Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/ed93203f-cf71-30b1-9801-397105ab7580.roa
File:                     ed93203f-cf71-30b1-9801-397105ab7580.roa (raw, json)
Hash identifier:          +HbvI2CvPKG2+VYMQ6lur9OfybEaSAv5DroliriEZuk=
Subject key identifier:   22:A6:0A:3B:36:C1:3B:B3:0B:F7:F8:17:95:A3:8F:42:6E:17:77:29
Certificate issuer:       /CN=afac962a-1647-4571-99e5-a23db5fd79d7
Certificate serial:       010D0C9F4328584A7E7B59A740B835F22916C150
Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/ed93203f-cf71-30b1-9801-397105ab7580.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     7046
IP address blocks:        165.119.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:59:a7:40:b8:35:f2:29:16:c1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=1442d3ad-b908-48c2-aa46-fe024747b757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:f3:3b:31:aa:d6:fa:01:7c:db:5a:f7:a4:
                    99:34:8e:c7:ac:d5:1d:82:bf:b3:d7:e4:a0:7d:ad:
                    ed:47:a2:37:38:1b:8e:ae:7a:31:98:20:15:a8:56:
                    ea:cf:b5:5d:f1:85:0c:80:88:a1:18:e5:7e:b7:e1:
                    b2:d9:f8:05:d9:2d:4e:a5:cd:10:dc:e5:58:ae:3d:
                    3b:8c:d4:8b:43:8a:05:25:e1:d1:3b:21:19:24:a8:
                    5c:42:b2:f0:f5:24:d9:e0:1b:44:cb:d7:7b:90:41:
                    14:66:28:e9:97:8d:d8:ff:13:6f:19:a3:e6:7d:d3:
                    5d:4b:ef:0d:a6:3a:ff:db:61:61:42:23:c6:9b:bb:
                    40:ef:e8:fe:f4:cc:04:d9:40:0b:d3:63:f9:f7:5d:
                    f7:12:fa:ab:00:da:5f:0b:9f:00:5e:e2:d2:19:66:
                    df:ed:d7:d9:54:3b:e8:f2:bb:44:68:1b:1d:30:f0:
                    e2:2e:fd:34:5b:3b:2f:b9:39:91:4f:0f:22:de:95:
                    0b:89:1c:59:5f:4a:7e:d8:bf:73:53:00:84:77:3d:
                    95:f4:9a:eb:d6:5b:85:69:49:23:ce:b0:3b:88:cb:
                    5e:9e:91:bd:46:1b:13:58:61:e0:6b:07:61:9f:09:
                    95:a2:25:ea:85:0f:ed:f7:ce:66:5f:d4:05:01:e8:
                    f5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A6:0A:3B:36:C1:3B:B3:0B:F7:F8:17:95:A3:8F:42:6E:17:77:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/ed93203f-cf71-30b1-9801-397105ab7580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl

            X509v3 Authority Key Identifier:
                keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.119.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:1e:a9:e0:80:8c:ae:e0:5e:f2:63:12:07:09:75:09:2a:35:
         ba:c5:79:a7:ab:34:7e:93:ca:4b:8c:8c:f7:db:f1:f9:c6:ad:
         ca:3c:8d:b2:bc:67:04:25:dc:85:cd:df:06:47:5f:36:4d:6f:
         08:2e:99:3a:86:2c:3a:f1:a1:72:08:27:7f:f5:aa:da:53:74:
         c5:3b:c4:c2:09:1e:64:eb:f6:59:aa:3f:68:65:6f:f5:4c:3b:
         3a:2d:7a:b5:dc:19:55:9f:03:21:64:9f:05:a1:9e:3d:90:48:
         f3:49:ac:eb:8a:99:54:31:b7:98:e4:a2:ec:eb:09:c2:44:4f:
         13:e1:b8:1f:93:8c:23:56:9e:4b:05:1f:18:1a:75:0a:59:cf:
         82:b3:23:37:10:06:25:d6:b3:2d:61:9e:29:7e:3e:56:75:18:
         5b:d4:93:4e:64:52:c9:85:8c:53:39:35:55:07:82:31:20:2f:
         d3:6a:73:15:1c:3a:ea:f8:d4:25:f9:4e:ab:65:8e:f6:36:f3:
         4a:d9:5d:1f:30:d9:8d:49:0b:46:c3:23:f0:38:c3:dc:d9:e8:
         01:25:ad:00:06:4d:8d:06:67:20:96:df:e4:78:89:64:7a:05:
         bb:da:ba:47:c8:1e:17:26:a5:ef:e8:cb:f9:93:33:93:3c:92:
         b3:84:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:07:35 2025 by rpki-client