Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/ae2ccd3d-4cbb-3a4b-b820-30cd334d1e64.roa
File:                     ae2ccd3d-4cbb-3a4b-b820-30cd334d1e64.roa (raw, json)
Hash identifier:          meCGGG89vafz/E4vKD1AhqFCL78Bmdv82axBFdxYdXo=
Subject key identifier:   EC:6F:C2:BC:1A:50:6C:23:CA:AE:AF:6A:58:BD:7E:8D:32:15:9E:F5
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584AF52156DFC48D5A5A39A53780
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/ae2ccd3d-4cbb-3a4b-b820-30cd334d1e64.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399575
IP address blocks:        216.205.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:56:df:c4:8d:5a:5a:39:a5:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=58e0cd22-c54e-48be-8f0b-8866cf885b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:40:7c:2b:26:1f:38:e7:22:37:9b:9f:81:b5:
                    2c:f7:77:fb:83:2a:e0:f1:fd:f6:39:96:25:3c:9c:
                    3a:c2:f4:d2:d6:12:cb:9a:5a:6f:07:89:0f:37:bb:
                    8a:b1:5d:09:35:ce:95:f3:93:84:05:9b:ff:ec:79:
                    b7:7a:74:9a:46:86:4c:07:78:ec:b0:48:52:be:c0:
                    43:c7:d6:fc:8f:6f:62:02:9d:15:4e:41:a4:90:7e:
                    72:ee:03:64:44:52:42:89:c7:3b:d6:93:44:2c:65:
                    0f:e5:ed:86:3a:03:f9:99:62:aa:35:e7:2d:a2:32:
                    64:e6:60:08:2b:c9:13:77:0f:d1:87:27:a4:d3:6b:
                    09:a0:f4:61:65:41:b0:32:14:4a:64:8c:ca:29:93:
                    51:ae:f2:92:a2:24:1c:f8:98:2c:25:8f:5b:b8:2b:
                    46:34:ab:8d:a0:0c:46:f7:9f:f8:4e:48:0d:60:36:
                    42:3f:0b:90:aa:5d:a1:e6:9e:7e:c7:78:73:8d:84:
                    86:5d:f4:d7:e2:80:7e:50:4e:52:56:3a:92:53:ac:
                    95:10:a8:fb:e1:a0:47:59:e8:b7:c9:dc:cf:ba:b3:
                    93:91:42:47:36:17:d7:71:f0:fa:c7:ff:1a:3c:fd:
                    0d:b7:f7:66:83:1f:96:b8:40:02:ec:d5:b6:9b:dc:
                    cd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6F:C2:BC:1A:50:6C:23:CA:AE:AF:6A:58:BD:7E:8D:32:15:9E:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/ae2ccd3d-4cbb-3a4b-b820-30cd334d1e64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:b0:df:78:fc:95:ae:ac:c1:04:b3:cf:27:24:2d:02:43:94:
         ec:fa:78:b8:2e:64:5b:61:fa:70:73:24:af:ea:7e:c9:e3:7b:
         1f:1d:bf:33:0e:d7:4f:8e:93:0d:9c:e1:54:e8:0a:33:b1:18:
         cf:d7:d0:ec:73:c3:e2:f7:a3:74:12:32:67:be:10:54:86:7d:
         cf:2b:7c:24:b0:d2:21:2b:3c:2c:c5:76:74:64:3f:f3:58:fd:
         66:8f:e1:71:8e:16:bb:d7:03:bd:a4:9f:fd:79:1e:58:2f:55:
         53:a9:96:67:e1:64:70:e1:0d:0e:1b:c8:0b:83:b1:dc:d9:b9:
         e6:66:be:d1:06:7a:20:0c:12:66:9c:ab:96:68:f8:cc:37:02:
         b7:82:a2:94:35:46:5a:1d:80:65:c7:39:f7:c3:e6:04:a9:ef:
         d5:34:f1:df:b5:05:fa:a2:5a:16:a0:d2:78:83:00:1c:78:79:
         6b:c8:ff:b1:c8:cf:42:45:16:e6:be:03:6d:d5:96:d4:4f:02:
         57:3c:54:0b:69:4d:6f:30:0c:15:ba:94:3b:0c:c9:9b:37:ca:
         39:69:8f:ef:1d:03:81:c9:1b:73:ce:ca:d3:2f:5d:13:82:02:
         a8:de:7c:c1:b8:a1:7d:5a:a8:fb:86:7d:ad:66:8e:df:83:b1:
         76:25:9d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 15:11:03 2025 by rpki-client