Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4764eeb3-b454-3825-8d1c-ad8e5188d22d.roa
File:                     4764eeb3-b454-3825-8d1c-ad8e5188d22d.roa (raw, json)
Hash identifier:          eoEBqoOIuPjKqK+lKs4KK+Rs3IKb6FP8KZ0Wzl6Xl0E=
Subject key identifier:   CB:AD:DA:CE:3B:DD:C0:74:85:23:BE:F0:35:E5:3F:37:ED:89:DB:37
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB00858DDA763EF13561640
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4764eeb3-b454-3825-8d1c-ad8e5188d22d.roa
Signing time:             Sun 03 Aug 2025 02:35:48 +0000
ROA not before:           Sun 03 Aug 2025 02:35:48 +0000
ROA not after:            Sat 01 Nov 2025 02:35:48 +0000
asID:                     22616
IP address blocks:        170.85.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:08:58:dd:a7:63:ef:13:56:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:48 2025 GMT
            Not After : Nov  1 02:35:48 2025 GMT
        Subject: CN=132adf77-1a5a-47a4-9d20-c3c780c82de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:25:f3:92:0a:bb:aa:32:d3:6f:ff:b2:3b:5a:
                    9c:5c:6f:fd:2b:88:4b:ec:d5:e5:90:82:02:2e:60:
                    a4:aa:1a:30:3f:d6:ef:8e:90:3b:98:26:70:9e:fb:
                    22:30:5a:45:fa:b5:bb:95:fd:b8:15:e0:08:ae:22:
                    b8:0f:39:3d:9e:1a:2b:32:1d:d6:9b:86:fc:0c:98:
                    b8:72:52:05:ee:ae:c5:e4:0d:5a:16:dc:45:af:9e:
                    0a:2b:ca:26:4c:85:d7:3c:0b:ed:9b:68:1c:45:6e:
                    7c:fa:5f:59:77:bc:ae:10:56:fa:09:87:c4:d2:4f:
                    bc:c3:52:b6:c0:de:eb:ef:0f:5d:e0:5a:60:29:f9:
                    60:73:68:a5:aa:b4:b1:6b:0f:34:61:2f:b8:2e:6f:
                    72:05:8b:85:0a:9f:ec:f8:ee:05:b2:5b:d4:68:70:
                    50:4c:30:df:89:7a:d3:27:fc:1f:e9:b5:af:6b:6b:
                    25:f2:f1:80:c3:0d:a7:c5:a0:8f:ee:ad:a0:fc:75:
                    c4:9c:fb:d2:43:ce:1b:81:ed:ff:9b:93:e4:c8:4e:
                    6f:fd:21:0b:fc:24:8c:52:5a:16:7a:3b:27:f8:37:
                    e9:99:47:f0:ea:02:0a:09:4c:ed:bc:a5:6a:5d:c2:
                    f2:ec:35:f3:7a:0b:0d:d5:42:0d:eb:52:c9:4e:cf:
                    72:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AD:DA:CE:3B:DD:C0:74:85:23:BE:F0:35:E5:3F:37:ED:89:DB:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4764eeb3-b454-3825-8d1c-ad8e5188d22d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:00:53:62:9e:43:f3:3b:48:7e:d6:5d:7a:f1:3e:1d:c1:4d:
         57:83:d1:00:0d:fc:f0:3c:1c:42:fb:d0:1e:81:3a:e3:78:c6:
         bb:6b:3c:ea:ac:14:37:9e:55:22:36:04:89:b0:8f:d0:83:0b:
         9f:1a:5f:49:55:a8:6f:9d:e2:00:08:d1:e5:22:85:3e:7f:fe:
         13:3c:72:37:2c:f7:56:c9:7a:2d:cb:c9:a5:2d:31:c8:73:8d:
         00:aa:2b:5f:55:0b:a3:18:76:a8:4c:61:1a:c1:eb:8d:69:c4:
         d8:b7:c9:98:5a:62:c6:2a:00:66:1e:2a:8c:75:27:b7:e7:0d:
         77:d0:3c:49:12:a9:03:d1:79:3a:a4:ab:09:bf:0d:69:af:57:
         6c:19:06:4e:02:a1:a5:83:ef:82:77:0b:07:e7:e3:51:6a:15:
         7d:3d:d5:cb:b5:fe:75:4d:6e:e9:63:e1:de:72:39:a8:81:18:
         52:71:6d:6b:67:0a:ce:e1:97:0b:b3:6b:bc:b5:6b:92:22:7e:
         ec:07:6d:8e:bb:e6:fb:44:03:b6:5f:c8:70:35:a4:15:fa:2c:
         4e:86:e5:a4:94:97:e5:cf:bf:8e:6a:c8:ad:26:48:38:6c:7e:
         64:de:e8:8a:67:39:ff:13:1e:40:7c:4c:6c:63:82:28:39:f5:
         e2:0d:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:42:28 2025 by rpki-client