Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f86bc310-3455-3516-afb5-5f330d8fa6b1.roa
File:                     f86bc310-3455-3516-afb5-5f330d8fa6b1.roa (raw, json)
Hash identifier:          v6qcxQBUw5cFpt6RixBwx5Wxy9ycoY82NwDMwoLPdkE=
Subject key identifier:   07:3E:00:64:5B:3C:87:8D:57:E3:0B:2F:D7:C5:A5:C5:00:66:C2:37
Certificate issuer:       /CN=81fb7701-7454-4b9b-810d-3d604f504467
Certificate serial:       010D0C9F4328584AE89125A80AFA8E650DC8C780
Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f86bc310-3455-3516-afb5-5f330d8fa6b1.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     54282
IP address blocks:        199.65.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:25:a8:0a:fa:8e:65:0d:c8:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=982ae1cd-7d60-47c9-8857-a7717373d573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:07:ca:51:f6:66:06:df:b9:b2:52:cd:fb:
                    13:bf:38:c9:0d:00:07:05:53:36:75:55:f9:24:bc:
                    2d:82:a8:b2:ef:c4:ac:68:91:0c:dd:2c:84:ce:9b:
                    54:6d:74:fe:6d:bb:e2:fc:a4:62:88:76:28:a7:e2:
                    e6:89:26:ae:e8:41:4b:9c:a1:9c:95:f6:b6:0f:ed:
                    a1:a4:d2:b4:26:53:7d:58:9c:29:5a:41:04:6c:8d:
                    7e:d5:74:05:84:ba:ae:66:4f:74:fb:97:40:f8:15:
                    12:eb:08:39:da:cc:e2:80:c9:a3:83:f3:9e:8f:33:
                    71:95:4f:9d:4f:0a:c4:ab:74:33:e6:33:4a:a2:b8:
                    10:de:82:3c:4a:c2:05:8a:ed:7a:dd:d5:ed:32:75:
                    d7:9d:4a:e6:85:17:84:7a:b5:4d:de:ea:5a:a1:c8:
                    a6:dd:98:ed:b4:26:86:16:50:4b:b1:b8:74:f7:1f:
                    d8:44:a4:38:9c:f5:b9:49:6c:4f:33:78:23:a6:bf:
                    ff:6e:9f:e1:37:d8:a6:fc:1d:63:75:8e:ee:68:98:
                    8f:fb:b3:e3:bd:45:c0:36:09:8d:7d:31:b2:cf:46:
                    ed:73:fe:bb:a0:6d:f1:68:c1:fe:91:cf:0d:2d:cf:
                    6d:f7:4f:df:ec:7b:c1:2b:bf:7f:0c:09:5a:00:d3:
                    4d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3E:00:64:5B:3C:87:8D:57:E3:0B:2F:D7:C5:A5:C5:00:66:C2:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/f86bc310-3455-3516-afb5-5f330d8fa6b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl

            X509v3 Authority Key Identifier:
                keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a2:ca:a2:1b:93:1f:d6:db:0b:e7:8f:7b:62:d1:a5:41:48:
         c0:b8:f4:ea:9b:e0:fe:ce:25:9c:3f:24:10:19:8f:1d:52:72:
         a8:90:2c:8c:81:33:de:ac:bd:fe:b0:f3:3f:83:84:fa:57:f3:
         cc:01:3c:81:46:49:e1:aa:93:44:25:47:0b:5c:53:58:8d:f9:
         9b:20:02:e4:7c:7f:cc:2b:c5:d0:16:5a:fb:55:0f:35:a1:66:
         24:7a:d9:43:c1:da:15:03:1b:d1:bd:3a:70:6b:24:e4:8d:21:
         3c:47:d1:8c:22:87:38:c8:98:ff:a0:34:ff:5a:5b:e8:b4:50:
         79:3f:07:a0:d4:5b:57:35:d7:1b:c8:89:c0:75:f1:9c:1b:e7:
         a5:53:fe:d8:b0:73:b0:70:72:42:6c:e7:9b:73:ed:2c:b3:30:
         2a:fa:27:fb:26:6c:60:95:01:45:c0:6d:46:47:6d:45:15:d5:
         10:57:61:f2:c7:87:70:75:28:26:2b:bc:11:06:5e:f4:2e:64:
         bc:6e:0b:f8:39:e1:5c:b9:12:45:2e:0a:f5:e6:fb:b5:1e:60:
         31:77:91:02:14:e5:3e:33:6c:10:c6:52:6f:d4:09:b2:79:6d:
         70:06:0f:f9:fd:45:8f:0e:7e:7a:16:f8:53:fd:3b:34:ee:d4:
         24:4c:1d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:02:28 2025 by rpki-client