Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa
File:                     8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa (raw, json)
Hash identifier:          CaFwKjKGUwXCiA4BPe00FBmOXpUWAs+jbz0o7OmPnDY=
Subject key identifier:   F5:E8:A4:FB:4B:1E:4E:20:B5:98:93:CA:E2:21:84:FF:CA:F5:9B:8B
Certificate issuer:       /CN=83f6fec3-836a-47ca-a671-0112eb9c74dd
Certificate serial:       010D0C9F4328584AA160CED0D5722882658DAE00
Authority key identifier: 52:BF:B6:F7:53:D0:73:5D:A2:C9:26:04:82:F0:72:88:5B:CE:2C:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     63300
IP address blocks:        192.70.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/83f6fec3-836a-47ca-a671-0112eb9c74dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/83f6fec3-836a-47ca-a671-0112eb9c74dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:ce:d0:d5:72:28:82:65:8d:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f6fec3-836a-47ca-a671-0112eb9c74dd
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=a6b4ee8d-392d-4d73-ae65-f61d3287a9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:80:83:9c:65:96:3b:21:6a:6d:c4:a8:f8:
                    58:52:d6:7b:25:5c:42:da:ca:00:56:b9:60:25:e5:
                    5b:8c:5f:a8:34:e0:32:59:24:fc:a0:64:c6:42:06:
                    e8:c2:fd:b3:4a:02:48:cc:38:39:f5:18:f7:80:d5:
                    52:67:e3:8c:53:00:13:4b:d8:03:ae:b0:8f:84:85:
                    3e:fd:d5:3c:93:7b:ac:6d:7f:ef:ea:c1:bb:63:2e:
                    56:a8:3c:0d:f6:72:1f:53:d3:ad:74:8f:be:6d:a8:
                    80:12:dc:c4:b9:dd:c8:55:10:fb:17:64:21:35:6c:
                    28:12:96:a1:62:77:05:c0:ea:0e:8d:98:2e:f7:3a:
                    ce:5f:64:5b:d3:4d:aa:09:7d:64:3f:72:c3:24:c4:
                    49:eb:6a:7b:7c:75:e9:2c:c0:37:d6:22:0e:2f:01:
                    b3:38:23:17:44:82:d4:ab:0f:00:a0:69:52:38:45:
                    e6:27:0a:b5:dd:0e:75:5a:f1:bd:60:90:97:1f:5b:
                    b1:91:d4:cd:7e:86:8c:59:b3:bd:fc:d3:48:23:5c:
                    24:04:27:e9:78:60:63:7b:6e:93:fb:5d:fe:d9:35:
                    55:1d:ea:38:c2:7a:f0:4a:fb:94:de:96:ff:82:51:
                    f3:fe:b7:d5:ef:91:72:13:3d:39:f3:43:f5:f9:95:
                    f3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E8:A4:FB:4B:1E:4E:20:B5:98:93:CA:E2:21:84:FF:CA:F5:9B:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/8fd9f447-2c01-3991-8fa2-216d7a9ffa90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd/83f6fec3-836a-47ca-a671-0112eb9c74dd.crl

            X509v3 Authority Key Identifier:
                keyid:52:BF:B6:F7:53:D0:73:5D:A2:C9:26:04:82:F0:72:88:5B:CE:2C:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/83f6fec3-836a-47ca-a671-0112eb9c74dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.70.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:47:76:d3:b4:97:31:34:62:38:8a:45:8b:cd:b6:b7:5b:f1:
         7c:4a:eb:36:e0:66:1c:e2:24:c6:5c:30:25:f2:8e:40:90:0d:
         38:e4:a7:1f:ff:2f:66:2a:10:a8:89:4b:a3:43:91:7c:3c:48:
         2d:f7:79:53:d7:f2:75:bc:04:04:5f:50:39:7f:9b:e7:50:bf:
         6a:2c:c4:36:17:b1:a4:eb:7b:5d:98:ce:4a:fe:56:a7:a1:7f:
         10:fe:45:1e:a4:38:03:ef:a6:be:98:eb:88:9c:7f:ff:cb:16:
         fd:a4:0a:a4:17:8a:a1:e9:28:60:17:5e:23:06:73:9e:4f:d4:
         fa:ea:38:b9:44:46:d4:43:d3:8a:20:fb:bd:fd:f5:3b:5d:e2:
         9d:92:08:f1:e5:8c:b9:cb:54:10:0a:86:0d:81:55:1c:f5:f3:
         87:e1:38:de:7e:f4:f7:4f:16:71:dc:68:15:9d:fd:2b:f1:ef:
         6b:8e:bb:71:89:9d:ac:09:86:4d:e2:bd:fd:45:59:57:81:50:
         3b:78:6a:4d:94:bd:ab:1b:46:5d:b7:8b:10:40:cd:65:c3:d9:
         64:03:6a:ab:b1:92:2f:a0:56:95:d5:d2:72:86:00:be:6b:0f:
         c6:89:3c:92:2c:4c:d2:e7:65:34:4e:ef:22:b3:ce:5a:2a:d9:
         e0:86:89:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:23:02 2025 by rpki-client