Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cc6af864-90a0-3457-883c-cee80d0464fd.roa
File:                     cc6af864-90a0-3457-883c-cee80d0464fd.roa (raw, json)
Hash identifier:          7GfazqD6ud2x6Of6C4Yk2FwfqO7DVhxyq3kdRCSkDw8=
Subject key identifier:   1B:C3:F6:94:63:EB:F6:15:4D:37:45:85:C2:3D:3A:D5:BD:0D:7F:C4
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584ACB40E46C9BCCAED469D058C0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cc6af864-90a0-3457-883c-cee80d0464fd.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     399684
IP address blocks:        65.51.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:e4:6c:9b:cc:ae:d4:69:d0:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=019aa815-1346-4584-83d3-967879d8b2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:31:1c:03:f1:3b:15:41:0a:82:b0:5a:8b:
                    d1:55:41:f1:7d:36:ed:d4:3d:6a:73:81:cf:40:ca:
                    c5:b2:61:d3:4b:76:52:a7:62:8a:8b:71:53:1e:12:
                    0d:9c:21:fe:1a:76:21:7f:9b:29:42:ff:f0:03:08:
                    44:7d:b9:aa:04:82:ae:38:01:61:7f:77:db:b2:4f:
                    ca:27:c9:45:48:62:e3:ec:21:42:81:19:2d:5a:fc:
                    61:2c:28:ec:17:a8:3e:3e:e1:e2:13:e3:17:17:af:
                    9c:e1:c9:56:32:ec:5e:c0:69:1e:fd:9b:53:f6:54:
                    5b:8c:6d:4b:2a:27:3f:74:a6:7e:32:dc:09:fd:92:
                    a0:85:4f:84:f5:93:95:30:e1:a5:ca:ba:c6:a2:1c:
                    72:6e:32:e0:d8:b0:57:a0:64:d2:f0:46:97:4a:92:
                    d4:d3:a2:70:3b:b1:fe:bd:63:00:c0:9d:84:c4:8f:
                    96:c5:30:ca:86:0f:fc:53:b5:64:c1:52:a4:48:1c:
                    1a:2c:cf:c5:43:79:dd:4c:89:d4:6b:84:06:12:aa:
                    72:db:9b:c9:c2:49:15:d5:ce:21:3a:48:46:d0:4c:
                    2f:19:4c:73:e3:58:11:10:d9:0d:23:e4:ea:c3:d0:
                    e7:06:98:7b:07:9e:c8:40:a2:1f:a6:c2:15:e7:5c:
                    fa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C3:F6:94:63:EB:F6:15:4D:37:45:85:C2:3D:3A:D5:BD:0D:7F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cc6af864-90a0-3457-883c-cee80d0464fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e2:a9:3b:0a:67:b5:35:f5:72:e7:9a:5a:a8:4d:e3:c6:4e:
         ab:b6:0e:04:1d:ed:e0:2d:3b:56:37:38:cb:36:5b:1f:2f:11:
         4a:03:8a:99:11:fd:04:7e:81:4d:13:61:58:34:b4:51:c8:1f:
         cd:96:da:6b:bd:74:72:4c:96:19:1a:06:0d:82:2e:2a:51:32:
         df:76:5e:ae:47:55:7f:d8:7b:e8:2c:77:0a:e5:38:fc:6e:90:
         21:51:46:1d:78:0b:44:ed:81:48:a4:80:88:be:4c:e4:7f:a4:
         b9:ec:cd:f6:08:04:b8:29:9b:80:28:1f:cb:8d:a7:c7:05:90:
         8e:f9:73:09:b0:03:05:6a:00:97:6f:19:f3:5b:c9:73:c2:83:
         95:89:16:4b:97:85:c3:b9:b8:db:3a:0c:58:7b:ed:8f:c5:fa:
         3d:b8:e2:2a:14:2b:b7:cf:08:89:f6:ff:ba:9e:d0:90:0e:f7:
         70:66:94:6c:2b:0a:1f:30:b2:be:b4:2a:c8:c3:ef:2a:ca:00:
         8b:19:df:5b:61:7a:83:be:6c:34:04:59:20:b7:ac:e8:21:db:
         22:48:d5:91:76:01:6b:b8:ed:9e:08:3c:52:ee:1d:5d:ac:e3:
         26:9b:51:c0:0c:79:3e:21:45:48:de:15:a5:65:83:80:35:83:
         89:97:66:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:59:16 2025 by rpki-client