Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fb57bcc1-b3f6-3519-8518-c0ca7976c27d.roa
File:                     fb57bcc1-b3f6-3519-8518-c0ca7976c27d.roa (raw, json)
Hash identifier:          14BATeEm+/zBS+0F/CO98ivQ8MADrB9gMbMdWC7b/cc=
Subject key identifier:   52:70:E6:A4:37:0C:6E:BB:3E:53:7F:10:46:3E:A2:5E:B8:EC:6C:0B
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB00BEEAC0BE2B6A7FAB700
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fb57bcc1-b3f6-3519-8518-c0ca7976c27d.roa
Signing time:             Sun 03 Aug 2025 02:35:50 +0000
ROA not before:           Sun 03 Aug 2025 02:35:50 +0000
ROA not after:            Sat 01 Nov 2025 02:35:50 +0000
asID:                     22616
IP address blocks:        205.220.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:0b:ee:ac:0b:e2:b6:a7:fa:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:50 2025 GMT
            Not After : Nov  1 02:35:50 2025 GMT
        Subject: CN=ea1b3e38-ce4e-47cf-896b-2d7e5bcf7213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:ef:ef:af:7c:ea:16:f2:57:de:e7:84:46:
                    92:f9:2c:25:95:40:cf:34:ac:06:03:4b:52:0f:c4:
                    3f:0d:4c:83:1e:46:71:3c:cc:30:59:8a:d2:7e:c9:
                    8d:d5:ba:4b:b3:1c:51:06:b9:4d:95:ac:6f:c3:ad:
                    fe:d9:0c:39:01:59:32:5f:01:60:28:54:68:21:0e:
                    67:a3:ad:43:ad:c9:bb:a0:77:2e:8b:b1:2d:e7:86:
                    da:2a:68:2f:1e:85:f7:7d:4a:13:a4:89:e8:29:85:
                    73:e9:67:27:69:d0:67:93:d4:5e:23:bf:99:75:f0:
                    a5:cc:4f:da:35:1c:51:d9:38:a3:b6:4b:6b:1a:48:
                    d3:06:d8:b1:b5:39:ee:a7:0d:2e:6e:6d:9a:f0:41:
                    24:d2:36:3c:52:8a:89:8f:28:d8:02:09:41:cd:d4:
                    a6:46:5a:4e:5c:fc:a2:38:61:56:e3:a2:05:f0:37:
                    0c:63:e1:88:34:2e:42:ab:0d:1c:a9:6a:f2:3d:2b:
                    ae:5b:d9:74:2a:c1:92:61:0b:1d:a8:07:f9:85:e6:
                    30:46:9d:1e:a1:09:04:d3:5c:26:28:11:c9:76:ab:
                    56:ca:ca:17:96:59:6c:63:41:43:bc:1d:f9:d3:0e:
                    eb:2c:14:02:e4:09:12:8e:e8:0a:5d:44:08:69:c1:
                    db:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:70:E6:A4:37:0C:6E:BB:3E:53:7F:10:46:3E:A2:5E:B8:EC:6C:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fb57bcc1-b3f6-3519-8518-c0ca7976c27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:73:45:55:56:42:c9:f9:01:f8:17:98:ba:42:8c:26:61:c3:
         64:ff:46:cc:e2:77:45:fd:de:52:3d:38:7a:0f:5e:71:44:a9:
         7f:4b:d4:1e:fd:c0:0e:fe:a2:9b:cb:3f:db:3e:65:6c:d5:ae:
         c7:8e:08:0e:0d:aa:36:48:7c:2f:b2:47:b4:c1:0f:d0:f0:15:
         5b:b0:7d:1e:3c:e5:35:92:70:dc:b5:8d:c0:d7:29:3a:85:c3:
         d0:79:ea:f4:b1:33:c7:08:54:bc:48:6d:c9:4c:74:cf:42:e5:
         be:ab:96:3e:0c:19:ab:2a:83:be:98:c7:ab:14:9c:f6:a0:03:
         1d:33:2f:27:60:63:cf:3d:fd:a6:a0:d6:0f:7c:9a:d5:20:7e:
         ce:e4:a4:e4:a2:c2:f1:5e:33:48:33:1f:43:62:4c:76:ce:58:
         b5:29:61:be:f6:2a:90:a0:9c:04:85:de:10:73:27:7f:c7:c3:
         fd:56:91:20:b5:53:94:e2:f2:87:0e:5c:3e:37:1f:47:d7:dd:
         19:5b:a0:c5:45:64:5b:71:ad:ac:2b:b3:01:5c:74:22:fb:e0:
         88:ac:c6:88:57:8e:f6:1f:0e:b9:93:15:03:da:21:07:8a:f6:
         25:01:8c:e3:e2:0c:bd:98:2a:30:83:49:e3:05:14:4d:7d:78:
         64:94:85:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 12:04:09 2025 by rpki-client