Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/94c81576-d7df-3712-8359-86dc46480453.roa
File:                     94c81576-d7df-3712-8359-86dc46480453.roa (raw, json)
Hash identifier:          hT3pTmvlVSKDPvy8hqoxHZgI6iec/5YMhIxGEtgymV4=
Subject key identifier:   9B:C7:99:B9:50:62:B2:BD:5E:3C:1D:90:87:72:C7:15:1F:76:4F:B7
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584A82AB4595D4FB164DFC919080
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/94c81576-d7df-3712-8359-86dc46480453.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     14061
IP address blocks:        165.245.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:45:95:d4:fb:16:4d:fc:91:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=983f34f8-9661-4b15-9916-100775ad8f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e0:c5:59:23:0c:2d:4c:80:27:ff:d3:44:3b:
                    d3:13:98:37:05:7a:36:bd:6e:bc:5c:51:e4:a6:74:
                    25:ca:15:5d:9f:43:85:a5:8f:e1:3e:43:ee:4d:34:
                    2f:4c:a7:be:b7:ec:e2:e4:41:87:84:67:93:a2:bf:
                    69:35:45:55:ef:fd:c6:a1:e0:43:f6:2a:5d:35:a5:
                    e6:e7:4d:67:8a:d1:3b:13:71:09:8f:bf:c0:35:2a:
                    5b:7a:9a:3b:f9:53:da:cf:c2:bf:e2:ee:fe:a2:79:
                    2c:89:77:da:21:b2:04:7d:da:fc:25:2e:8f:e2:e8:
                    68:71:05:35:03:8e:8a:d5:62:ab:dc:61:d6:67:79:
                    a9:d6:a4:b5:ed:c1:d3:3e:bb:2b:42:c7:66:21:d7:
                    5f:ed:f3:69:4d:bc:65:0a:a0:c7:e1:64:92:06:97:
                    3f:00:ee:69:ab:d1:04:16:9f:cf:48:fd:9c:68:87:
                    1b:20:52:c7:27:f8:29:10:a9:9d:6e:ee:ae:4b:0f:
                    31:7e:ca:70:fb:2c:ec:ca:70:2e:f0:95:b3:d6:6f:
                    2b:2b:ee:3c:13:57:3e:77:40:f9:91:62:ed:5c:e5:
                    6c:19:2d:e3:f3:40:62:84:6a:54:71:d3:1d:ce:67:
                    6b:e8:1e:5c:c3:e0:22:08:72:ef:c8:1a:4c:e0:07:
                    e8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C7:99:B9:50:62:B2:BD:5E:3C:1D:90:87:72:C7:15:1F:76:4F:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/94c81576-d7df-3712-8359-86dc46480453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.245.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a0:1c:f5:c2:7f:31:5d:19:91:cf:96:66:5a:c9:ab:3b:72:
         46:c1:a7:77:56:af:57:fa:24:1e:61:00:a2:fe:dd:26:bf:66:
         91:cf:54:47:36:65:ac:a2:01:9d:a2:06:72:83:c8:0f:c8:c1:
         2e:f8:b9:b3:cf:5a:5a:4f:7f:6a:68:4f:9d:06:5c:b0:a9:1b:
         1f:54:01:10:ce:19:80:36:4e:e0:75:19:fb:ef:e2:1f:8d:ea:
         62:ed:84:cc:2f:78:00:1f:fe:7a:11:e6:ac:3c:66:ee:69:55:
         74:7e:2b:42:86:11:29:c2:f5:4b:6f:04:11:68:f2:ee:1a:be:
         23:9d:8f:13:00:67:18:b5:66:52:c4:60:cc:f1:ea:fa:09:2e:
         4e:8c:4a:5f:68:97:6b:b2:ca:b0:a0:3f:33:4b:b0:ad:4b:b3:
         5d:94:32:fd:2f:f0:c5:20:0f:ae:52:f8:c1:b8:cf:bc:83:bd:
         93:81:88:b6:27:03:c7:86:e2:b3:80:1a:79:7c:04:d0:bf:78:
         74:00:7a:db:d2:1b:0f:da:99:b7:c8:f9:3b:4e:5d:7f:3a:cf:
         93:77:91:59:09:f0:9c:63:19:3a:16:16:ee:9c:d2:95:90:44:
         7f:bf:0e:92:d9:3b:23:66:97:12:8a:4e:2c:93:4c:b5:99:fd:
         02:86:bb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:22:11 2025 by rpki-client