Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/6b8c003b-22d8-319b-9d0d-4d3bf24bbc5e.roa
File:                     6b8c003b-22d8-319b-9d0d-4d3bf24bbc5e.roa (raw, json)
Hash identifier:          Drl8EuUinTw4JuRpiLzNPAxox7aOy2BsZNTFZunTmuM=
Subject key identifier:   47:58:F7:B3:DC:57:42:CB:A5:99:A0:6F:67:43:94:68:F5:1E:6B:78
Certificate issuer:       /CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
Certificate serial:       010D0C9F4328584A6290A061123F276E22D78600
Authority key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/6b8c003b-22d8-319b-9d0d-4d3bf24bbc5e.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     14048
IP address blocks:        141.225.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:a0:61:12:3f:27:6e:22:d7:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=7fa5ef43-30a9-4636-9cbf-735df708c7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:31:71:84:e6:2e:df:c0:1b:e5:5a:9c:e6:
                    54:df:37:f8:7c:f8:13:c8:41:4d:9b:5b:e8:22:0c:
                    e9:b1:af:a6:77:c4:43:67:9b:c6:69:6f:9c:be:57:
                    79:49:e3:65:1e:5a:4d:f1:6b:4c:f7:31:9f:33:68:
                    94:be:43:2a:1b:f5:aa:e9:a5:9e:a5:e7:aa:79:9a:
                    53:d5:86:02:f0:4e:c8:8a:63:0d:ed:a3:af:70:f5:
                    75:34:03:79:af:11:f9:ae:b7:73:4d:91:78:cb:67:
                    62:fa:fc:46:56:65:3c:e0:ff:b8:fe:07:0f:aa:7b:
                    93:ff:f2:6d:71:cd:b7:c2:24:01:01:40:ec:88:9c:
                    96:e3:2b:16:59:fa:95:d3:d9:98:40:a3:75:e6:a0:
                    b9:27:47:e9:cc:e5:e2:e1:62:d9:d4:97:f3:15:24:
                    44:60:a6:73:ea:14:d9:86:e6:8f:a5:1b:31:39:8b:
                    22:ac:8e:86:74:05:c7:2d:97:bd:8a:6b:00:db:d8:
                    db:8d:53:7a:00:1a:33:28:f5:36:45:e5:e5:e9:d2:
                    2a:7c:d0:15:f7:bd:ff:4f:f0:e8:bf:0a:d6:42:07:
                    f8:15:68:79:8d:53:f4:33:78:e9:23:d1:f1:21:ff:
                    df:79:68:53:78:a6:19:fa:bc:9d:c2:d8:55:51:51:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:58:F7:B3:DC:57:42:CB:A5:99:A0:6F:67:43:94:68:F5:1E:6B:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/6b8c003b-22d8-319b-9d0d-4d3bf24bbc5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl

            X509v3 Authority Key Identifier:
                keyid:AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.225.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:14:12:0f:f4:99:ba:d0:a5:3a:c1:1c:28:6b:b8:25:be:da:
         85:6b:b2:21:4e:aa:1e:fc:05:4b:b9:3d:26:41:2b:1d:62:d4:
         b8:82:e9:12:60:4c:26:d0:f4:f1:d5:c0:f1:c7:8a:bd:29:d3:
         46:2b:63:68:d0:d9:64:bf:f9:f4:ec:1d:ff:e0:16:95:67:a4:
         c5:23:09:1e:d3:3f:39:40:f4:25:82:09:f2:55:67:08:c0:3a:
         8e:9e:95:42:c9:f7:58:84:ad:8a:23:1f:43:71:7c:8a:49:cd:
         31:79:2f:35:67:c9:a5:50:87:80:7c:bb:b7:de:80:0c:22:a5:
         0d:e0:e0:e3:54:75:b6:d1:31:de:bf:74:4c:bd:06:99:e8:68:
         92:87:ed:c2:93:c7:be:47:d6:39:91:b5:38:c0:c1:d4:ef:ac:
         5c:57:cb:4c:1d:f4:cb:66:7a:5b:8a:c5:64:46:8d:e6:10:56:
         7d:3e:87:ce:cd:f6:0b:73:28:35:88:02:7a:cd:fc:8f:bd:a4:
         88:78:86:38:f7:64:8c:8d:d8:67:01:5b:6d:7c:98:21:e5:13:
         4c:e4:cf:0a:e8:9a:6f:75:5c:9d:d1:bb:d2:02:cc:cf:14:a3:
         7f:e7:fd:a4:27:51:39:4d:ef:d2:5e:e8:33:f4:04:96:86:65:
         f7:63:a4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 20:08:01 2025 by rpki-client