Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/c29d0d92-ad92-35c1-9163-2defc12d3b29.roa
File:                     c29d0d92-ad92-35c1-9163-2defc12d3b29.roa (raw, json)
Hash identifier:          zUZuBp+iWU22k2SWBsF0IizYNH0xfc+jiasibnfnURY=
Subject key identifier:   1E:B8:BA:73:82:69:83:27:AB:9D:3B:63:AE:4C:CD:82:40:39:21:A1
Certificate issuer:       /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
Certificate serial:       010D0C9F4328584B70CABF15081F8C3A7C47C400
Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/c29d0d92-ad92-35c1-9163-2defc12d3b29.roa
Signing time:             Tue 07 Oct 2025 08:06:45 +0000
ROA not before:           Tue 07 Oct 2025 08:06:45 +0000
ROA not after:            Mon 05 Jan 2026 09:06:45 +0000
asID:                     51089
IP address blocks:        65.75.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:70:ca:bf:15:08:1f:8c:3a:7c:47:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
        Validity
            Not Before: Oct  7 08:06:45 2025 GMT
            Not After : Jan  5 09:06:45 2026 GMT
        Subject: CN=3f1df2ee-f201-4724-9f1c-dfb0ab8973b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:1e:0b:e8:bd:fb:87:ff:a4:94:0b:45:79:
                    71:30:ad:65:a5:77:dd:b3:3f:9f:53:52:02:cd:39:
                    c2:e1:20:c4:95:a6:1a:f1:3f:02:96:9d:33:24:16:
                    91:c5:53:fd:26:0a:f4:43:6a:68:6d:cf:cc:51:f5:
                    80:e3:46:13:8d:51:47:c2:30:0b:aa:fb:fa:50:d3:
                    3f:69:ca:2a:c0:34:70:44:ee:97:5c:ff:52:00:3e:
                    a5:b2:cc:49:e7:44:3c:00:fc:25:5e:a4:aa:97:d5:
                    ed:64:5e:dd:d1:46:90:cc:42:83:11:20:b7:59:b7:
                    87:0e:30:ce:9b:1a:ec:13:e2:d1:e8:7f:e5:cc:5f:
                    70:74:29:b0:b7:a7:4b:a5:f0:1d:27:66:1e:c6:ea:
                    6f:23:35:f7:86:38:21:a8:4b:c2:48:be:a8:b1:e4:
                    a2:b7:a1:c1:8c:bc:53:c9:39:8f:90:63:f8:96:76:
                    ef:64:9d:43:ab:a6:f9:22:af:75:88:48:00:75:b3:
                    19:0b:1b:41:4c:38:2f:5d:aa:c8:6b:c9:e5:7a:06:
                    7d:3c:c7:e2:1c:16:a6:3c:a0:a2:00:4a:1a:bd:7b:
                    7b:13:da:e0:cc:e4:69:9d:b6:93:07:fb:89:c4:71:
                    ef:4b:0f:94:81:0c:50:b6:7e:20:cb:a0:8f:d7:6f:
                    99:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B8:BA:73:82:69:83:27:AB:9D:3B:63:AE:4C:CD:82:40:39:21:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/c29d0d92-ad92-35c1-9163-2defc12d3b29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl

            X509v3 Authority Key Identifier:
                keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ad:e4:7d:d5:a6:8c:30:d0:a6:99:27:29:52:8b:a4:7d:8d:
         79:0c:50:2a:c0:53:50:ac:17:c3:2b:f2:e1:e5:8e:5f:48:28:
         07:2c:c7:45:6d:11:32:be:95:0f:f9:1f:25:ac:25:03:dd:74:
         97:0b:85:d2:64:6a:8f:59:03:2e:69:d2:b3:d6:9e:12:1b:77:
         9a:e6:08:80:95:c6:43:36:72:82:e9:ef:20:cf:04:86:f0:dd:
         6f:2f:3a:f9:aa:ce:a9:56:d1:2c:c1:b0:9e:71:1c:d9:ea:c3:
         81:55:10:ea:52:74:4c:24:93:34:6d:9b:68:b0:45:69:e9:91:
         54:fc:ec:b7:53:1c:0c:b7:8d:3a:1d:a5:b4:31:8e:b8:e5:a0:
         47:11:8b:f2:8f:b5:0d:18:f2:87:b5:5e:88:fb:5a:42:8d:3f:
         17:72:95:ec:41:2d:2e:aa:73:22:9e:4b:8f:ec:65:1e:c9:e0:
         b2:17:d1:e6:16:c6:33:5b:91:cb:79:b1:a9:9a:72:4b:2a:b8:
         5d:cd:f7:f2:a7:43:68:14:7c:a7:8e:9a:10:b3:9e:f4:36:36:
         61:3d:87:be:5b:3b:c6:78:c9:6a:8a:a7:09:33:fc:22:ab:24:
         9e:04:f6:94:45:f8:0c:4a:d7:9f:03:44:4a:0a:9c:bd:d9:ec:
         d8:05:6a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:29:59 2025 by rpki-client