Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5cbb7dd9-3995-380b-919c-3a8d2911be32.roa
File:                     5cbb7dd9-3995-380b-919c-3a8d2911be32.roa (raw, json)
Hash identifier:          3lEnM5XraStUXM9c1Z82F7pAWAnCBFTBPArxPe2CU9A=
Subject key identifier:   35:E0:35:DC:65:18:15:DA:0B:31:40:9F:70:7B:67:92:E2:68:11:B1
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB003386F0AF3C98767E410
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5cbb7dd9-3995-380b-919c-3a8d2911be32.roa
Signing time:             Sun 03 Aug 2025 02:35:46 +0000
ROA not before:           Sun 03 Aug 2025 02:35:46 +0000
ROA not after:            Sat 01 Nov 2025 02:35:46 +0000
asID:                     62044
IP address blocks:        165.225.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:03:38:6f:0a:f3:c9:87:67:e4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:46 2025 GMT
            Not After : Nov  1 02:35:46 2025 GMT
        Subject: CN=f915d971-59c4-405b-8521-41d4f4448c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ad:dc:12:29:dd:70:e9:d2:31:6c:7a:1d:bc:
                    27:6d:8d:5f:d7:4f:43:7d:1c:83:15:2c:00:61:24:
                    91:0d:92:4b:8a:6a:57:7c:ee:7c:71:68:ec:51:a2:
                    87:3e:2b:ba:c1:18:ff:ae:6b:cd:18:1a:b7:42:47:
                    62:ff:fe:fa:3b:7f:f2:0e:74:6a:6e:5d:89:b1:41:
                    d1:e5:76:f7:4a:54:ce:0e:e2:c0:e1:5a:70:7c:ad:
                    fe:e0:21:0d:dd:ab:30:ce:6b:ea:77:2d:1f:e1:a1:
                    55:7c:79:72:df:ea:df:eb:ab:93:bc:85:22:cf:15:
                    95:92:c8:cf:a6:80:14:d8:e6:98:4a:c7:db:e1:55:
                    0d:27:a2:10:1f:80:18:e4:97:70:bd:8b:55:2c:e3:
                    58:aa:f5:00:43:fc:91:96:7a:2a:6d:49:a8:98:27:
                    7d:ce:81:a3:35:6a:44:8f:d2:1f:8e:29:1a:d7:b2:
                    8f:ac:05:a7:51:82:87:80:f0:17:e5:fa:9f:8a:09:
                    ec:f3:e5:26:2a:23:ba:fa:77:64:58:60:37:f6:f5:
                    56:57:c1:fd:1b:dc:3b:97:0f:09:67:ac:73:94:7f:
                    8f:0f:69:c1:7d:5f:9a:88:fc:a4:5b:f0:29:e2:4b:
                    ea:7c:c3:01:c5:41:4a:55:50:85:19:8b:b9:30:b7:
                    82:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E0:35:DC:65:18:15:DA:0B:31:40:9F:70:7B:67:92:E2:68:11:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5cbb7dd9-3995-380b-919c-3a8d2911be32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:71:0c:43:45:d2:ba:fb:f4:c1:8c:da:a2:22:a4:74:52:64:
         c5:16:51:17:5f:9f:78:75:b5:53:d2:4b:78:1c:af:1c:3e:dc:
         0c:66:f3:c6:cb:ba:f6:27:c6:3f:7a:eb:58:0b:3b:6e:24:ec:
         ae:b7:74:e7:17:78:c9:1c:2e:13:03:97:de:04:26:2d:16:6d:
         df:ac:ab:67:54:4a:cc:e0:cc:83:7c:96:d3:22:96:7c:76:f6:
         dc:53:1a:1d:5c:bb:6a:7c:a9:91:66:56:24:4a:f0:4f:85:ea:
         c4:a8:d0:6c:63:6b:75:a2:cc:59:bc:76:2a:bc:e2:ae:b1:34:
         01:19:69:2b:f6:9b:27:8b:ab:7a:54:20:25:42:06:17:04:68:
         fb:34:95:f4:51:6e:bd:19:a5:ff:2d:7a:b5:86:45:29:71:5f:
         64:68:0b:c9:01:22:27:9f:08:e5:90:bf:24:2f:43:38:f0:2d:
         a5:7b:25:3f:ae:07:6b:42:db:1f:7b:71:23:18:43:ca:24:dd:
         e8:ec:62:97:8f:3a:0c:04:eb:be:19:62:67:ac:4a:4f:75:b1:
         b1:15:d4:0b:84:54:bc:52:40:46:f7:fc:25:91:e1:50:88:cb:
         0b:dd:a3:a5:06:51:ad:ef:af:59:2f:59:78:ac:18:4b:bc:b2:
         0d:fb:64:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:22:32 2025 by rpki-client