Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/35f69044-5811-389f-995a-dbb1f6465b9e.roa
File:                     35f69044-5811-389f-995a-dbb1f6465b9e.roa (raw, json)
Hash identifier:          2tnmN6uMquvdKrIrWBBcCNhWxd9q6rk+gOD7c3IOEhY=
Subject key identifier:   21:AD:37:ED:21:07:51:73:AE:BC:FE:E8:44:55:C9:BE:25:56:62:B1
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584A89A62B556B7C9FC92CA4A490
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/35f69044-5811-389f-995a-dbb1f6465b9e.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     22616
IP address blocks:        170.85.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:2b:55:6b:7c:9f:c9:2c:a4:a4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=1863ded0-e0e0-4f09-8800-6b8d6e508059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:1b:57:82:d2:d5:bf:88:4c:80:1d:f6:0d:
                    85:de:60:45:0b:b2:20:6d:b1:4d:e9:e9:35:8a:6a:
                    eb:e4:ea:93:4d:0b:bc:17:54:2a:17:f4:09:6e:ac:
                    c1:ce:c3:3f:a5:48:c9:23:0c:41:b7:cf:82:e4:03:
                    88:8c:b8:19:e0:af:ab:05:e2:bc:b0:8a:89:03:40:
                    42:7a:6d:8a:a8:67:f9:dd:6d:dc:92:93:ba:0c:33:
                    eb:5f:04:fa:70:2e:07:e8:f1:f6:0f:55:82:09:61:
                    aa:95:52:a9:c5:17:75:88:63:d3:3e:3e:d5:53:eb:
                    05:e0:ce:1c:b7:2e:c0:eb:e1:d8:f0:9b:f4:52:4d:
                    e4:ea:2e:e2:0f:50:a3:8b:9d:ed:39:5d:4f:84:39:
                    a0:1a:ef:90:aa:21:7c:98:c3:8a:28:f3:e8:42:c5:
                    10:80:58:c8:12:e8:69:20:ea:11:73:93:a9:8f:eb:
                    d2:79:00:04:17:a3:a1:69:c6:6a:da:f6:3d:25:12:
                    5a:31:ab:37:fe:89:ab:5a:8c:51:c0:d8:1c:5f:e1:
                    88:24:39:92:01:b0:fa:b0:46:0a:c8:de:fd:67:79:
                    9f:10:68:70:7d:3c:5e:55:64:d5:c6:f1:ae:ef:3f:
                    9b:5b:75:47:ed:f2:d0:61:1f:49:5a:16:7a:9c:16:
                    f4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AD:37:ED:21:07:51:73:AE:BC:FE:E8:44:55:C9:BE:25:56:62:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/35f69044-5811-389f-995a-dbb1f6465b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:6f:17:ae:a1:0b:04:f5:4c:80:b1:98:b7:45:c8:7c:c3:01:
         a0:2b:3b:af:32:85:9b:ca:52:3e:63:3a:1f:92:fd:c2:a0:4c:
         a6:91:3d:0e:6f:ff:95:30:69:36:3c:40:e8:7a:b0:c1:58:e0:
         9a:c6:9a:26:ad:c1:bb:0c:11:57:3f:b6:10:11:14:f0:55:45:
         82:9e:1f:be:95:a9:11:d1:05:1b:6b:81:3d:03:3f:7b:ab:d4:
         24:0a:c7:b0:9c:82:62:95:6c:e3:8a:c2:69:8b:5e:0a:3f:2d:
         08:6d:ad:b2:20:d8:9d:36:e3:33:95:e4:da:c2:9c:93:1f:3d:
         8b:f8:5a:fb:9b:dd:85:84:70:25:9b:a1:6b:37:ff:b4:1a:08:
         02:9f:56:bc:33:08:b5:00:29:68:cf:c9:0d:e1:f6:27:91:81:
         a7:58:c2:b1:85:8d:0a:fb:40:b0:ff:83:ee:a4:8a:09:f7:e1:
         69:e4:f9:bc:29:1d:e3:8d:68:1e:d6:78:5f:e1:f7:1e:d7:c1:
         35:d7:6b:72:4a:9d:4b:21:d8:86:98:8f:22:a1:8d:7b:a2:7f:
         f8:e4:66:30:27:d6:06:5c:bc:24:c7:69:dc:52:04:64:f3:26:
         99:a9:26:51:92:1f:05:25:4d:5b:27:14:15:fa:60:a5:f9:e3:
         17:c6:b0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:16:05 2025 by rpki-client