Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/7d84bb51-a099-3e29-97b7-146d0a2f7a43.roa
File:                     7d84bb51-a099-3e29-97b7-146d0a2f7a43.roa (raw, json)
Hash identifier:          qAShwUcjcXhfbES5McMwBT18Yk/tznmIjVS0u1cTD4w=
Subject key identifier:   84:84:FC:23:D5:DD:8D:A7:C6:D4:76:5B:B4:C8:D3:C4:11:BE:20:2F
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584ADECBB11967E8D8F2F8A52660
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/7d84bb51-a099-3e29-97b7-146d0a2f7a43.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        85.113.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:b1:19:67:e8:d8:f2:f8:a5:26:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=e1bd739a-f0cf-4c35-a72c-b43b3dd8522c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8e:75:87:76:4d:f5:6b:d3:78:1f:b6:00:55:
                    82:39:a8:01:88:9f:18:c5:35:bf:95:47:9d:4d:b1:
                    b1:5b:78:6f:53:a8:2d:fa:23:75:b3:28:b5:82:d7:
                    0c:09:e6:99:75:cf:e2:67:28:c2:2c:c3:4f:11:ce:
                    a3:de:bc:fe:ed:28:46:fa:e2:b4:01:b6:8f:21:73:
                    7a:eb:df:d8:ba:51:24:72:05:46:94:cd:24:da:fb:
                    0f:8d:e4:ec:66:a3:0a:11:fa:d7:fd:3a:89:a1:97:
                    ba:7d:ab:48:c2:7d:32:a6:0c:a3:4c:cd:df:ee:c1:
                    25:a5:4c:28:ab:f9:93:ed:ac:6f:c6:6a:84:4c:da:
                    52:d6:3f:38:25:83:48:75:e2:df:01:eb:71:5d:e6:
                    3a:2d:ea:31:72:a5:48:c1:bb:62:e0:ea:e9:b3:49:
                    8f:1a:00:60:4a:64:4b:f4:3a:e3:56:9d:76:0b:48:
                    7d:cc:b0:49:c1:ef:4d:85:1b:45:76:9a:90:a7:19:
                    c2:6b:a5:07:1a:45:d2:3f:b9:20:30:58:5d:4c:04:
                    61:7d:61:c3:dd:89:4e:a6:84:a9:71:f5:15:8a:03:
                    89:7f:83:b8:8c:18:a0:ea:90:0f:d5:c4:35:26:0b:
                    09:de:76:b2:55:5b:56:05:9c:6d:28:8c:18:f6:a6:
                    6d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:84:FC:23:D5:DD:8D:A7:C6:D4:76:5B:B4:C8:D3:C4:11:BE:20:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/7d84bb51-a099-3e29-97b7-146d0a2f7a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.113.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:2b:a9:b5:81:03:d9:78:98:e6:39:9c:10:cb:7c:ac:78:84:
         bd:29:d4:2f:f2:21:55:3c:93:c2:e1:cb:d4:dd:60:a4:ee:c4:
         9d:67:a5:eb:5c:af:34:fc:49:5e:09:e2:af:48:bd:44:80:fc:
         76:51:13:8b:62:59:33:85:d6:ee:e3:6c:19:89:3b:23:58:cd:
         3a:45:d8:61:7c:42:03:09:be:7c:ca:13:9d:cb:b6:52:dc:9c:
         58:9d:bc:fd:83:34:79:95:66:53:01:9a:52:ec:1e:28:94:b0:
         f4:36:2a:ab:ca:e0:2e:a2:2d:fd:23:de:ab:18:6f:e2:d1:f0:
         4b:cf:93:67:91:6a:4a:72:89:58:b2:a8:f5:ee:6e:01:71:c9:
         5b:8f:8b:68:b7:27:70:ed:81:2d:f9:98:8d:b5:4d:c6:47:10:
         81:9e:37:a0:3e:d4:0c:52:08:a4:c3:cf:90:50:4b:1b:9d:57:
         30:7a:df:5e:4d:13:1c:fe:8b:fa:92:2a:55:a5:17:70:64:c4:
         fb:49:e0:c7:cd:3b:3f:4a:0e:01:ff:16:06:14:aa:fd:2d:e2:
         58:19:0b:3d:cc:8a:75:21:39:b8:38:fb:58:aa:e6:d4:3a:51:
         87:ff:93:88:2b:cf:05:6d:dc:d4:f8:84:f0:fa:08:9b:32:16:
         e8:6f:b3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:37:27 2025 by rpki-client