Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/8aa22724-a825-3a7e-8c7f-2783b09f5ff0.roa
File:                     8aa22724-a825-3a7e-8c7f-2783b09f5ff0.roa (raw, json)
Hash identifier:          UlHPp/WnzM+NvMJc6I/n2xuD67T8qOYQ2U9c/ORko78=
Subject key identifier:   A0:E5:FC:04:A0:CF:95:8B:67:73:A9:3F:3E:B8:AD:3B:01:AA:D1:1C
Certificate issuer:       /CN=f65b306f-fd69-46ba-a15d-0b2fd28d6138
Certificate serial:       010D0C9F4328584A97C547587732E8ED43FF6880
Authority key identifier: D3:CA:A8:8B:D6:AF:6C:55:1F:AC:BD:5F:A3:20:7B:4D:C4:D9:FB:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/8aa22724-a825-3a7e-8c7f-2783b09f5ff0.roa
Signing time:             Mon 21 Jul 2025 14:25:19 +0000
ROA not before:           Mon 21 Jul 2025 14:25:19 +0000
ROA not after:            Sun 19 Oct 2025 14:25:19 +0000
asID:                     812
IP address blocks:        165.140.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:97:c5:47:58:77:32:e8:ed:43:ff:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65b306f-fd69-46ba-a15d-0b2fd28d6138
        Validity
            Not Before: Jul 21 14:25:19 2025 GMT
            Not After : Oct 19 14:25:19 2025 GMT
        Subject: CN=78af23ea-fb13-4f73-b391-0683da475a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:4b:0c:2b:db:60:db:02:ab:a2:eb:15:a9:
                    97:15:23:99:42:25:72:e0:17:cf:c8:06:cc:46:2c:
                    2c:5d:09:d5:08:95:09:2c:86:b1:15:bd:cc:c3:fe:
                    f4:88:a6:50:e5:40:f3:2b:4f:2b:ad:e4:6c:8e:7e:
                    64:f9:eb:a8:a3:e4:4c:40:75:30:a3:86:ce:58:f9:
                    31:d9:02:8d:2f:2a:08:cf:11:85:f2:ef:07:ed:d4:
                    ce:49:1a:02:f5:df:83:f3:86:10:ca:0c:f1:fc:3d:
                    97:85:40:61:87:a6:47:ac:37:80:b0:c1:c8:6a:39:
                    21:00:b4:f6:d5:81:bb:cc:c5:9f:b5:4e:11:5b:4f:
                    5a:7b:da:e2:b3:bc:a2:fd:fc:1e:47:20:4e:1d:24:
                    a4:c5:4f:67:75:0b:d7:07:58:55:7a:f0:20:9f:5a:
                    3d:b9:03:d4:d3:1a:c5:1b:59:cd:07:21:71:7a:eb:
                    91:31:7e:5b:ec:17:c4:50:0b:a7:ba:2b:1b:98:4a:
                    81:17:28:57:e4:b9:37:66:e4:41:7a:f3:6e:df:4f:
                    8d:b0:e2:9d:b4:38:42:b2:50:15:cc:68:c0:43:d1:
                    1c:f0:93:e4:34:40:ff:24:2c:6f:59:b7:dc:34:d5:
                    94:af:3a:42:53:74:b5:4a:98:06:7f:1c:08:aa:d0:
                    94:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E5:FC:04:A0:CF:95:8B:67:73:A9:3F:3E:B8:AD:3B:01:AA:D1:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/8aa22724-a825-3a7e-8c7f-2783b09f5ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.crl

            X509v3 Authority Key Identifier:
                keyid:D3:CA:A8:8B:D6:AF:6C:55:1F:AC:BD:5F:A3:20:7B:4D:C4:D9:FB:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:71:b9:23:09:bc:c2:56:ab:bd:c5:41:11:0d:5e:50:36:1c:
         75:18:5a:14:ab:f5:0c:cb:23:b0:0c:e4:ae:eb:e3:48:30:02:
         4a:42:fe:c7:b6:2e:84:e1:e4:de:1c:56:cf:56:2b:d6:16:bc:
         91:a0:14:a4:18:1e:bb:25:a3:68:2e:d6:4b:ba:7c:fd:e0:77:
         4a:b2:ff:2c:b4:7e:b1:9d:6a:d3:a0:e8:27:6b:cc:35:05:ec:
         6f:df:de:67:67:c7:6e:ff:9b:46:43:97:79:62:b6:8a:fd:99:
         ec:e0:00:44:55:ea:53:c9:d5:c7:d2:32:77:c9:07:c6:15:06:
         79:d9:20:d2:5a:4e:bf:64:1c:40:cd:ce:30:68:95:ff:81:88:
         1e:a6:ca:b7:0c:48:4a:72:34:e5:40:29:8c:1e:b0:35:b4:c0:
         ad:4c:11:b2:c1:2b:33:e3:04:f0:30:07:7a:9b:13:44:df:f0:
         ff:96:e5:77:bb:3e:65:2b:e5:93:bc:25:76:76:32:32:a8:0e:
         7e:ca:80:04:a4:b3:cf:ed:d2:10:28:f6:ba:ad:5c:7d:02:ae:
         71:ca:da:25:83:87:cd:c8:68:39:21:4e:7a:c5:25:aa:0a:8c:
         e4:7b:31:67:d6:74:26:25:f7:89:01:8c:21:db:65:ca:cd:5a:
         c6:3a:b2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:14:47 2025 by rpki-client