70:bd:2a:e1:fb:
                    41:a0:d2:3a:1d:ab:2e:4f:da:d1:69:b4:72:8b:5b:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:09:FB:D8:CC:4B:40:74:7A:ED:E4:E0:0B:BE:A4:4E:1B:76:EA:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/0dfd3e25-c4cc-3813-8714-9c669957c21d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.0.0-65.51.27.255
                  65.51.30.0/24
                  65.51.32.0-65.51.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1e:4c:ae:4a:af:6f:d0:14:d8:ec:25:be:69:c4:1f:f9:71:
         79:f0:be:df:40:57:92:c2:34:b9:d0:f9:ec:1f:73:54:d9:b1:
         f7:02:8e:08:ce:81:1a:32:68:60:b1:8f:2a:11:15:df:22:eb:
         30:6c:6f:d0:ff:1d:e8:80:65:ab:ec:56:33:10:76:e4:96:66:
         09:55:cf:87:aa:7b:bc:59:c7:59:b1:8c:a0:ea:4b:3d:8a:44:
         15:a3:2f:a7:1f:42:30:26:35:c9:2b:10:be:a8:12:bc:f1:d6:
         9e:a1:7f:8c:eb:0f:66:be:d9:9f:f8:b7:b2:95:f8:3a:4d:87:
         2c:d9:74:93:c3:26:c6:6f:cb:71:1a:4f:0a:6b:e3:bc:2b:df:
         c0:5f:d1:5d:b6:a7:71:15:3f:eb:a9:93:06:7f:47:55:9f:2c:
         72:38:3b:ea:6d:60:65:c8:60:59:e7:7f:bc:83:d5:6e:e6:60:
         9c:b7:26:33:ed:3a:5f:e9:35:95:3f:74:0e:51:9b:bc:65:fa:
         78:18:56:c9:b8:32:1b:9f:65:78:9a:36:ee:60:70:e2:19:6d:
         66:56:51:76:6b:1f:a9:7a:c5:8f:72:cc:5e:88:8c:34:80:11:
         5d:5c:ea:b9:c5:13:d8:0e:0c:ea:f0:6a:63:9c:b8:73:b6:82:
         6d:1b:e2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:09:52 2025 by rpki-client