Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a51dfd1-7ee3-4268-b22f-5f94c97d631b/42166f01-c3e8-30e8-8cbc-5a38cea105cd.roa
File:                     42166f01-c3e8-30e8-8cbc-5a38cea105cd.roa (raw, json)
Hash identifier:          tXpbaYgurfkxORmHezLwdpEsTvl3vi6aH28KVsh8NGM=
Subject key identifier:   CB:46:F8:57:5B:66:51:AC:55:15:E8:F4:DD:12:D8:EE:FC:DD:5C:03
Certificate issuer:       /CN=8a51dfd1-7ee3-4268-b22f-5f94c97d631b
Certificate serial:       010D0C9F4328584AD3A117D3B8063F7709AEAE60
Authority key identifier: 1B:67:24:CF:BE:F2:80:32:84:08:FD:2A:D7:1B:E5:9B:BB:A4:4F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a51dfd1-7ee3-4268-b22f-5f94c97d631b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a51dfd1-7ee3-4268-b22f-5f94c97d631b/42166f01-c3e8-30e8-8cbc-5a38cea105cd.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     33361
IP address blocks:        199.83.240.0/22 maxlen: 22
                          204.15.32.0/23 maxlen: 23
                          208.89.48.0/22 maxlen: 22
                          2605:b000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a51dfd1-7ee3-4268-b22f-5f94c97d631b/8a51dfd1-7ee3-4268-b22f-5f94c97d631b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a51dfd1-7ee3-4268-b22f-5f94c97d631b/8a51dfd1-7ee3-4268-b22f-5f94c97d631b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a51dfd1-7ee3-4268-b22f-5f94c97d631b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:17:d3:b8:06:3f:77:09:ae:ae:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a51dfd1-7ee3-4268-b22f-5f94c97d631b
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=d16a6285-8782-4a32-b275-38a4807db27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:83:7e:6a:6b:a5:2d:93:a7:7b:71:2f:24:
                    e6:9e:b5:5b:66:9d:ca:ee:e7:b9:40:03:63:53:e6:
                    6a:ff:34:fd:8b:eb:1f:df:e7:b0:cb:76:e6:06:96:
                    31:37:95:74:78:e5:9e:60:a3:b1:c5:a3:00:be:ab:
                    9f:12:cf:71:b2:5e:03:20:1f:cb:3e:7b:85:06:33:
                    d4:21:5f:13:d3:18:50:a1:b8:e6:0c:f3:c1:fd:95:
                    be:4e:2f:e1:74:3c:ae:29:8c:be:0c:77:b8:14:62:
                    62:d9:a8:ba:20:66:e8:b3:23:08:06:65:15:ab:a3:
                    a2:c6:47:e3:1b:4f:2e:a0:e2:46:96:45:7c:48:92:
                    ee:58:f1:f7:9e:19:b2:31:b6:99:ff:60:4f:80:a5:
                    e4:ed:5b:09:e6:1d:f3:83:04:b3:ba:dd:44:71:ec:
                    d0:7c:9d:1f:94:31:55:c7:63:61:d0:20:ef:97:35:
                    9c:77:ac:8c:1b:2e:8c:de:e5:f2:a4:22:3f:d1:b7:
                    50:a7:15:dd:1a:7d:11:cb:a6:80:20:08:4f:c1:f5:
                    18:0c:db:cd:d9:b6:0e:bb:7a:92:b8:fb:11:1d:fc:
                    55:6d:77:07:7b:24:df:a1:ad:29:44:e4:63:91:42:
                    95:ad:d3:c1:13:f0:98:c4:3f:2b:ba:27:4d:96:d3:
                    7a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:46:F8:57:5B:66:51:AC:55:15:E8:F4:DD:12:D8:EE:FC:DD:5C:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a51dfd1-7ee3-4268-b22f-5f94c97d631b/42166f01-c3e8-30e8-8cbc-5a38cea105cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a51dfd1-7ee3-4268-b22f-5f94c97d631b/8a51dfd1-7ee3-4268-b22f-5f94c97d631b.crl

            X509v3 Authority Key Identifier:
                keyid:1B:67:24:CF:BE:F2:80:32:84:08:FD:2A:D7:1B:E5:9B:BB:A4:4F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a51dfd1-7ee3-4268-b22f-5f94c97d631b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.240.0/22
                  204.15.32.0/23
                  208.89.48.0/22
                IPv6:
                  2605:b000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f1:81:0f:82:c6:99:c1:e8:10:35:3b:3c:4d:b7:be:cb:7b:
         dc:c8:3f:e1:e2:3c:e1:c3:52:00:4f:a2:59:8c:66:54:2c:16:
         98:09:9b:b2:27:5f:1f:08:0a:45:d0:d6:c0:13:24:a5:b2:62:
         0a:2b:fd:0e:e6:95:b3:dd:4f:ed:5a:d3:7b:0f:b3:fc:ab:93:
         0a:e2:ad:46:a0:fc:04:88:4d:f3:c7:04:5e:da:bc:f7:de:64:
         05:fc:71:dc:19:b6:88:f1:26:96:78:c7:ff:29:a4:11:dc:e7:
         e9:b2:34:17:be:df:0c:62:ce:db:16:10:0c:16:81:c2:96:5b:
         45:75:ed:57:43:0b:06:ae:be:1c:98:c1:10:2c:74:b9:7e:48:
         40:9e:dc:ba:0a:0d:67:d9:6a:98:0c:63:41:72:55:28:d8:6e:
         1e:e9:3d:d8:a6:af:6d:26:25:22:50:0b:e9:27:ab:0d:0d:9f:
         29:13:f3:62:4b:4b:34:7e:d9:93:a3:b9:f7:d7:c7:15:c2:3e:
         89:56:16:85:f1:f8:4b:72:0c:4c:1d:c6:8f:80:eb:c6:ad:48:
         73:dd:c5:24:31:cd:fe:0e:da:ee:a3:b9:2f:5f:5e:63:36:ba:
         63:1e:ed:ee:58:28:b8:94:3a:e0:2e:f2:e6:6f:22:a8:86:91:
         ba:97:02:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:57:36 2025 by rpki-client