Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/9739ae72-b6a3-376c-b189-0b1a00079f84.roa
File:                     9739ae72-b6a3-376c-b189-0b1a00079f84.roa (raw, json)
Hash identifier:          vcBLYbdRYRzifwsPGjwkPgx+7fynhV9+HNP//KoEIoU=
Subject key identifier:   73:54:C2:CB:62:EB:DE:96:6B:59:E3:6A:6B:68:D9:F9:0D:CA:E2:94
Certificate issuer:       /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Certificate serial:       010D0C9F4328584B0A116B3FB33C12ED4E933D80
Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/9739ae72-b6a3-376c-b189-0b1a00079f84.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     7018
IP address blocks:        65.181.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:6b:3f:b3:3c:12:ed:4e:93:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=2e51edfb-700a-469f-bb9f-fa8d770cb562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:ba:49:c8:2c:fe:44:ec:b7:71:21:b2:0d:
                    49:29:12:c4:68:47:97:0d:05:70:70:10:0b:f6:0b:
                    b4:b6:dd:7a:f8:89:92:8c:92:92:2d:6b:4b:8b:cb:
                    dc:cf:b4:de:af:8e:30:2c:25:6f:52:5f:f6:43:19:
                    f7:81:7e:f1:1e:49:4f:91:95:73:ce:81:d6:00:3e:
                    ac:b8:fa:38:a3:90:6f:c3:d7:93:1f:9f:43:a7:97:
                    92:35:92:ce:1b:28:67:eb:9e:bb:38:9f:94:9c:24:
                    35:d7:65:95:c6:84:87:02:89:9d:5d:47:f0:07:7e:
                    f6:e1:20:cb:2f:42:c3:69:89:d5:34:a6:fb:1c:08:
                    07:02:11:04:e4:bc:65:bf:3d:04:54:55:83:73:7d:
                    c8:a0:be:5a:00:f8:53:7d:e5:9f:d5:3d:96:bb:b5:
                    54:0a:fe:ab:b6:c3:a2:21:3b:e0:23:97:f5:b3:3e:
                    2d:d9:c0:df:49:2a:55:24:f5:f7:d6:18:a5:43:33:
                    5f:5b:ee:f1:39:7c:8a:b0:8a:4a:78:5b:6b:2d:d8:
                    a7:3c:ad:8a:c8:96:64:79:a1:d9:79:68:26:d8:5a:
                    32:3f:20:66:06:53:cc:7c:3a:03:3f:9f:f9:b3:41:
                    50:3c:c4:94:ba:75:c7:d2:15:9a:ef:f4:27:5b:71:
                    da:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:54:C2:CB:62:EB:DE:96:6B:59:E3:6A:6B:68:D9:F9:0D:CA:E2:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/9739ae72-b6a3-376c-b189-0b1a00079f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl

            X509v3 Authority Key Identifier:
                keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.181.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f8:18:a3:c8:ff:b3:e2:3c:45:85:d4:d5:d8:c2:2d:2e:31:
         e3:67:99:3f:5b:4f:ef:44:90:80:41:a9:26:db:75:13:be:06:
         67:65:24:e6:9c:1c:cb:23:9e:05:be:99:1c:6b:4d:84:2d:b1:
         30:67:a6:c4:ab:5b:75:36:a5:74:02:87:b3:b5:48:b0:98:48:
         ab:75:f7:2b:b3:e2:bb:4a:b1:f0:07:49:27:fd:c7:f4:8f:20:
         7c:81:d5:3b:e5:82:cd:68:78:e6:97:0d:e2:75:d2:53:75:fb:
         9b:89:c8:14:ed:4a:8b:92:28:54:67:35:6f:b8:2e:6a:4b:85:
         95:33:49:06:ef:53:46:0a:3b:95:13:b0:37:da:53:0c:70:5e:
         6f:3c:4e:30:cc:6d:46:3d:f4:47:de:92:d6:07:73:66:d0:e2:
         6d:9d:b1:c2:f1:29:7b:f8:3a:78:d9:c7:95:a4:8b:d1:d3:c7:
         15:1d:61:88:f6:fd:88:b0:e0:6c:31:21:75:c4:04:f6:52:db:
         b9:99:a8:13:84:66:bc:42:5d:8f:56:c4:84:14:3a:6f:19:8a:
         ca:e2:8f:7e:ae:56:03:05:a1:ab:2e:7d:7a:1a:27:10:b8:b1:
         25:d0:3f:81:df:65:b0:46:58:80:f6:1f:4b:ab:c5:07:ef:d1:
         ba:be:3f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 10:05:08 2025 by rpki-client