Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/5925a732-37e4-38f1-b869-f45e205b206d.roa
File:                     5925a732-37e4-38f1-b869-f45e205b206d.roa (raw, json)
Hash identifier:          XJMRlYJ/vfsmNZaTOcAEiAE6yMh1Gb9UvTm/1A/hox8=
Subject key identifier:   77:40:DD:6C:46:34:1E:8E:73:61:CF:E8:D0:1A:E0:89:86:F9:14:17
Certificate issuer:       /CN=2ff822df-fd2d-4fdf-8320-3c5a61d09369
Certificate serial:       010D0C9F4328584A68260BA4D35BC9074E0FEE78
Authority key identifier: 12:BB:91:00:0A:6C:5E:97:61:21:EF:C3:80:BB:27:03:11:47:ED:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/5925a732-37e4-38f1-b869-f45e205b206d.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     27370
IP address blocks:        192.80.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/2ff822df-fd2d-4fdf-8320-3c5a61d09369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/2ff822df-fd2d-4fdf-8320-3c5a61d09369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:0b:a4:d3:5b:c9:07:4e:0f:ee:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff822df-fd2d-4fdf-8320-3c5a61d09369
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=3e430ad9-3d4a-4efe-8fd0-078b6581ed7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:49:c9:0f:84:1b:9e:5b:00:70:cd:34:db:
                    7c:aa:f5:ef:42:c1:ef:2e:8b:bd:8c:52:e2:9a:29:
                    d0:16:b5:68:9b:b5:9f:15:2f:96:30:ce:42:f7:8f:
                    13:c5:e5:69:dd:4e:19:f5:80:f2:7b:c8:97:bd:df:
                    02:b8:45:3d:11:bb:83:b7:76:47:87:62:7b:d6:e7:
                    8f:bc:35:80:ef:28:c9:1a:bf:0a:99:54:af:41:9b:
                    0e:7c:c5:21:41:7d:93:f3:09:a8:07:fc:22:d2:07:
                    35:58:85:6c:60:fb:35:cc:88:dc:00:df:fe:ad:34:
                    60:7e:0e:02:bd:a2:ee:aa:82:1b:fd:15:eb:95:5c:
                    fa:e7:fe:c4:4d:3a:1c:16:d3:e5:de:fe:ef:22:3f:
                    02:53:c3:d7:f4:06:20:8a:86:ea:4e:cf:db:78:93:
                    29:3e:17:0b:8d:e7:35:c9:e9:43:f9:04:f5:d4:cc:
                    5e:dd:0a:c1:7d:e9:a2:ef:58:73:22:1f:41:8a:b9:
                    60:6f:70:30:c8:07:1d:73:13:0e:69:c4:fc:f4:be:
                    d6:50:fd:8e:7a:f1:27:70:20:f0:b8:a9:6a:90:cc:
                    f6:d9:4c:1a:2b:89:e0:bd:4d:ba:24:6e:2d:ed:17:
                    06:78:a3:e7:69:b9:5b:9b:91:6f:76:56:2a:4e:38:
                    70:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:40:DD:6C:46:34:1E:8E:73:61:CF:E8:D0:1A:E0:89:86:F9:14:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/5925a732-37e4-38f1-b869-f45e205b206d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/2ff822df-fd2d-4fdf-8320-3c5a61d09369.crl

            X509v3 Authority Key Identifier:
                keyid:12:BB:91:00:0A:6C:5E:97:61:21:EF:C3:80:BB:27:03:11:47:ED:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:e0:17:81:64:db:46:8e:f0:1c:3c:98:29:82:e3:3e:86:5b:
         3c:0c:a5:f1:40:cf:19:e1:64:ae:4f:0d:72:cb:14:00:2c:91:
         11:a1:c3:f7:f6:3e:e6:5d:7c:08:fa:76:94:02:e5:c3:14:56:
         fa:22:21:5b:67:70:71:42:71:12:20:c9:67:b0:ae:cc:01:7c:
         e1:11:82:76:b0:15:5c:91:08:a6:cf:9a:67:02:83:cd:e5:ab:
         4f:d8:93:77:4f:6e:1a:53:6c:72:d2:7c:47:f8:13:6f:18:56:
         b9:9c:d9:dd:bc:e2:06:51:60:ad:35:78:81:a7:bb:bd:20:f5:
         dd:01:65:56:71:bb:22:c5:13:b0:15:fd:3b:91:28:8a:66:00:
         e7:f4:80:fb:32:6d:18:db:e6:90:76:0d:f1:fb:b5:72:00:11:
         ef:ef:da:eb:0a:0f:62:92:9e:2d:77:a3:e3:7c:ef:e5:5a:c0:
         b7:d9:57:cf:eb:96:c0:1f:5c:64:75:26:46:46:a3:cb:5e:c4:
         24:a3:5d:1d:66:84:26:72:ee:1f:f4:1b:ee:40:8f:6f:19:e2:
         6f:79:9e:05:4b:d1:2a:54:d0:48:c2:72:d5:f3:b7:65:43:03:
         d3:77:c3:e8:b8:9d:e5:96:45:6d:61:da:23:b1:36:64:a9:ad:
         8e:1c:12:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 19:52:11 2025 by rpki-client