Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9f6316bd-bccc-30c0-ad6e-5128eda89342.roa
File:                     9f6316bd-bccc-30c0-ad6e-5128eda89342.roa (raw, json)
Hash identifier:          hx/PwMGjRaKrdcUzGoG1zd/GgVYNwZGBV4EWqdEEC2s=
Subject key identifier:   1F:F0:E2:D4:A6:C5:DC:59:02:14:55:EA:C5:E2:FF:6B:99:50:0C:97
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB00361A9B66D2F6BC8D880
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9f6316bd-bccc-30c0-ad6e-5128eda89342.roa
Signing time:             Sun 03 Aug 2025 02:35:46 +0000
ROA not before:           Sun 03 Aug 2025 02:35:46 +0000
ROA not after:            Sat 01 Nov 2025 02:35:46 +0000
asID:                     22616
IP address blocks:        165.225.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:03:61:a9:b6:6d:2f:6b:c8:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:46 2025 GMT
            Not After : Nov  1 02:35:46 2025 GMT
        Subject: CN=6871b01b-36b9-4311-aed5-7558c8675fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:bb:a6:0d:fd:b8:4e:9c:ea:87:bd:e9:ed:
                    23:7e:04:98:92:69:e8:65:7d:0f:56:86:e3:2a:51:
                    a1:c9:c9:50:56:dd:b8:06:0e:87:a5:8e:40:c9:ea:
                    04:1f:fe:c2:00:57:2b:67:31:b7:7f:62:46:86:98:
                    08:bb:8f:5f:70:65:d5:38:3f:22:d2:19:3d:15:a4:
                    7b:3c:3f:e8:f2:8f:82:cc:2a:48:1b:f6:48:44:e1:
                    9b:ee:cd:10:51:05:ab:46:5f:7a:49:0a:de:ac:52:
                    4e:e8:29:a3:d3:10:09:47:36:77:e0:72:d5:0a:72:
                    08:d7:59:7f:1c:38:35:3b:1c:29:6e:ba:24:23:17:
                    a2:4f:61:81:98:22:f1:6b:24:b7:30:59:6d:9e:e1:
                    f4:30:90:d8:ee:c0:a4:34:c2:6a:87:29:ff:9d:8e:
                    bc:0e:53:73:8f:fe:9c:d3:a3:fb:01:22:fa:88:0b:
                    0e:41:c9:f2:cf:88:10:87:1a:36:1d:57:0e:2c:c5:
                    81:33:c9:68:c1:f8:0c:80:c9:86:01:ca:2a:37:82:
                    80:4b:f5:ff:da:9c:9c:a9:30:73:13:ba:b1:82:3f:
                    0f:d5:a7:b0:50:1d:21:39:3f:b1:21:d1:ff:62:fa:
                    bf:16:2c:5b:3f:f0:b4:70:bc:ef:58:2d:45:6c:45:
                    07:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F0:E2:D4:A6:C5:DC:59:02:14:55:EA:C5:E2:FF:6B:99:50:0C:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9f6316bd-bccc-30c0-ad6e-5128eda89342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b0:d4:98:88:ce:b3:eb:fe:70:b0:8f:f6:87:12:24:c3:4d:
         a2:e3:97:77:39:67:ea:a7:04:cc:4d:85:09:16:aa:5b:ff:92:
         9a:a9:a5:b4:e1:b1:0d:dc:e2:f0:08:a0:3c:5f:76:03:da:b6:
         14:32:5c:6a:1f:bc:03:4e:6b:46:3d:85:37:cf:ef:db:0b:70:
         c0:6a:5b:c1:fa:6d:f5:51:8e:1c:9a:c4:4f:bb:bd:e9:c6:13:
         95:76:4f:43:c2:d8:3e:cc:33:74:e5:c6:ee:b8:af:5d:5c:e3:
         02:67:9a:b9:ff:90:f5:b5:60:ac:d1:c4:cd:5d:e7:f2:62:64:
         1f:04:fe:87:7d:eb:6b:ad:56:bc:54:ab:7c:59:1a:d4:ba:b4:
         78:6b:c2:a8:15:6a:81:1a:89:f9:52:72:83:96:20:69:a3:06:
         bb:b9:28:fe:7c:67:91:40:56:e1:6c:20:7e:c4:2d:3e:5c:f6:
         16:1e:11:b7:b8:2e:58:c6:40:96:94:8f:1f:53:de:fd:63:84:
         ce:97:de:6f:ad:32:35:f2:7c:23:55:e9:1a:40:6b:8d:ba:c9:
         39:8e:8b:c9:ab:91:36:68:e7:d7:77:7d:63:d7:b1:87:8d:e5:
         2c:a0:a6:af:f6:78:cf:bf:80:09:96:90:49:c5:1e:7f:ab:ea:
         b4:e4:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:49:02 2025 by rpki-client