Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3b05fb70-f122-34b1-a6d3-942f9d52793c.roa
File:                     3b05fb70-f122-34b1-a6d3-942f9d52793c.roa (raw, json)
Hash identifier:          D6vVN1gbkBtR+RUK71W8gRgX/oZn3cR4BwKijKo8/LY=
Subject key identifier:   83:B1:12:33:78:94:C2:E0:97:96:5E:13:BF:27:87:E1:20:02:65:63
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584B2496CB6E8651C46FF3664E00
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3b05fb70-f122-34b1-a6d3-942f9d52793c.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     5769
IP address blocks:        147.253.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:cb:6e:86:51:c4:6f:f3:66:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=f77a192a-cab3-4e24-b71d-2e9762f1b18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:00:b5:4c:73:9f:51:d2:f8:05:39:ef:b1:
                    d1:66:b0:a0:1a:d1:55:5e:34:a6:20:ae:60:a6:92:
                    c5:75:67:93:d6:0f:e4:c4:4a:86:56:32:96:de:d0:
                    2d:d2:fd:bd:20:3e:ec:b7:6d:6d:ff:04:5d:5b:c8:
                    c3:d8:5a:4b:86:97:b1:0b:38:fd:ac:e9:96:95:bf:
                    3b:65:5f:a6:a5:68:ed:42:e3:96:71:3f:75:38:f0:
                    d7:60:4b:77:1b:18:51:0d:5b:d0:a1:10:01:f2:06:
                    ab:b8:7a:54:69:d6:c0:6a:f7:74:83:63:d6:fc:99:
                    c0:36:98:c4:3c:e4:a7:bc:97:2d:9a:41:c0:93:c6:
                    44:e3:21:11:cd:ef:8e:0f:73:92:7c:fc:46:d0:c2:
                    9f:30:8e:e2:30:f8:92:1e:e1:83:97:93:6b:a6:7f:
                    10:96:5b:17:77:36:9c:5a:c9:be:53:54:9f:b3:6f:
                    90:3b:82:22:c0:f6:1f:d7:89:9a:2f:7b:c3:a1:09:
                    b8:5c:b8:e5:e4:e0:fe:18:60:e2:32:05:15:32:0f:
                    96:81:bd:1a:84:d7:36:a6:e0:ae:e5:78:75:e2:5f:
                    53:d0:07:6b:ff:30:d1:eb:aa:90:b6:c1:cb:4b:1d:
                    b9:97:05:78:4e:20:8c:c7:03:80:1a:eb:7e:d6:7e:
                    b6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B1:12:33:78:94:C2:E0:97:96:5E:13:BF:27:87:E1:20:02:65:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/3b05fb70-f122-34b1-a6d3-942f9d52793c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.253.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:31:8e:ac:33:c2:f7:35:30:3c:24:53:b8:35:df:b0:84:f8:
         5c:9e:95:56:08:56:00:31:51:88:56:5d:28:98:0c:a0:e7:ac:
         d2:a1:9d:91:4d:29:31:80:47:6d:a0:3b:8b:90:e2:b1:e3:05:
         35:65:af:5e:e2:d8:bd:43:22:ae:95:db:40:9d:e4:7e:6b:6f:
         f7:df:f7:d0:24:c5:d0:e1:bd:7f:7a:57:87:d8:6d:b8:e6:69:
         7e:d2:bd:0e:24:48:e8:d6:ad:58:28:44:a2:c6:67:f1:37:51:
         29:4a:c3:8b:d9:28:0d:88:93:38:0f:dc:58:8e:7c:ea:ae:55:
         bf:17:1e:4a:9c:b6:dc:48:9d:f7:92:44:8e:44:3e:87:2e:a5:
         55:5f:33:0f:30:ff:8b:d4:5d:1f:6a:ae:c1:9a:b7:34:ca:ad:
         31:9d:f4:83:cb:aa:a3:6c:62:50:ad:43:07:2d:95:9c:29:95:
         eb:55:e2:db:63:5f:4b:3c:eb:04:c2:41:5c:2d:cb:70:e5:7f:
         2f:15:7e:42:fd:b7:e0:99:8a:3e:2e:13:1d:8a:19:04:3a:47:
         2a:3a:15:2c:7a:8a:37:52:2c:9c:62:1c:b1:06:7b:34:6c:a7:
         fa:a6:9b:be:96:6c:59:fb:46:1f:71:58:85:8a:36:8c:90:01:
         62:a7:df:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 05:43:17 2025 by rpki-client