Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/a3bf2cc9-4b50-3b84-b8a4-708a744f3f84.roa
File:                     a3bf2cc9-4b50-3b84-b8a4-708a744f3f84.roa (raw, json)
Hash identifier:          0mJ7Z++sf8aH0g5C7Oc5S+5Vg7dFlP4orOA1pB/Thc4=
Subject key identifier:   5D:CB:4B:C0:0D:A7:65:4E:DA:BF:75:C9:58:44:B8:12:D8:67:BC:AC
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584B609CB681373CABC01CDCD520
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/a3bf2cc9-4b50-3b84-b8a4-708a744f3f84.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     399575
IP address blocks:        74.85.208.0/20 maxlen: 20
                          74.85.208.0/24 maxlen: 24
                          74.85.209.0/24 maxlen: 24
                          74.85.210.0/23 maxlen: 23
                          74.85.212.0/23 maxlen: 23
                          74.85.214.0/23 maxlen: 23
                          74.85.216.0/23 maxlen: 23
                          74.85.218.0/23 maxlen: 23
                          74.85.220.0/23 maxlen: 23
                          74.85.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:b6:81:37:3c:ab:c0:1c:dc:d5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=b3d7da39-820d-473f-ad9f-59c7513089fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2c:91:86:7c:83:53:c9:65:f6:1c:5e:4a:9d:
                    66:80:70:f1:10:a2:9a:4b:eb:81:40:42:10:bd:b5:
                    9a:7a:be:57:83:c7:e2:02:9b:a0:ec:97:89:65:83:
                    cd:6f:dd:8c:bb:a0:8e:ae:3f:ec:56:18:a2:b8:21:
                    1e:73:4b:ba:cf:9d:05:67:83:f1:44:cf:90:ae:1a:
                    b3:8b:67:0c:48:24:d3:d7:7b:ac:ed:a1:5f:db:7c:
                    62:0f:f3:13:75:42:60:99:72:8e:bb:85:0a:d0:8a:
                    11:4c:7f:73:f4:c3:f1:25:99:96:5e:f6:5f:e9:2d:
                    8d:8b:3e:bd:58:b0:ff:2b:00:38:2c:56:b6:2e:9c:
                    9a:a8:ba:82:61:1f:04:8c:04:18:c6:cc:71:38:f2:
                    0e:09:02:ca:81:09:f5:87:34:1b:4c:6f:45:70:ba:
                    0e:46:75:ea:fa:30:d8:a9:d8:f5:3c:41:0d:ac:f3:
                    0a:34:20:88:7a:0b:d1:65:4a:59:59:90:4d:e1:40:
                    5a:b6:d4:bd:0c:1b:38:fb:3b:43:b7:dd:c5:bc:e4:
                    c5:5e:36:4f:42:ad:71:68:13:dc:4c:ce:06:95:67:
                    08:5e:ec:4f:ee:d8:70:3a:a7:54:c2:48:b3:aa:b0:
                    09:56:91:ea:b6:6f:53:77:f9:f6:5a:e7:9e:f6:dd:
                    5f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CB:4B:C0:0D:A7:65:4E:DA:BF:75:C9:58:44:B8:12:D8:67:BC:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/a3bf2cc9-4b50-3b84-b8a4-708a744f3f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:73:f2:94:dc:bd:8b:04:74:6d:22:73:0f:4b:59:a0:82:0d:
         d3:0f:6c:46:5b:f4:03:c8:95:6f:1f:56:c0:89:21:b8:08:ec:
         05:00:e2:43:2f:9a:5a:06:19:af:82:63:a0:dd:75:6f:dd:70:
         c8:60:43:9c:0d:78:34:75:d6:64:aa:9b:e7:d7:89:aa:57:73:
         7d:3b:ba:df:32:f7:72:d6:63:f4:f5:8d:c8:23:6c:6d:6b:31:
         6e:e6:aa:cf:7e:eb:83:df:41:04:80:46:72:9d:46:29:6e:d9:
         69:e7:78:4e:c0:52:b3:cc:55:84:c7:a1:39:75:96:d6:2a:c6:
         43:81:a4:81:d8:0d:30:64:92:b4:37:02:5a:f5:2c:db:f8:0b:
         a8:23:22:f9:7c:8b:dc:fb:04:33:6f:62:a6:b9:5f:5e:f4:3c:
         9e:df:48:a2:1b:d6:37:ef:80:09:ca:43:c5:08:fc:9c:ac:69:
         d5:56:2b:73:e1:11:7f:71:29:55:3f:31:eb:10:9f:2b:1d:8d:
         08:9b:d2:56:1f:e7:cb:3f:39:41:b8:dd:62:47:ee:59:b7:3c:
         77:0c:a5:19:0e:9d:74:30:6c:fb:2d:bb:a5:a6:ac:34:18:00:
         31:9f:04:7f:0f:2a:70:73:50:bd:26:48:a1:27:a5:22:27:dc:
         f6:09:8d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:06:11 2025 by rpki-client