Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/693f29a6-bd5e-3fad-9f76-f290f08d889a.roa
File:                     693f29a6-bd5e-3fad-9f76-f290f08d889a.roa (raw, json)
Hash identifier:          W8fCDW7Pzu/sxsfGFzijtZY7jgP3Ieeo8aVLOFJCxB4=
Subject key identifier:   3E:BD:FF:59:69:6F:A5:6E:5E:39:43:D5:69:B5:A6:0E:B0:8D:82:3D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB00C4C6A9FB22FF0382948
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/693f29a6-bd5e-3fad-9f76-f290f08d889a.roa
Signing time:             Sun 03 Aug 2025 02:35:50 +0000
ROA not before:           Sun 03 Aug 2025 02:35:50 +0000
ROA not after:            Sat 01 Nov 2025 02:35:50 +0000
asID:                     22616
IP address blocks:        205.220.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:0c:4c:6a:9f:b2:2f:f0:38:29:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:50 2025 GMT
            Not After : Nov  1 02:35:50 2025 GMT
        Subject: CN=b1fb8b10-d72f-4541-add7-eb048ab92598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f1:a3:d6:d8:6b:38:bb:d4:98:00:1e:f3:59:
                    8b:bf:79:09:79:1f:5e:3c:2b:f4:61:e8:bb:b8:5d:
                    96:e1:53:e2:49:ed:30:e3:a0:02:1d:d8:b8:a9:d7:
                    93:95:08:81:b0:4d:2a:45:3b:20:47:ee:8c:b5:5b:
                    a8:87:78:72:5d:00:3b:e8:60:0b:6b:93:19:04:8d:
                    6a:6a:ec:df:72:12:32:ab:9f:9a:e2:7e:55:16:54:
                    4d:4b:a9:17:6e:2c:d0:64:45:f6:94:80:a1:ab:2d:
                    87:72:9d:53:a0:87:d4:14:01:ce:fe:62:8e:01:44:
                    b8:d9:16:d0:25:3a:29:c2:04:49:e6:4b:31:a3:a2:
                    c4:31:9d:1e:37:21:b6:43:0e:3b:89:13:eb:42:4e:
                    1b:57:0d:0b:85:c4:4c:33:09:2e:2b:f3:6b:55:ae:
                    7f:8f:6e:c3:98:1d:1c:9c:f3:b5:32:2c:95:24:5d:
                    9a:04:20:ed:41:ce:5b:4e:db:82:cf:02:04:05:7e:
                    6d:40:e2:14:a3:1b:47:be:3c:d2:c6:f8:de:99:f0:
                    ca:aa:97:2e:8c:7a:33:51:17:dc:29:d7:27:92:70:
                    ec:62:45:60:50:ae:ea:78:a4:32:64:9c:94:3d:aa:
                    eb:d0:53:23:f8:b3:bb:a0:de:c1:3b:0c:a8:ba:94:
                    43:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BD:FF:59:69:6F:A5:6E:5E:39:43:D5:69:B5:A6:0E:B0:8D:82:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/693f29a6-bd5e-3fad-9f76-f290f08d889a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d0:6d:a9:af:af:94:13:d3:da:13:48:0c:eb:46:eb:3d:18:
         11:55:38:5c:b6:5e:4e:8f:53:4f:11:2f:a1:2e:56:8d:54:a8:
         6b:60:1a:52:5c:5d:63:ae:51:14:d6:a9:99:dc:9d:7d:bd:a5:
         13:53:e0:0d:fc:0e:b7:fb:7b:7b:a1:f9:93:64:7b:da:41:f2:
         91:bd:93:0c:ef:48:a5:84:8a:e4:1b:6c:0f:a7:00:43:d6:ad:
         cb:08:df:1a:a3:24:a1:d9:71:97:64:d5:e4:c6:91:6e:5a:32:
         74:b0:93:5b:4f:ef:14:93:45:06:b9:1a:ba:58:16:bc:cd:f4:
         7d:ac:b9:9e:95:4f:2e:a5:24:d4:17:81:00:ea:88:e5:f9:e8:
         4c:15:64:b7:7e:45:95:7c:50:ff:4c:17:8f:0f:7a:59:f5:ac:
         29:5c:77:04:2d:1d:2f:0a:e9:20:37:9c:48:e8:88:e6:62:a3:
         ac:1a:fc:ed:f5:dc:db:c1:bd:47:56:f2:b9:ea:b1:18:d4:30:
         2c:72:87:ca:da:38:bb:76:8a:c3:0f:84:0f:9c:c5:a7:93:a5:
         e8:d7:9b:2a:1b:13:2c:c8:3e:56:5f:25:7b:59:12:51:6c:ca:
         cd:6b:4e:cf:67:71:35:f6:cc:45:e3:1d:38:c2:5d:4b:22:86:
         0b:7d:02:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:23:53 2025 by rpki-client