Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2dbc4c11-2012-3f41-af28-0b6c638e263e.roa
File:                     2dbc4c11-2012-3f41-af28-0b6c638e263e.roa (raw, json)
Hash identifier:          ySo+55YRpVEev+DBnUjIdOzt/NV5mkerhBljEqkwy4M=
Subject key identifier:   0D:8F:06:2C:51:4D:A1:36:7B:19:4A:EB:94:F4:39:CD:73:5E:9F:BF
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F4328584B52A758B368D8CB4B6D94CE40
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2dbc4c11-2012-3f41-af28-0b6c638e263e.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     215659
IP address blocks:        65.87.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:58:b3:68:d8:cb:4b:6d:94:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=d6ce8905-b7fd-45d5-a4a3-6589f32542b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ff:a5:b8:46:fa:9f:18:f6:81:bd:15:d3:5b:
                    25:ea:bf:0e:9d:92:fb:34:ba:d1:28:71:1d:0a:c1:
                    cf:2e:c0:7a:e8:75:44:e1:9a:ea:33:fa:71:13:77:
                    94:38:3f:73:a3:b6:93:e0:65:3f:8b:4f:ab:34:d0:
                    38:43:7e:09:ca:ec:ee:ee:52:f9:3f:75:6d:ba:df:
                    3a:ee:5e:41:63:69:dd:fb:14:b5:4b:b2:69:5c:cf:
                    cf:bf:46:8e:6b:ca:fd:be:0f:cb:7d:b0:97:4a:24:
                    62:71:a4:05:00:05:2e:ad:77:cb:da:dd:f6:e1:10:
                    d5:ca:58:4b:63:45:b8:16:a9:72:50:ba:5c:fc:11:
                    f8:3d:5b:68:c5:75:88:b0:fd:ce:9e:86:c8:b8:64:
                    c6:c3:be:04:86:fc:34:36:75:76:8e:c7:f4:89:24:
                    a6:ab:28:58:a5:46:cc:f0:5b:8c:4a:9d:fb:74:71:
                    12:b3:bf:63:c4:ca:fe:19:59:97:3b:39:e7:65:d9:
                    23:57:29:f6:0b:10:02:f4:e5:c4:e2:cd:99:e5:e2:
                    11:59:14:b2:62:f5:2e:eb:4f:16:fe:64:ce:82:e2:
                    8f:7b:f9:ac:83:03:02:46:ed:89:b1:77:3d:ea:0b:
                    9b:10:12:19:ed:1f:e5:9d:22:fc:c0:bb:39:13:87:
                    87:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8F:06:2C:51:4D:A1:36:7B:19:4A:EB:94:F4:39:CD:73:5E:9F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/2dbc4c11-2012-3f41-af28-0b6c638e263e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:60:32:15:df:55:96:45:ef:f7:f6:ab:15:00:da:ce:aa:fe:
         e9:ca:ea:25:64:77:81:74:60:88:ee:b6:b2:f0:6c:b1:78:5d:
         5e:c9:48:fc:ab:38:eb:4a:ac:58:0d:18:60:76:2b:17:18:bc:
         7e:a8:e0:b1:bc:32:99:c0:7f:a0:17:1d:29:90:11:32:4d:dc:
         cc:dd:54:d4:a1:92:44:6b:7f:5d:3d:ef:b0:ee:45:b5:9d:c8:
         44:54:53:6f:fb:07:91:81:80:de:28:59:02:b5:f6:72:2c:03:
         51:2b:6c:3d:17:7f:16:bc:27:63:bf:48:ab:f7:76:ed:df:39:
         87:92:f2:4a:a8:b2:03:01:65:16:e9:be:2f:5a:1f:9b:8f:53:
         c6:7f:7a:7f:8b:bb:cf:a8:60:79:7e:61:b9:92:bb:06:b6:5c:
         69:94:18:2f:2d:ba:d1:1b:35:ac:92:26:f0:9d:a0:3b:d7:a1:
         46:b7:b8:dd:86:ec:32:f1:0f:cb:1e:a5:e7:a6:7c:41:66:e0:
         32:19:31:f7:b0:b0:3a:97:38:80:65:5d:bb:5b:38:fc:9d:6a:
         89:80:b2:fe:03:53:ab:9e:27:72:96:77:f4:ab:43:c2:fc:72:
         f1:03:6f:b3:63:07:a5:a0:ba:cd:69:32:92:d4:e0:88:92:74:
         7f:fe:c9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:15:04 2025 by rpki-client