Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/8f05e2d7-c724-30d1-8222-b8d4dca649bc.roa
File:                     8f05e2d7-c724-30d1-8222-b8d4dca649bc.roa (raw, json)
Hash identifier:          fUplsU082mMSyDYXB8tuF/Xf8zedBzJdIFfiTurXvwk=
Subject key identifier:   7C:C7:4A:95:54:8F:D3:2B:A3:9A:83:F7:87:D1:4B:D2:F8:68:C2:C3
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584B1AD18B7074E9AA4CE88BB360
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/8f05e2d7-c724-30d1-8222-b8d4dca649bc.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     399275
IP address blocks:        165.140.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:8b:70:74:e9:aa:4c:e8:8b:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=d0af6c99-a1be-4123-88e3-6732dc736355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:51:f3:94:09:6a:00:16:7c:bc:64:95:43:7f:
                    13:97:ae:e4:16:07:9f:48:25:13:43:72:6b:7f:fb:
                    76:a9:f0:dd:7c:e8:5e:20:d5:43:ef:5e:9a:be:ef:
                    75:7f:4e:c9:8c:a4:aa:f8:38:e4:c5:f5:84:ff:6a:
                    8c:64:03:6b:3d:1c:f1:78:7a:99:ab:2a:96:97:02:
                    a4:bf:5e:d1:c4:50:70:94:48:21:3a:bf:84:df:64:
                    1c:36:6f:a8:5a:37:9a:88:b5:5b:01:2b:bc:a8:2f:
                    4f:1b:7f:40:52:60:ae:17:d2:97:4e:b7:e4:fd:58:
                    ff:1c:08:1c:68:1a:39:c1:3c:8c:29:3f:2e:11:e3:
                    f3:6d:b9:a9:78:a3:c4:a4:41:33:3b:50:96:cd:c6:
                    c5:a7:9f:a8:35:d1:7f:d5:7e:10:9a:66:92:6d:0e:
                    f9:60:a4:85:6d:34:a3:b0:6f:1c:f7:af:3b:be:cf:
                    ca:70:91:47:64:18:89:d0:90:41:b2:8d:a0:45:ec:
                    35:85:96:ca:4a:16:18:d8:3c:d2:f2:eb:b4:34:99:
                    a6:29:0f:e0:f7:27:8d:4a:8d:c4:bc:91:a1:8b:88:
                    5e:ae:7a:b4:18:08:83:b3:21:b6:b9:af:da:4b:f1:
                    33:33:e0:9e:1f:55:ed:fa:47:2a:7d:32:61:51:78:
                    c5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C7:4A:95:54:8F:D3:2B:A3:9A:83:F7:87:D1:4B:D2:F8:68:C2:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/8f05e2d7-c724-30d1-8222-b8d4dca649bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ee:bc:69:3d:1e:6a:b9:3e:b7:3e:00:5e:88:0a:10:92:5d:
         1d:94:69:6f:c7:67:f6:33:54:e1:fb:0b:2d:40:d8:30:76:e7:
         96:e0:d5:4f:ba:76:95:4a:11:97:56:59:f0:2a:54:73:f9:5d:
         20:ac:a8:f0:b8:29:87:87:c5:c9:4b:44:3b:e1:c7:34:ef:db:
         83:ae:23:7f:e8:b3:02:86:5c:29:78:2f:0c:23:de:59:c7:43:
         8f:6d:28:94:87:82:0d:86:1f:f8:0b:6b:b3:da:00:7a:be:ea:
         44:79:e1:f6:47:31:0f:df:5f:bf:ca:fa:43:32:eb:20:7f:f7:
         83:21:2b:b9:f3:9f:8f:c6:4d:95:b7:53:95:04:77:29:2e:89:
         1f:a9:b2:ce:cc:87:4a:8b:86:04:06:b7:30:de:54:e2:8a:af:
         a6:55:4e:a2:f6:af:17:53:0e:d5:e7:3a:a3:85:f4:a6:2b:58:
         ea:0a:91:5d:53:e0:79:31:79:b1:67:86:da:76:43:76:9f:77:
         d5:3a:58:e8:71:fc:ab:39:ed:e9:0a:bb:48:7f:96:8e:7c:84:
         10:25:55:a9:5f:bb:63:f9:7d:10:88:b3:2a:1b:6e:c9:d3:60:
         4f:03:05:b3:64:7d:03:ee:21:48:47:24:8c:29:a6:1b:d6:29:
         ef:94:4e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 01:06:02 2025 by rpki-client