Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/6fccbf45-4871-3804-845f-da32fb15f471.roa
File:                     6fccbf45-4871-3804-845f-da32fb15f471.roa (raw, json)
Hash identifier:          Sjnd1kVQwTxg4eWo9c5eAjdmIccKNPWDUhcg6zkyN4M=
Subject key identifier:   6C:06:1A:33:41:AA:6C:00:2D:0D:14:9D:29:F1:51:9F:8D:5E:E2:FE
Certificate issuer:       /CN=1c939443-d4d3-4122-9e02-8422f40f90c5
Certificate serial:       010D0C9F4328584AECC147FC1BE83A1DC697DD80
Authority key identifier: 73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/6fccbf45-4871-3804-845f-da32fb15f471.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     29802
IP address blocks:        65.38.110.0/24 maxlen: 24
                          216.245.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:47:fc:1b:e8:3a:1d:c6:97:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c939443-d4d3-4122-9e02-8422f40f90c5
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=77195e30-bbd8-4631-9fd4-0b5d5f21488d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:df:9a:fe:56:ec:4c:6c:4e:7b:61:88:92:
                    10:f2:2a:ce:1b:29:a7:15:62:08:c0:92:f1:7f:09:
                    d7:dd:1d:d7:ad:24:44:e1:30:78:31:5b:3e:95:3c:
                    dc:45:a1:44:5a:8b:1d:56:d9:ef:38:ad:2f:75:e1:
                    df:bb:db:e4:3f:57:a1:1c:c6:62:69:49:ac:c2:58:
                    29:fb:9d:fe:9c:b6:39:2d:83:1b:61:2e:d9:69:b9:
                    d9:73:e1:9b:66:49:e1:73:cb:c7:39:87:82:94:c4:
                    1f:b7:ce:c5:fc:7f:1e:6c:b7:51:6d:76:b1:f3:15:
                    3b:d8:cb:95:8f:3b:2e:f1:6d:62:35:1c:b0:77:26:
                    b3:19:d9:c1:ad:ed:cc:d8:33:ab:c1:a2:54:2d:2f:
                    e9:ba:9c:bb:8f:00:e7:6d:da:82:da:07:ab:b1:65:
                    7c:f9:2e:6c:b4:e8:da:65:42:a1:fb:98:87:17:8b:
                    cd:17:90:f6:13:78:90:5b:a9:41:78:52:04:b2:1d:
                    91:92:91:a0:83:32:b3:83:88:86:b3:c1:bd:43:5a:
                    40:77:60:2a:c2:f7:0f:fb:80:35:96:71:e7:6d:9c:
                    86:e9:d5:dd:0b:f0:8e:e1:19:a5:cc:82:3a:40:81:
                    0b:70:a3:5d:b0:38:13:2d:11:c1:d6:cb:c4:24:4b:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:06:1A:33:41:AA:6C:00:2D:0D:14:9D:29:F1:51:9F:8D:5E:E2:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/6fccbf45-4871-3804-845f-da32fb15f471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.crl

            X509v3 Authority Key Identifier:
                keyid:73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.110.0/24
                  216.245.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c9:cf:7f:ea:c9:57:dd:51:e0:89:8c:12:17:40:6b:c9:be:
         b0:fc:51:fe:90:e0:05:d4:da:2b:d8:ba:47:ae:10:1a:ca:80:
         d5:dd:c8:ae:b9:6e:bd:29:2d:29:de:03:40:76:e8:03:06:47:
         eb:a4:da:b0:a6:47:f7:eb:6d:10:05:4b:89:76:11:0c:9a:3a:
         b3:51:85:3a:9b:d1:fe:e0:7a:59:79:0f:42:de:f7:74:ba:df:
         f0:24:bb:93:c5:c7:52:82:31:57:73:6b:35:f6:c8:95:0c:84:
         60:48:1c:c0:93:47:50:c1:50:ac:11:bc:14:8a:08:0a:ea:9d:
         94:9f:f7:8d:c5:fa:8a:9f:64:17:8b:3a:15:3a:80:8a:6e:64:
         5f:c2:87:ba:2c:a3:e7:8f:46:d1:4d:cd:45:62:1b:6e:42:ab:
         ce:c0:53:80:c3:56:1c:32:59:04:b0:81:dd:ab:2b:e5:88:a3:
         f7:43:14:07:80:80:6d:24:36:50:a5:39:fc:76:3e:97:89:04:
         9f:2c:56:e1:50:c3:eb:66:36:54:a1:4c:49:eb:b1:8d:2e:58:
         95:7b:42:13:6f:fb:23:52:b7:fd:b8:ed:ba:fe:ca:17:b3:2c:
         13:1c:18:58:59:48:ef:81:4b:7b:7f:b4:01:94:e5:cd:5f:5b:
         f6:01:e8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 11:05:14 2025 by rpki-client