Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/79feea74-1d7a-36a9-8d6d-3fb485b20383.roa
File:                     79feea74-1d7a-36a9-8d6d-3fb485b20383.roa (raw, json)
Hash identifier:          ofKdOcwpbI0okPJrxb7Ov9G2h3IOX5V6HCUKP5Ptclc=
Subject key identifier:   0A:E5:E3:B3:36:54:8A:0E:1A:37:27:C4:48:08:7B:ED:F6:18:C4:AB
Certificate issuer:       /CN=44b921f7-65dd-4b33-b399-9d372fb4a9e5
Certificate serial:       010D0C9F4328584AF7EBDB73E3108929BCB34A80
Authority key identifier: D7:CF:CB:83:53:E0:39:AE:EC:3E:6F:8F:1D:78:2C:52:51:F1:4B:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/79feea74-1d7a-36a9-8d6d-3fb485b20383.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     30045
IP address blocks:        205.211.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:db:73:e3:10:89:29:bc:b3:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b921f7-65dd-4b33-b399-9d372fb4a9e5
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=40558004-6bfd-44d5-8a33-863e3dc34fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:c4:37:5f:78:3e:17:5a:a7:3c:50:fb:f3:
                    cd:bc:30:01:82:33:b7:2c:56:22:99:27:97:ca:e1:
                    6d:3e:ca:59:bb:ba:25:60:9d:5e:3f:2f:28:b3:aa:
                    8e:00:8c:72:b5:e1:17:5b:b6:47:30:34:1d:f7:1e:
                    c7:e1:32:df:bb:4e:61:ca:d0:9d:c3:85:a5:d3:76:
                    3e:b2:09:57:17:f0:a5:87:52:58:c6:92:1c:f2:1f:
                    c2:c5:39:74:30:8f:43:42:97:d0:9d:0c:2c:62:fe:
                    bf:5f:11:2a:41:63:03:2a:cc:7f:fe:76:ad:95:c1:
                    96:56:ac:d4:a1:99:a7:68:b5:e3:31:c6:70:6e:c7:
                    8d:8f:2b:fe:1e:23:c1:29:de:03:b5:47:8c:09:00:
                    c5:5a:aa:f9:46:7d:6f:f9:ae:71:36:97:4f:dd:36:
                    47:72:32:09:84:05:23:bf:da:25:1a:d7:94:a4:49:
                    8d:8f:02:bd:2e:22:1f:6f:28:d3:d3:14:b9:d5:53:
                    55:54:5a:11:a4:46:b9:f7:52:b9:98:e9:c0:1d:ec:
                    9c:fb:ff:85:f6:d4:09:7a:36:e2:81:f1:1f:73:a8:
                    98:e7:02:72:0e:e2:e5:da:7b:74:14:b1:5b:5e:63:
                    91:88:f2:c3:25:94:4c:55:26:f3:c5:e5:28:af:31:
                    21:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E5:E3:B3:36:54:8A:0E:1A:37:27:C4:48:08:7B:ED:F6:18:C4:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/79feea74-1d7a-36a9-8d6d-3fb485b20383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.crl

            X509v3 Authority Key Identifier:
                keyid:D7:CF:CB:83:53:E0:39:AE:EC:3E:6F:8F:1D:78:2C:52:51:F1:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a5:b2:34:67:41:32:65:53:59:88:5d:b7:66:d0:85:ab:80:
         b0:91:27:e3:49:bc:e0:e1:1e:6d:07:f2:57:14:be:ad:5c:e2:
         b6:0c:9e:13:ab:97:80:99:23:5d:e2:c1:52:e5:2c:63:99:26:
         74:df:ff:8b:f5:6a:28:51:82:ab:2b:7a:b8:a4:69:64:19:6c:
         4c:d3:25:5e:2f:c8:35:21:60:af:54:dc:0f:2e:81:1b:dc:bd:
         d2:5d:43:bd:30:ca:85:19:8d:4e:c1:4e:78:cb:23:77:3e:7a:
         62:cd:fd:c3:9a:47:53:92:af:0a:a8:2b:df:1d:53:8e:5c:a6:
         d7:90:b2:6c:e1:bc:76:ef:2f:2e:e5:d3:69:c2:73:aa:6e:e6:
         0c:97:7c:1c:3d:e5:f8:19:3d:de:7b:a4:7f:d3:4c:aa:32:4e:
         69:77:29:d7:bd:40:e5:ac:0b:5e:f0:33:fa:77:fa:cc:e3:93:
         1f:01:4b:82:98:9f:a5:8b:86:68:68:18:ca:83:98:4b:e3:1c:
         6c:ef:9d:6d:94:90:8c:2a:49:99:0d:1f:9c:9b:f5:f3:c5:5d:
         6e:a5:ba:b4:8b:6d:f5:31:5d:c5:ee:3e:ed:d0:b7:fd:fa:b7:
         c9:b9:ed:1d:ad:8e:eb:05:34:7b:87:52:ec:e3:45:fe:e9:7a:
         2e:56:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 16:11:15 2025 by rpki-client