Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/ed5f4bf2-11bc-3a9b-be7b-75ebc388140a.roa
File:                     ed5f4bf2-11bc-3a9b-be7b-75ebc388140a.roa (raw, json)
Hash identifier:          VUJE1ayfRso6L2ExuxBkxOY2Z5TTVF3jMoDVhBityTA=
Subject key identifier:   D8:5A:52:0A:CF:FA:B3:FB:8E:94:BE:EF:61:D3:BC:03:21:86:C4:8B
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584ADA9BD38BB2F52B6EF4425200
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/ed5f4bf2-11bc-3a9b-be7b-75ebc388140a.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     7029
IP address blocks:        65.110.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:d3:8b:b2:f5:2b:6e:f4:42:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=34e0bd3a-9fca-475c-a3c6-cc64ed5a8f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:aa:c7:b5:fe:dc:86:77:40:8b:76:a2:14:
                    72:26:a0:5d:b2:39:29:9c:a7:99:3f:cc:c0:79:af:
                    33:d5:b7:8f:ad:c2:f3:f4:29:85:71:c6:13:6c:d0:
                    59:66:a0:15:35:90:3f:f9:e6:b3:44:c3:3c:ae:f6:
                    50:8b:58:85:1b:fa:87:3c:2f:fc:eb:8c:02:9b:28:
                    22:0e:af:66:51:dc:e6:9b:8d:e4:92:5a:63:24:44:
                    3f:9c:a6:15:45:3d:70:43:e6:74:be:a4:b7:8b:8b:
                    4d:e7:e7:47:53:41:2c:e2:ca:23:b8:9f:9c:b0:87:
                    14:29:9e:30:4f:23:b2:fe:d0:26:97:cd:e3:67:7b:
                    a6:8e:d7:5b:a9:12:ac:62:d2:b3:19:52:1c:15:35:
                    ea:ed:f4:2f:d8:88:ca:33:26:ca:b3:35:84:f9:48:
                    ed:1a:4a:e1:89:ae:22:42:1c:27:74:08:1a:d7:fb:
                    ab:c5:ef:38:ef:e6:93:15:74:ad:1f:c3:b4:55:c3:
                    7f:1f:c3:52:1b:4d:56:8b:6f:e6:d6:50:d9:13:e4:
                    df:91:da:03:48:16:e1:17:ab:b3:c0:d9:47:4e:58:
                    38:e8:6c:fa:3f:48:26:15:cf:bc:64:41:5f:8a:54:
                    61:68:57:84:d2:0d:89:9d:d2:d2:25:9d:4a:e4:3c:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5A:52:0A:CF:FA:B3:FB:8E:94:BE:EF:61:D3:BC:03:21:86:C4:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/ed5f4bf2-11bc-3a9b-be7b-75ebc388140a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:75:f4:e7:06:f4:d0:57:7e:54:ae:8b:05:50:e6:3a:29:00:
         75:bf:29:77:8e:97:1e:2b:d1:bc:d4:d2:2d:73:ab:db:cf:05:
         79:62:50:2f:4c:3a:8f:1d:d3:14:13:cb:0c:a2:9c:e7:24:02:
         64:16:8c:18:89:28:8f:dd:1c:07:e5:d1:5d:37:69:fa:4e:8d:
         ef:d6:e2:da:5b:af:c4:97:ce:a2:c3:7a:11:c5:0e:d7:ec:51:
         8c:92:3a:87:6b:20:fa:99:65:f1:f4:aa:70:bd:31:e3:87:49:
         87:53:f1:47:46:d7:10:3f:ab:1a:ac:ec:d9:51:72:9c:74:37:
         49:5b:c0:e0:ed:3b:84:ae:b9:95:8d:6e:9f:a6:24:2d:82:11:
         44:cd:cd:85:39:25:4c:c9:ce:f1:d4:80:ac:0f:51:e8:f1:aa:
         72:f5:d6:38:be:62:37:42:bf:b3:d5:aa:09:80:a0:c4:e7:4f:
         5f:02:e9:4d:5c:13:9f:ea:40:87:8d:02:82:b5:d3:8a:56:aa:
         b4:2a:1c:a1:07:66:6f:27:9c:f2:ad:cc:35:d6:61:c5:e3:d3:
         c5:76:45:3b:4a:f7:7c:16:4a:b4:b6:f0:e6:9c:42:4d:7d:dc:
         f8:fa:7f:85:a0:1a:46:2c:7e:47:8e:ce:7d:71:c8:c7:d7:51:
         77:6d:ea:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:04:12 2025 by rpki-client