Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa
File:                     8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa (raw, json)
Hash identifier:          /jMJL2T+dzlXoFgCsibo/OsHj7SOhrtFUTSIYzQ5Muw=
Subject key identifier:   BA:83:21:AA:36:40:7A:BE:61:84:02:E8:1E:83:4B:88:00:82:A9:C2
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584A612B14FDA40997203F151660
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     13768
IP address blocks:        65.39.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:14:fd:a4:09:97:20:3f:15:16:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=70121d61-371e-4701-97af-05d5bfec7dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:b5:a8:a3:4e:9d:1f:de:02:94:e2:0d:35:
                    71:b4:a8:02:0f:c5:6d:7e:da:a8:6b:08:90:89:d1:
                    dc:05:b7:95:18:57:d4:46:e2:88:85:ec:ac:f9:8b:
                    92:87:97:17:1f:ef:06:ac:ac:ab:a8:ad:f9:b5:7e:
                    8f:97:c7:4b:61:c3:e0:95:8f:cb:4f:9f:bb:c3:08:
                    ee:d9:5e:69:cd:7b:a0:1c:8b:c3:64:47:c6:8a:e2:
                    8e:1a:83:14:f9:07:53:59:60:0f:36:1d:60:be:45:
                    98:e5:4a:a1:4d:14:c0:4f:d5:46:d6:89:04:e4:1c:
                    c9:e9:6e:11:f5:9d:31:3e:e4:de:49:1a:0f:71:02:
                    b5:89:76:e7:5a:96:ac:76:4c:3a:13:84:58:39:a0:
                    17:f8:75:20:63:e7:02:60:2f:5d:bc:68:09:50:88:
                    65:47:2a:58:c0:f2:f7:f6:9f:3a:e9:12:e7:f0:d7:
                    4d:0e:f5:e8:89:bb:ce:1c:80:59:99:36:68:bb:33:
                    c9:74:6a:7d:aa:2f:e5:66:56:ed:6d:47:53:bc:cd:
                    7e:96:c5:ff:39:6f:9c:e4:6d:5e:37:e9:78:f0:87:
                    00:7c:6e:8e:38:81:27:87:45:dd:4c:83:7f:bf:e6:
                    15:59:01:f8:89:fa:d3:be:d6:49:d9:4a:20:56:db:
                    b1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:83:21:AA:36:40:7A:BE:61:84:02:E8:1E:83:4B:88:00:82:A9:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:34:4e:98:c6:5c:ab:18:b7:07:ba:ee:49:8d:66:80:c7:5c:
         6d:b4:09:55:35:6b:1b:75:7d:14:55:85:40:9f:14:ec:7c:00:
         c0:7b:c9:84:ee:11:66:23:51:b1:47:55:0e:96:31:4b:5d:2b:
         86:f9:31:56:1b:78:fd:84:b8:e0:51:5c:25:54:79:c0:e7:4d:
         5e:21:fc:5c:c3:15:7a:ea:94:35:ad:50:c5:73:36:ab:9d:4f:
         7d:c3:b8:15:1f:f8:d0:5f:24:bd:b3:af:4b:0f:f0:70:c6:8e:
         62:15:56:a5:17:87:55:8a:dc:29:3f:5a:09:50:78:0e:bd:80:
         a8:1d:0d:3c:8d:7f:d4:3c:34:c1:33:68:5b:5c:81:e8:3b:d7:
         99:a8:ca:36:ef:94:9a:9b:08:98:1a:2c:01:cf:e2:bb:c2:7c:
         d4:56:ea:79:e8:c6:c9:fd:d0:f2:2f:e5:8e:68:98:40:89:e0:
         dc:1b:8c:1e:f0:cb:4f:c5:62:43:26:e2:ee:05:1f:6f:da:41:
         7d:c9:75:83:04:c2:db:a4:77:38:e1:54:b9:6c:38:bb:d7:57:
         3f:89:76:83:2e:b6:5d:4f:25:9e:74:f8:2f:2a:a3:ac:83:8d:
         84:82:24:e8:02:1a:7e:5f:28:0c:42:32:32:0c:91:6b:ae:c7:
         21:f6:16:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:39:45 2025 by rpki-client