Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/cde0b382-acbd-3f3d-9670-8bebdcc9bdb4.roa
File:                     cde0b382-acbd-3f3d-9670-8bebdcc9bdb4.roa (raw, json)
Hash identifier:          MWg4AXTOdlNiI8gKvqglbgLO1/bubygNJT06jNRoiUo=
Subject key identifier:   02:F6:74:99:34:1B:7C:7A:0E:C5:17:B9:05:71:21:FC:98:89:A8:87
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F4328584AF6868E523FE0A4EAAC62B110
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/cde0b382-acbd-3f3d-9670-8bebdcc9bdb4.roa
Signing time:             Sun 24 Aug 2025 13:00:42 +0000
ROA not before:           Sun 24 Aug 2025 13:00:42 +0000
ROA not after:            Sat 22 Nov 2025 14:00:42 +0000
asID:                     8011
IP address blocks:        65.62.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f6:86:8e:52:3f:e0:a4:ea:ac:62:b1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Aug 24 13:00:42 2025 GMT
            Not After : Nov 22 14:00:42 2025 GMT
        Subject: CN=75483aab-828b-43e8-9865-496b7d03731a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:6a:25:a4:8f:bb:32:01:2e:3d:0f:fb:d5:
                    3b:2c:2f:3f:3d:eb:b4:27:67:4a:ee:9f:fe:be:b0:
                    9c:fa:a3:43:99:79:2a:14:b3:70:fe:d4:9f:7e:6a:
                    15:52:1d:72:8b:7e:a4:18:be:0a:81:0c:2e:7d:63:
                    0a:56:98:7c:95:f9:42:47:da:b2:18:53:85:21:fb:
                    9a:31:3e:ee:40:09:d2:53:7f:e2:13:f5:d2:23:53:
                    f6:e5:e8:f1:90:a8:e5:44:f4:20:e8:28:76:11:ff:
                    9e:df:f8:19:ba:e5:c4:20:c1:55:9f:52:50:c5:2e:
                    b4:e6:32:35:2e:32:a6:cb:4e:38:45:df:45:7b:50:
                    4e:51:cf:51:55:0c:70:b9:71:1f:6e:03:a9:4d:90:
                    8e:96:93:f2:d4:bf:d3:0a:f5:25:8e:27:35:a1:14:
                    8b:5c:a5:3e:8f:e9:ba:ff:9c:b3:fc:3a:ff:aa:d6:
                    65:19:23:d2:5c:cd:60:f3:a3:99:91:ac:64:4e:c8:
                    89:25:49:f7:a7:ff:de:04:11:68:fe:00:21:45:54:
                    c5:2f:8d:45:54:d1:67:2f:b8:7f:77:bf:1f:bd:68:
                    2a:2e:49:68:ea:67:ea:28:87:da:fe:4c:6d:93:63:
                    fc:14:6d:1f:e6:6e:2f:d3:8f:a6:88:1c:1a:10:46:
                    0f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F6:74:99:34:1B:7C:7A:0E:C5:17:B9:05:71:21:FC:98:89:A8:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/cde0b382-acbd-3f3d-9670-8bebdcc9bdb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.62.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:4b:ae:b4:f6:cf:c1:d8:38:0f:62:ed:13:a4:c0:04:32:d8:
         d1:0e:ab:3b:34:b2:38:6a:d1:18:e0:2a:0a:f1:49:12:a1:2d:
         cb:68:8a:5d:17:11:d7:98:17:7e:c9:9e:f0:e6:8c:75:44:e3:
         d9:d0:37:e4:cc:fe:92:ba:ef:92:7f:95:6e:ec:2f:7d:e9:c2:
         eb:79:3c:55:dc:fc:98:0b:84:84:b0:83:a3:e7:0f:21:a2:d9:
         8e:c4:0d:b2:a1:ea:fc:63:58:04:4a:eb:9e:4c:73:be:18:c6:
         cb:e7:a1:36:f6:9a:2c:97:f4:ca:97:f4:8c:d4:fd:d3:46:2e:
         36:4c:6c:86:bf:19:4f:67:e7:1d:a5:5a:dd:8b:eb:f3:bd:28:
         05:89:de:ff:92:68:06:5d:81:c6:1c:6b:78:55:05:65:28:38:
         f8:a3:3d:b4:d3:60:67:88:26:22:0c:36:b6:c1:f3:b5:8d:89:
         ed:4f:f1:1c:69:d8:f9:cb:42:e7:54:c7:7a:df:fd:d2:0b:30:
         56:f5:6b:61:f2:ac:e5:89:99:12:a0:50:e6:ef:77:01:cd:56:
         f3:5d:8b:05:41:db:c2:a9:d6:a5:1e:3e:4c:9d:8a:80:c7:3b:
         79:f3:be:8c:73:33:5a:ba:aa:cd:be:a1:ac:90:32:7b:86:76:
         3e:36:c5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 09:18:44 2025 by rpki-client