Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa
File:                     1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa (raw, json)
Hash identifier:          VkbyrthuHAJ76XabuC4Ofj9QB/CzVAHeJB8xx3iLXVc=
Subject key identifier:   BD:DB:3A:C0:26:D2:B1:FE:E7:1D:95:68:BC:26:07:F2:7B:7D:D1:A0
Certificate issuer:       /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
Certificate serial:       010D0C9F4328584AD7D106653D3A03B5219E1440
Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     33164
IP address blocks:        172.97.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:06:65:3d:3a:03:b5:21:9e:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=871c1993-eadb-4000-8ee5-56d85bc29e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:25:50:3a:96:6a:99:f1:ba:ac:7b:db:88:
                    d1:4b:60:92:86:c1:4b:37:a9:36:64:bf:94:7a:a6:
                    56:8a:98:18:56:f3:96:a1:aa:67:8e:17:f2:43:7e:
                    88:3a:73:fd:8a:78:59:5d:6a:91:86:1d:a7:44:80:
                    61:27:ba:46:12:3a:1e:79:17:54:f3:82:9c:95:93:
                    ea:34:ec:e7:cd:f3:d4:70:28:82:d7:8a:24:05:78:
                    6c:5f:c4:94:f3:cf:bb:06:a6:3b:26:2d:1a:a0:41:
                    11:86:cc:7e:d2:83:9b:ea:ce:42:d6:c2:3a:82:13:
                    e7:67:40:71:cb:a7:7a:f0:42:7e:47:a8:0a:2d:1a:
                    0e:b9:11:8f:2b:30:69:20:7d:f4:5e:66:1c:1b:d5:
                    37:f1:de:09:d0:c8:62:e9:b2:00:95:12:bb:f6:e6:
                    6f:a4:4c:c5:e9:8c:db:97:1c:a3:fe:52:8d:57:3b:
                    5f:a2:fd:81:24:47:b3:18:f3:5d:09:b9:90:3d:cd:
                    b4:96:6a:8b:0c:f8:cb:fe:5d:e6:fd:b9:1a:0b:7f:
                    78:6d:40:82:bb:7a:51:d5:21:ce:96:74:e4:52:37:
                    49:a0:3d:ec:42:66:de:19:3e:83:39:d0:40:b4:80:
                    53:e5:6e:f6:36:13:c3:a7:45:e2:52:c6:62:bf:7a:
                    62:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DB:3A:C0:26:D2:B1:FE:E7:1D:95:68:BC:26:07:F2:7B:7D:D1:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl

            X509v3 Authority Key Identifier:
                keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.97.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:3b:89:c9:dc:b9:54:74:6d:b2:b4:6d:ba:0e:95:38:d6:ca:
         84:31:4f:99:03:ac:14:f0:72:87:f6:c1:78:fc:86:30:60:cb:
         5b:f6:24:92:a1:3d:3e:0a:64:7d:67:5c:77:06:24:6d:e2:36:
         08:71:41:87:48:6d:79:73:d3:67:dd:7e:1a:1b:14:85:bd:8d:
         7b:a4:e3:32:3f:25:ee:07:84:e9:1a:7b:33:86:86:73:59:85:
         e7:02:49:6b:c0:0a:71:d6:26:89:13:ec:f2:e7:f8:eb:88:01:
         1a:da:9f:99:56:62:a6:9f:fe:be:c1:fb:5f:c4:fa:3d:cb:4e:
         67:86:ae:19:6e:0f:66:27:e4:51:f2:98:94:50:ac:25:6e:39:
         40:7c:47:c1:32:ce:52:ee:ee:65:c0:e9:01:80:8d:c2:f2:fc:
         fb:9e:29:9e:2c:c3:87:33:c0:10:d0:eb:a3:5f:c5:65:20:52:
         34:23:4f:f8:8b:87:63:54:c4:b0:f4:88:e9:1e:71:2a:fb:7f:
         6f:6e:fd:20:ff:90:a4:8f:bc:4a:4b:f7:73:ed:0b:32:bc:9b:
         ad:72:b3:24:cc:aa:4e:fa:50:05:7a:a9:44:a8:f6:55:72:b7:
         4a:fb:e1:d1:20:ec:11:56:41:6c:d6:2c:d8:a3:92:47:12:6a:
         a5:0e:02:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:02:55 2025 by rpki-client