Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/ab1aca2f-be95-345d-be38-61fcf4d36b0a.roa
File:                     ab1aca2f-be95-345d-be38-61fcf4d36b0a.roa (raw, json)
Hash identifier:          YHRNC/QS8Y5I383BhtHtd+PuF7BZdMweBMOSpFX+MBM=
Subject key identifier:   0F:8E:32:D8:D4:4B:75:7E:36:A3:9E:67:84:B2:18:51:2A:55:77:48
Certificate issuer:       /CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
Certificate serial:       010D0C9F4328584B3DBA2546D20CBFD62550DF00
Authority key identifier: AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/ab1aca2f-be95-345d-be38-61fcf4d36b0a.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     14277
IP address blocks:        65.50.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:25:46:d2:0c:bf:d6:25:50:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=85d0cf69-a624-432e-ba1b-7b90c962cf2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:bd:1b:eb:90:32:bf:ed:e8:53:f7:36:ab:
                    c4:5b:e3:55:ce:25:b2:d7:09:a2:52:31:55:d6:ab:
                    fc:ac:ef:87:e2:ff:fe:ee:b5:01:a2:8d:11:95:d6:
                    b8:65:64:e3:5f:0d:78:a2:29:e5:c8:18:36:c2:ef:
                    c2:0c:e1:32:a5:91:31:e5:f0:fa:ae:a3:e2:98:f5:
                    6e:6c:eb:e0:6e:ac:a3:d9:0c:92:28:89:f7:c0:6c:
                    c0:29:23:bc:fc:72:6b:c1:03:c1:42:9e:eb:1b:70:
                    e0:ca:2a:ee:e3:d0:ed:9c:b8:dc:7b:33:3b:ba:e6:
                    f4:77:7a:14:a0:a8:d9:20:52:f0:4c:76:04:e9:c5:
                    27:53:f4:bd:d2:75:41:6c:b0:32:47:4a:f3:33:f9:
                    f7:86:c9:2a:26:91:93:40:e5:83:b8:50:dd:76:e6:
                    37:bd:e8:a8:35:52:61:17:03:e3:62:30:c4:96:ac:
                    51:13:b7:9c:95:7d:8a:78:f2:83:08:3d:27:6b:48:
                    bb:23:79:7d:12:52:15:7a:29:80:1d:06:8c:91:ca:
                    86:eb:76:ec:be:b4:ea:8c:4f:6b:7e:2b:15:64:aa:
                    c9:ee:75:ca:ca:a9:0d:25:af:98:a6:28:71:d2:81:
                    a9:b2:c5:41:2c:69:19:fd:c1:d2:90:77:a1:91:69:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8E:32:D8:D4:4B:75:7E:36:A3:9E:67:84:B2:18:51:2A:55:77:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/ab1aca2f-be95-345d-be38-61fcf4d36b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl

            X509v3 Authority Key Identifier:
                keyid:AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.50.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c3:97:ea:95:84:c4:ae:e7:08:79:34:b5:ef:ad:11:84:cd:
         8f:5d:72:41:c0:8a:fb:20:43:92:c0:50:6c:b4:c0:b7:db:9a:
         a4:5b:09:14:f1:d8:0e:c2:b6:f6:7d:2c:6d:ed:fe:10:b3:7d:
         83:ed:9b:49:c8:9e:08:71:ae:2d:ab:ba:05:17:ab:98:27:aa:
         71:e8:bb:ce:90:31:0b:c3:e2:87:03:a5:17:a4:34:13:85:54:
         c4:5f:74:30:7b:51:48:1e:d4:55:82:cd:62:4e:30:60:ad:1c:
         19:b7:40:c0:92:a5:ea:9c:a6:d7:55:ad:fd:7e:e2:ff:36:a7:
         88:29:e3:db:aa:3c:f1:10:28:05:70:30:e4:d1:aa:85:14:b9:
         53:f1:12:d7:c4:41:5e:cc:4e:c4:c6:f1:d1:8e:eb:d8:8c:40:
         c2:38:b8:99:d5:21:77:ab:b8:73:bb:92:08:f3:11:0f:38:85:
         da:49:0a:a0:3c:2b:b9:fc:0b:d9:62:d0:d8:0e:7b:68:ed:d8:
         4c:61:98:50:50:93:65:60:05:30:e4:fa:9b:48:15:b3:fd:78:
         7b:8b:b7:29:e5:5d:05:50:20:e4:c8:f9:0f:e3:44:18:4a:ec:
         5d:7d:83:de:11:fa:2c:fb:ea:29:e7:da:ec:8d:7d:30:e8:2e:
         af:d0:a1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:12 2025 by rpki-client