Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cbf2173e-57d4-3b7c-b728-043cab3e2967.roa
File:                     cbf2173e-57d4-3b7c-b728-043cab3e2967.roa (raw, json)
Hash identifier:          X7a8e/7LT7bWrH45A9UuDvkUeSIB/sGgHdzHkPAHRiQ=
Subject key identifier:   68:B6:8F:A6:9D:2E:4D:E9:AD:5C:65:53:BF:C9:EB:56:3F:F8:A9:FF
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB0020FEE34A9692EC58000
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cbf2173e-57d4-3b7c-b728-043cab3e2967.roa
Signing time:             Sun 03 Aug 2025 02:35:45 +0000
ROA not before:           Sun 03 Aug 2025 02:35:45 +0000
ROA not after:            Sat 01 Nov 2025 02:35:45 +0000
asID:                     62044
IP address blocks:        165.225.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:02:0f:ee:34:a9:69:2e:c5:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:45 2025 GMT
            Not After : Nov  1 02:35:45 2025 GMT
        Subject: CN=c3b28c4a-479d-4242-840e-bc439313c7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ff:e4:39:8d:15:cc:a4:83:1c:09:70:31:dc:
                    03:d5:76:91:44:fc:84:65:09:0f:77:8c:f0:3e:ec:
                    d1:e5:c5:59:2d:c4:92:60:24:9b:08:0d:7d:99:67:
                    2b:b4:2f:4d:d4:6e:a4:f7:20:af:9e:21:4e:a7:e0:
                    08:7f:35:7f:b8:80:79:61:ae:39:26:b2:d4:b3:1f:
                    cb:e8:37:b4:85:a5:18:70:a1:d6:64:70:b6:b6:e3:
                    a2:55:05:99:e9:6d:38:6f:31:d9:a6:06:cb:8e:2e:
                    10:6e:72:04:ce:50:23:b0:4e:f8:8e:bd:22:29:35:
                    8f:1d:de:41:fa:b7:78:44:4c:67:da:f5:fa:4b:77:
                    72:df:87:a3:d1:b6:cd:00:20:53:08:bb:d8:be:94:
                    d6:98:83:b7:ea:e0:39:34:2d:0e:d7:a1:af:3f:c2:
                    e6:c4:c7:47:13:3a:cf:a3:a3:c3:ce:27:1f:4e:09:
                    01:5d:91:a8:da:0c:de:f5:6f:3e:2f:e3:8c:69:ff:
                    26:b8:bd:b3:f4:9d:6b:73:1c:d0:3c:fc:81:5d:fe:
                    67:6a:24:07:77:7e:e2:15:11:b3:3b:1d:a9:c0:13:
                    f2:cc:7e:71:d4:06:20:2c:75:a2:13:12:c5:7c:67:
                    28:04:2e:5f:87:74:11:fa:cd:ea:70:76:d6:f9:ad:
                    50:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B6:8F:A6:9D:2E:4D:E9:AD:5C:65:53:BF:C9:EB:56:3F:F8:A9:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cbf2173e-57d4-3b7c-b728-043cab3e2967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:48:5b:b0:b9:df:e4:bf:61:65:79:b4:6e:dc:26:e7:25:
         30:1b:7d:2b:24:4b:60:3e:6b:59:07:a1:97:ac:39:48:68:7c:
         ad:0e:64:b4:39:b3:1a:7e:fc:57:1a:e1:2e:c3:20:50:8c:e0:
         98:80:70:93:70:92:d3:0a:9f:34:fd:80:fb:6b:74:ba:e1:06:
         70:43:a4:de:8b:e6:38:32:cf:1a:54:6e:cf:d1:88:b9:f5:5f:
         97:71:90:a3:ba:b2:a7:66:60:97:73:02:0f:70:93:5d:57:7a:
         3d:58:e9:61:87:d4:e1:4d:36:6a:9a:47:b0:31:ac:3a:37:f4:
         72:7b:2c:0e:5d:64:86:db:8a:05:24:3b:c0:a0:45:83:d6:02:
         71:c4:cc:fe:f5:f7:cd:d8:16:88:86:82:cc:01:ec:c6:65:ad:
         bb:11:2e:ec:84:47:3b:35:18:3e:80:d1:83:db:12:43:02:54:
         e1:0b:5f:d2:4a:67:19:66:22:26:15:b3:34:0d:4a:cb:f5:04:
         d3:4b:cc:81:19:f9:4a:00:6b:8a:a9:73:ae:cc:db:df:92:a4:
         ee:2d:8a:dd:57:02:6e:30:64:87:6d:7c:a1:c8:f3:df:f7:66:
         b5:03:6c:7e:62:35:7c:6d:9f:44:d6:c9:50:53:a5:76:53:2a:
         17:71:85:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:28:49 2025 by rpki-client