Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/df99cbf9-0e22-3824-bce4-3374a259356a.roa
File:                     df99cbf9-0e22-3824-bce4-3374a259356a.roa (raw, json)
Hash identifier:          dzJ3IfKy9BxWd+8AoH0Mz3OFFTZNpzYuQhObUZUr+rI=
Subject key identifier:   97:7F:3F:B5:CF:6C:69:FB:7E:DF:3F:AD:0A:52:BE:B2:2D:EE:A4:F1
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB0066B977D0B6534A28500
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/df99cbf9-0e22-3824-bce4-3374a259356a.roa
Signing time:             Sun 03 Aug 2025 02:35:47 +0000
ROA not before:           Sun 03 Aug 2025 02:35:47 +0000
ROA not after:            Sat 01 Nov 2025 02:35:47 +0000
asID:                     62044
IP address blocks:        170.85.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:06:6b:97:7d:0b:65:34:a2:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:47 2025 GMT
            Not After : Nov  1 02:35:47 2025 GMT
        Subject: CN=57007298-e6ce-47c9-b8d8-354ad4cf0b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:64:55:dd:f3:fd:f0:ec:13:ff:b3:35:16:24:
                    54:cf:0a:55:9f:a5:ad:c1:3d:6c:f3:6f:b9:be:ca:
                    72:1a:f2:c4:d7:bb:70:5d:bb:50:d0:be:fe:51:d6:
                    d7:87:30:71:c7:96:20:cc:fc:91:e3:a0:db:2f:0a:
                    1c:18:e7:bb:83:fe:56:5a:9c:be:26:1b:de:20:c0:
                    53:9c:0f:bb:4e:36:1a:6e:7c:a5:85:34:5f:ad:62:
                    18:bd:ab:de:26:e8:86:25:14:37:08:94:17:71:d3:
                    d1:84:0a:2a:c9:4e:27:c9:fe:fe:5c:79:b3:36:b7:
                    eb:53:91:6d:48:ee:ca:e2:c9:0d:0b:a9:30:f5:71:
                    1a:fd:58:a6:90:43:42:ca:9d:6e:4f:5c:65:26:35:
                    72:19:0a:51:64:b9:00:23:10:1d:35:fc:95:17:1f:
                    70:07:f2:70:44:be:a5:3c:7e:ab:f9:74:71:8d:08:
                    b1:37:11:0c:e7:d4:cb:91:fe:b1:53:3e:35:27:6b:
                    6f:a1:b3:7e:b5:2a:42:d8:0d:5c:f8:9f:0b:7c:74:
                    47:e2:06:86:2f:84:70:59:ad:79:17:14:ab:c0:65:
                    73:4a:d3:c7:ba:61:30:db:93:f6:f1:5c:60:12:27:
                    59:ae:8e:0e:bf:7c:07:a0:d4:56:fb:93:19:97:fb:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7F:3F:B5:CF:6C:69:FB:7E:DF:3F:AD:0A:52:BE:B2:2D:EE:A4:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/df99cbf9-0e22-3824-bce4-3374a259356a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:cb:fc:9c:22:27:b2:55:40:b3:fa:c6:8e:41:18:f6:bf:a3:
         08:fa:82:e9:7f:da:67:92:dd:c1:f1:67:0f:9a:4d:28:01:13:
         63:a7:40:14:41:3a:88:61:a8:c1:88:51:63:95:4f:2c:43:fd:
         dc:41:38:ca:5c:86:b6:5a:35:f4:c8:c9:31:c9:db:db:2a:f7:
         ea:f5:71:c4:55:4e:6a:04:c5:c2:74:96:1b:a1:70:9e:a4:99:
         df:cf:ea:97:bf:b1:10:37:dd:50:b6:b1:7f:29:3a:8e:19:d7:
         c6:44:f3:13:bc:60:da:10:09:f7:0b:34:a8:d8:53:2a:ba:e8:
         03:33:5a:8c:c3:4a:21:59:99:9a:81:1e:72:ab:d8:11:63:b5:
         8c:d3:4f:6d:6a:54:7e:48:74:de:f8:9a:1e:04:5f:72:2a:66:
         2f:2d:89:00:17:ce:c4:11:cb:c5:79:56:d2:63:09:9c:2c:a3:
         1d:55:4e:be:73:03:ed:ce:f1:8b:3a:5c:b8:f2:83:e6:27:73:
         bd:57:de:83:30:9a:79:95:f8:88:96:3a:7c:06:74:98:44:95:
         48:c3:c0:37:d8:a3:76:a5:46:09:5b:c0:4e:73:a2:4f:80:91:
         b3:11:01:ac:95:17:fe:ba:fa:ac:55:af:b6:c2:81:30:68:c9:
         cd:07:55:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:11:00 2025 by rpki-client