Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/875aebfb-12ca-3518-8fb5-da8aa746b43f.roa
File:                     875aebfb-12ca-3518-8fb5-da8aa746b43f.roa (raw, json)
Hash identifier:          H2LbIhBxrlsNVjbeVoiFDHrtZTMWWZR4y5J8wIel1Bw=
Subject key identifier:   CC:54:C9:52:03:28:AF:DD:80:8B:9E:B3:4E:0B:DA:81:15:DE:C1:86
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F4328584AE5C67CFDF555649FF427CB00
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/875aebfb-12ca-3518-8fb5-da8aa746b43f.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        65.62.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:7c:fd:f5:55:64:9f:f4:27:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=2d3601f7-e980-4e52-a0f2-5df7a2d11c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:50:2b:60:92:2b:00:68:66:1c:be:a4:e4:
                    c3:cb:fa:10:31:b8:1a:cb:6b:0b:16:b6:96:1e:e2:
                    47:3c:fa:da:70:13:2b:b0:46:d7:de:6a:56:ab:62:
                    a3:07:2c:41:27:9e:9b:77:2b:36:a1:01:03:00:7f:
                    37:56:53:cf:94:74:eb:28:74:4e:8b:67:c3:65:d1:
                    0b:c2:de:68:97:2a:29:04:46:ba:ef:82:c5:b1:88:
                    58:5a:2d:8a:c9:29:87:6c:23:9c:60:7c:3e:6b:27:
                    2e:26:c0:d0:2a:50:0f:36:63:63:c7:f9:36:24:db:
                    f8:8d:00:87:f5:22:ea:ea:3d:78:d7:0e:0f:6c:d2:
                    13:61:b4:f2:9d:07:1a:bd:39:c2:4e:e5:ee:22:d1:
                    81:20:6a:50:af:36:1f:20:88:c7:fb:e0:e2:22:fd:
                    22:64:25:69:5e:62:3d:b5:af:37:71:ed:04:40:ca:
                    df:9c:61:70:33:72:d0:06:44:08:16:83:a6:1b:b0:
                    ec:3f:20:55:6a:b0:a6:b1:77:7b:22:c9:e2:b7:96:
                    45:4b:c4:1d:2c:f1:41:6d:61:0a:20:8f:84:50:37:
                    07:1a:6b:f4:ce:73:60:b8:91:2d:76:35:02:ea:68:
                    01:28:6b:13:8b:2d:84:21:7c:37:65:4d:79:13:94:
                    67:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:54:C9:52:03:28:AF:DD:80:8B:9E:B3:4E:0B:DA:81:15:DE:C1:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/875aebfb-12ca-3518-8fb5-da8aa746b43f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.62.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1d:03:14:00:b1:ec:4b:ef:bc:d2:b6:7b:84:f3:1b:2c:1b:
         90:98:5c:3a:e1:48:96:d1:d4:ca:9e:2b:e6:ec:8e:95:e1:ab:
         ba:5c:31:f1:a1:4d:6d:55:03:34:a3:ea:26:c9:02:b0:22:df:
         d1:58:5d:b5:61:87:9f:c9:f3:ee:bd:b3:da:0b:45:e5:cc:34:
         d5:1c:79:b8:00:9a:b8:2b:3f:98:23:70:66:c9:7e:c4:22:55:
         65:3c:b8:11:a2:fa:db:b4:a1:ad:59:a2:33:6b:61:01:1d:30:
         59:5c:99:68:80:b8:f4:00:5a:2f:0b:19:f9:a0:aa:e1:be:e2:
         a9:fa:79:c9:2b:a6:7f:76:9c:94:a1:a7:91:3c:a3:2d:f1:03:
         3c:b5:a4:3c:b7:39:38:a7:b8:a0:0a:0e:d6:19:8a:84:2e:a4:
         78:bf:cf:82:04:7b:a8:d7:94:09:ba:20:68:ac:fe:ef:01:88:
         3c:63:7c:19:30:c8:a5:72:b1:e2:3e:b3:de:3c:af:0e:a2:71:
         9f:09:af:16:dc:61:e4:aa:8f:f7:4a:4c:79:76:c7:e0:85:96:
         8a:0d:47:01:38:c8:ad:eb:ec:45:14:a1:1f:4c:dd:d2:c5:e2:
         b8:70:48:56:2e:1d:b5:ab:ff:66:03:49:12:76:74:87:db:41:
         55:b0:47:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:11:38 2025 by rpki-client