Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/dfc21920-33d3-36af-9d3d-f32de48afd1f.roa
File:                     dfc21920-33d3-36af-9d3d-f32de48afd1f.roa (raw, json)
Hash identifier:          xnm4uTvajltJ5xhfdpFyi5JXiEfvImFeHP3gDrBZ+ZY=
Subject key identifier:   8E:3D:37:A9:97:9E:AF:D6:FC:E0:7A:6F:FA:05:B3:65:8A:DE:29:63
Certificate issuer:       /CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
Certificate serial:       010D0C9F4328584B21CC1F3E653ED6B4A171EC00
Authority key identifier: 55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/dfc21920-33d3-36af-9d3d-f32de48afd1f.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     138997
IP address blocks:        65.75.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:1f:3e:65:3e:d6:b4:a1:71:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d987b62-9839-4512-aad7-9f5b9ce600c6
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=13faaadc-1a13-4afd-8f12-0e881ff03091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:09:76:be:21:c7:6e:92:e2:6b:ad:bd:76:38:
                    6f:d1:5f:67:9d:0f:4f:3d:1b:df:e9:a6:98:29:b8:
                    d2:7a:60:e6:19:e1:66:ac:85:74:70:94:9a:7a:f8:
                    ff:db:8b:a8:77:78:43:e0:92:8a:3a:d6:86:90:32:
                    2b:4f:b1:53:6a:9b:12:63:cd:9f:4e:57:9d:30:80:
                    a3:26:cb:a0:1f:02:6b:49:6e:cd:1e:ca:fa:e0:4c:
                    6a:e2:fd:4c:7d:31:54:a6:00:16:98:be:ab:96:4b:
                    dd:8f:13:63:6c:eb:5b:53:90:76:15:e0:92:11:43:
                    02:e6:3b:3d:df:fe:c5:01:8c:4d:15:9e:2a:b2:52:
                    64:d4:69:88:e6:a7:fe:c4:4b:f9:22:ea:44:d1:f9:
                    59:fa:83:5f:eb:1b:88:a3:ad:f3:9d:f9:59:cc:c7:
                    bd:77:8b:24:72:46:b1:40:06:ec:43:40:a8:03:a6:
                    fc:54:95:02:88:c2:20:13:ef:59:fb:92:a8:bf:c0:
                    e7:04:e3:9f:f2:fc:76:9a:f2:f1:40:77:c4:5a:b5:
                    17:eb:5c:98:ff:d6:44:6f:ce:1a:81:2f:3a:2e:06:
                    2f:bb:0a:a4:8a:40:67:b6:b6:27:8f:83:9e:3a:e7:
                    31:17:4a:ec:d5:cd:7c:33:a9:0b:d0:2d:12:17:9e:
                    ac:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3D:37:A9:97:9E:AF:D6:FC:E0:7A:6F:FA:05:B3:65:8A:DE:29:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/dfc21920-33d3-36af-9d3d-f32de48afd1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6/9d987b62-9839-4512-aad7-9f5b9ce600c6.crl

            X509v3 Authority Key Identifier:
                keyid:55:EC:CB:74:8A:57:AC:5C:1B:9F:F0:4F:E4:4F:28:55:E3:0F:E4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d987b62-9839-4512-aad7-9f5b9ce600c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:f1:b5:ec:20:09:b5:0c:06:24:0f:b1:57:e5:9c:cf:82:3d:
         1a:a5:99:13:e8:31:53:a6:1e:29:e9:a4:1a:60:c6:2a:20:f3:
         75:e1:52:49:c0:4e:75:fb:5e:ff:30:aa:a6:a6:7d:aa:22:f1:
         30:53:06:bd:dd:26:c2:fa:f4:b9:f0:14:cf:80:b7:27:3f:48:
         d8:d1:74:e3:18:c3:92:56:18:a1:74:71:13:a1:e1:dc:88:87:
         58:3a:0e:f5:8f:cc:b7:c6:0b:af:66:0c:98:c4:90:e7:9b:bb:
         3d:f6:d1:06:f9:5a:e4:5e:ba:37:45:49:92:d9:dd:65:a3:ee:
         3e:43:82:57:8e:f6:74:1f:2e:40:8e:11:82:b0:00:74:bb:fe:
         33:c4:58:82:df:15:64:21:e9:7c:4b:51:2a:1c:e9:bd:54:67:
         69:af:b8:b7:0c:54:5d:d8:f8:25:68:a8:9c:4e:e7:cd:92:67:
         bb:d5:31:8f:ba:4c:c1:dd:52:20:0f:ac:98:a2:eb:d5:58:ec:
         06:6e:2a:c9:71:a3:7c:a1:c2:9e:ea:34:4c:33:0a:32:1f:7b:
         9b:28:03:7c:00:77:35:c4:6d:53:d6:bb:fc:22:5e:07:f6:05:
         e8:2f:44:6c:8d:4b:bd:58:81:5f:7f:de:b7:38:c1:db:bd:da:
         ea:f5:cb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:29:47 2025 by rpki-client