Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c667d4b2-daad-34c6-aeaa-4f21ad71d972.roa
File:                     c667d4b2-daad-34c6-aeaa-4f21ad71d972.roa (raw, json)
Hash identifier:          BybcUzT3y9RcSPGBBZ8UOOrAk3ODeuIsazfMM7OmPtc=
Subject key identifier:   5A:6E:63:93:79:89:A2:0E:C7:BD:17:F4:EC:F9:A2:BA:39:1A:56:DF
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB008A18B3AA432843D4000
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c667d4b2-daad-34c6-aeaa-4f21ad71d972.roa
Signing time:             Sun 03 Aug 2025 02:35:48 +0000
ROA not before:           Sun 03 Aug 2025 02:35:48 +0000
ROA not after:            Sat 01 Nov 2025 02:35:48 +0000
asID:                     22616
IP address blocks:        170.85.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:08:a1:8b:3a:a4:32:84:3d:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:48 2025 GMT
            Not After : Nov  1 02:35:48 2025 GMT
        Subject: CN=50dcd162-dbc9-4db1-bdc1-eda8a10b5745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:bf:50:49:ef:10:9e:45:f8:de:90:c3:95:
                    49:45:41:09:1c:f8:e7:29:e1:61:a8:b7:9d:d6:b1:
                    f8:e5:d4:fd:7b:d4:05:7c:1a:c6:55:05:9c:e0:71:
                    fb:72:66:64:b9:aa:97:83:d4:7e:be:08:ec:3c:fb:
                    61:6a:6a:09:2d:05:fb:bc:66:ab:5d:21:fe:9c:f9:
                    67:0c:bd:5a:31:45:55:7e:0b:6a:69:73:f4:ca:a7:
                    c9:ad:c9:ce:1a:27:7f:26:78:e3:60:9b:70:a8:51:
                    aa:fa:12:23:e0:7a:1b:50:f7:b1:8b:7f:a3:04:88:
                    ef:81:4e:88:bb:4f:f1:c2:e5:c9:5d:ba:d4:0a:32:
                    9e:1a:05:c5:4c:51:4d:0e:59:81:eb:4d:5e:d7:ae:
                    37:a2:eb:47:a3:7b:e8:5a:47:c2:f0:bd:3e:f9:e2:
                    93:82:3f:7c:27:83:64:b7:4b:e6:dd:e3:47:bd:8b:
                    9f:f7:7d:40:79:df:af:ed:2a:f2:25:26:3d:a0:6e:
                    e8:71:37:9e:de:ee:a8:a7:f2:91:8d:48:38:ff:6c:
                    8c:79:bc:e5:2f:62:0b:a2:94:9d:fe:95:80:00:9a:
                    c7:7e:7b:fc:3b:e8:3f:df:91:d0:03:cf:7f:3c:99:
                    f8:b1:d9:10:b5:77:cc:9d:2a:b9:e8:3f:be:03:3d:
                    c5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6E:63:93:79:89:A2:0E:C7:BD:17:F4:EC:F9:A2:BA:39:1A:56:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c667d4b2-daad-34c6-aeaa-4f21ad71d972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:7c:0f:e9:8c:b5:13:f1:c5:a8:c1:8c:86:68:00:f6:76:2b:
         4a:44:0a:71:20:9b:49:e1:21:16:e7:3e:c8:92:ae:14:9d:51:
         a4:74:eb:fb:c9:6f:22:4b:ac:31:cb:d8:eb:49:93:6c:c8:e5:
         91:dc:80:3f:64:cd:e0:7c:77:fa:fe:ed:99:5c:12:b4:5e:b7:
         f5:82:6a:eb:47:ba:95:f3:62:5d:d1:46:b9:c7:02:c4:86:d3:
         62:f1:22:84:77:38:23:29:a5:4b:5c:19:8b:15:97:d2:4b:f7:
         dd:cd:ef:93:ca:0e:e2:0e:ae:88:e2:a9:61:24:f5:88:fe:a4:
         5f:e4:90:b0:37:da:91:cd:54:fd:01:ce:2a:9e:a8:57:d1:4b:
         b6:2c:fe:aa:ab:7d:67:04:16:13:ec:b2:b7:9e:6c:21:e8:b8:
         68:32:13:a9:fa:38:4e:79:1d:89:16:aa:33:fd:2e:d3:22:98:
         ec:3e:73:fa:d0:62:9f:65:19:b0:c2:15:b7:f4:e8:e7:c3:86:
         66:e9:41:92:36:b5:fc:58:42:35:32:81:a3:58:9c:7f:38:a5:
         61:50:16:6e:0e:40:a6:ed:24:fe:93:35:88:2b:4c:2b:38:84:
         07:2f:ce:cd:6a:cf:1d:6a:fb:95:e0:45:06:2d:f2:e9:64:24:
         73:1a:2b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:00:37 2025 by rpki-client