Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/15ef66c2-abed-3c7d-9278-0e190fe50d25.roa
File:                     15ef66c2-abed-3c7d-9278-0e190fe50d25.roa (raw, json)
Hash identifier:          YT1Xc1kT26uEVNpaLSmnXitg2kel1GiBAiGVmGpFlzU=
Subject key identifier:   EB:7B:D5:D5:F3:1E:C2:1D:9E:DB:27:9A:98:34:58:75:16:35:5C:42
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB006DA237057E8E756DA10
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/15ef66c2-abed-3c7d-9278-0e190fe50d25.roa
Signing time:             Sun 03 Aug 2025 02:35:47 +0000
ROA not before:           Sun 03 Aug 2025 02:35:47 +0000
ROA not after:            Sat 01 Nov 2025 02:35:47 +0000
asID:                     62044
IP address blocks:        170.85.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:06:da:23:70:57:e8:e7:56:da:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:47 2025 GMT
            Not After : Nov  1 02:35:47 2025 GMT
        Subject: CN=28e0e91d-35f9-401f-b7eb-d1a316ee98c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9e:35:b4:e2:f8:b1:71:0c:25:86:8a:fa:87:
                    bc:69:7f:de:4a:e8:c0:62:56:57:b9:3e:4d:8b:25:
                    ee:b8:1b:be:c6:b7:b1:dd:ca:9b:8f:39:68:6a:e6:
                    c5:5d:a7:f4:83:5e:ee:87:17:14:9b:d2:4a:74:84:
                    d6:fc:70:a3:86:7a:b2:38:62:d3:7f:b0:22:0d:e1:
                    39:63:0b:31:4a:7f:b3:0f:ad:e4:01:51:f9:59:6f:
                    8e:e0:35:9e:a9:e1:79:27:7e:c6:76:36:0f:5a:83:
                    09:18:58:28:2a:3b:04:1f:2a:e7:7b:6d:b5:6e:e8:
                    62:6b:f0:ea:55:9d:06:e5:22:7d:7f:58:ac:71:91:
                    68:be:be:00:fd:b4:e3:2d:f3:c7:7d:c4:87:bb:fc:
                    a0:df:05:bd:51:30:27:f9:8f:76:a6:67:4f:77:79:
                    ac:95:56:a7:f5:ef:c4:d7:f4:32:0e:06:29:4a:90:
                    47:42:07:41:92:16:33:f7:5f:39:ab:b2:5b:ea:11:
                    b7:25:b8:b0:c9:75:5a:6a:ec:3f:2c:3a:ae:20:7b:
                    bb:79:74:3b:4f:3c:ec:47:6c:44:88:55:86:8e:ab:
                    87:cd:55:ab:b0:13:70:15:82:f6:e4:2f:7f:d7:72:
                    86:83:6c:75:a3:d6:22:91:cb:2e:80:eb:4f:f3:2b:
                    38:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7B:D5:D5:F3:1E:C2:1D:9E:DB:27:9A:98:34:58:75:16:35:5C:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/15ef66c2-abed-3c7d-9278-0e190fe50d25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d7:f6:a0:fe:95:e3:e2:26:8b:8d:1d:7f:ca:83:45:36:a8:
         48:dd:f9:ae:ba:d3:53:e1:6b:ee:03:79:af:7a:e3:c4:3e:dc:
         39:db:d8:d8:1e:44:01:fd:38:82:e7:5e:2b:bf:42:79:da:34:
         2e:1c:87:4d:2e:ba:45:c0:19:a2:d9:07:45:df:c2:ee:ea:d2:
         bd:cd:b7:2e:9a:4d:56:91:af:29:80:5f:2f:4a:fe:ac:45:1f:
         f0:ba:de:f4:f4:a6:43:06:e3:68:32:97:c1:53:c7:ee:0b:3c:
         4f:b7:79:e6:00:e7:60:eb:74:b9:fa:2f:af:a5:94:c8:8f:b2:
         88:b3:15:75:cd:ed:ec:48:01:35:0b:7c:c6:e5:8f:7a:b2:8e:
         23:fe:29:dc:07:25:73:be:cf:68:3c:6f:02:30:e0:12:01:38:
         0f:08:58:64:ad:d3:86:4d:96:42:e3:27:62:8a:95:79:95:d3:
         08:d7:96:67:ac:11:c1:4f:5b:0d:4a:45:bb:6c:d4:c3:0b:2e:
         7d:3c:7f:6a:58:94:e1:88:56:a2:c6:99:2b:b2:1a:cb:71:59:
         11:52:f1:28:97:bf:30:58:19:1b:87:36:8e:2d:a4:ce:ec:85:
         a7:4f:d4:c5:7b:46:ca:69:ab:6e:fb:b9:53:62:33:3e:cf:96:
         3e:79:9b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:40:00 2025 by rpki-client