Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/8d3e1300-6e91-35f5-875c-3a8c2b83adbf.roa
File:                     8d3e1300-6e91-35f5-875c-3a8c2b83adbf.roa (raw, json)
Hash identifier:          lv/Twdl8ovMLrZFEC27cQiTkVElpi6Cg05mtAKiHMCU=
Subject key identifier:   32:94:4B:05:0D:71:E9:06:D7:4A:C5:8A:AD:E3:3F:34:B1:19:0A:4F
Certificate issuer:       /CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
Certificate serial:       010D0C9F4328584B79BCB244F497042CACD39200
Authority key identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/8d3e1300-6e91-35f5-875c-3a8c2b83adbf.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     5693
IP address blocks:        165.140.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b2:44:f4:97:04:2c:ac:d3:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=3cc2a735-2c52-49cf-b890-0049ab0f76c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0d:a3:d7:df:9a:8e:ea:18:bb:1d:d5:29:c0:
                    47:86:3a:f5:3b:1b:31:da:8b:14:6b:75:89:ef:42:
                    41:d2:ad:4c:20:1a:49:b7:67:cd:47:92:15:ab:ac:
                    67:01:c7:49:9e:23:56:2d:44:be:1a:b6:0a:76:b6:
                    80:e5:11:7b:d2:88:a8:c6:b5:44:a3:39:7a:7d:9a:
                    c6:72:d1:e9:79:7c:28:2b:1f:f9:47:3c:6c:c6:6e:
                    0e:d0:5f:c9:8b:b3:04:78:cc:29:e0:6f:54:cf:4c:
                    58:5c:65:14:7d:c2:a9:64:19:d4:07:35:58:0c:2a:
                    e0:f2:82:dd:5e:8e:1f:f7:09:09:4d:89:41:d2:ab:
                    9c:04:72:1c:73:d2:70:70:9a:22:44:10:9b:01:67:
                    b7:2f:c1:4c:88:1a:d6:cb:9b:9b:03:1f:db:1f:b6:
                    c1:c0:5d:57:d4:30:67:a8:8b:9b:87:4a:19:a0:fc:
                    04:67:45:d3:46:98:21:32:53:e1:1c:ee:0e:e8:2f:
                    a1:07:fc:d5:d8:91:a0:17:c0:11:57:c3:c0:ed:ec:
                    52:65:c6:d8:25:1d:06:9c:1b:96:e2:4a:ef:88:1d:
                    11:d2:08:98:d0:8c:fb:c1:7f:18:f5:2b:77:b0:da:
                    59:71:99:78:19:df:cf:94:35:1b:98:3e:06:32:8a:
                    d8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:94:4B:05:0D:71:E9:06:D7:4A:C5:8A:AD:E3:3F:34:B1:19:0A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/8d3e1300-6e91-35f5-875c-3a8c2b83adbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl

            X509v3 Authority Key Identifier:
                keyid:FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:28:dc:9d:f2:90:00:07:d6:6e:da:da:d0:09:a7:76:f0:dd:
         19:bc:b1:b6:12:45:9b:25:f9:34:e1:e4:9f:aa:81:0e:76:d6:
         ee:e8:6a:c7:9f:dd:97:b3:b1:dd:dd:41:41:c4:0c:af:e3:56:
         96:69:a0:49:12:c5:28:8d:c4:9d:f7:78:78:a4:fb:26:45:13:
         0b:a5:58:8d:f9:71:1f:83:20:a0:1e:50:a1:51:86:d1:6f:32:
         69:0d:0e:45:09:a9:f9:74:74:1c:73:d6:1e:53:75:cb:e3:28:
         85:e9:a0:2b:ff:bb:4c:a5:7d:3f:27:8a:50:c9:9f:30:ea:2e:
         6e:4a:0c:03:3c:68:30:79:e8:36:fe:01:a5:f4:95:e1:41:30:
         b1:43:7a:36:ec:59:d2:ef:d9:0b:8b:b9:f7:2f:6d:56:5d:00:
         07:c9:4c:23:9c:1f:a2:63:a4:d6:a6:c1:23:7f:79:f2:6c:17:
         22:45:ee:95:ef:64:2b:75:b0:b4:a4:f9:66:44:57:27:2c:16:
         9f:fc:b9:4e:b3:8b:48:b4:1c:97:ea:34:a3:72:df:35:a4:ff:
         43:bd:59:ac:18:38:31:01:bf:dc:a2:46:4e:ba:6f:93:9f:5f:
         7f:54:d1:16:aa:17:60:3d:f2:ab:2d:a8:92:3b:3a:ac:ff:3c:
         c6:c8:f8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:30:12 2025 by rpki-client