Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/700cd8d9-9334-30df-ab76-fc63d7d439f2.roa
File:                     700cd8d9-9334-30df-ab76-fc63d7d439f2.roa (raw, json)
Hash identifier:          bDiAE1Y+5HikXQxD68+VgWeXoToQoQhOOh+zin1Sbm4=
Subject key identifier:   81:EF:1C:71:0F:BF:13:BC:C4:3E:78:11:AE:D9:7D:79:55:D3:81:E7
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584ABD4B920F45225A785BCB4600
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/700cd8d9-9334-30df-ab76-fc63d7d439f2.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     16696
IP address blocks:        147.185.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:92:0f:45:22:5a:78:5b:cb:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=c63cd941-fef1-47aa-8a1b-bd8bca1f92a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:2b:44:fb:30:97:cd:5d:da:67:24:5b:f9:
                    78:e8:23:56:f8:d0:9e:a1:b2:84:a2:35:5b:c7:13:
                    a7:cb:50:f2:8d:91:8c:62:60:81:42:d9:65:e3:e3:
                    8c:fd:3b:38:f1:81:e3:28:02:99:10:01:7b:58:a8:
                    df:ca:7e:7f:41:70:1d:d1:e6:03:97:00:9a:57:5d:
                    84:8f:26:12:17:b8:fb:45:f6:7b:11:8a:c9:96:04:
                    92:69:d6:bc:4a:ee:89:bb:78:d2:86:f1:c0:e2:72:
                    ca:a6:b8:d0:74:2f:77:d5:24:79:9f:82:f4:94:23:
                    0b:3c:4f:43:c3:86:1b:db:22:c0:5d:36:fe:1f:70:
                    be:72:79:e9:b8:46:1c:b1:98:e6:9a:49:39:32:39:
                    40:77:7c:a6:47:12:19:6e:31:42:f6:7f:5e:d0:bb:
                    72:c7:53:53:1a:4e:8c:2d:8e:9a:71:bc:da:43:1e:
                    b0:fe:3a:fa:7c:32:05:b0:b6:be:fa:3d:a7:c6:c6:
                    bc:af:d9:94:d2:4d:94:4a:0f:16:89:c6:2d:3f:12:
                    e5:b1:13:56:a9:bd:2e:42:a4:94:05:d6:c8:09:7b:
                    6d:2d:47:d6:93:a8:5f:d6:67:be:e6:0a:4c:e9:63:
                    2b:0d:90:d8:b3:f1:bf:ba:c7:3c:16:22:0d:bf:a0:
                    5a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EF:1C:71:0F:BF:13:BC:C4:3E:78:11:AE:D9:7D:79:55:D3:81:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/700cd8d9-9334-30df-ab76-fc63d7d439f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:9a:56:0a:18:d1:c5:27:e3:7c:7d:65:a5:f9:02:31:ba:af:
         dc:36:cb:a7:ec:96:98:3b:50:72:6f:5e:5b:89:80:06:ac:61:
         c6:b3:67:7f:ff:48:ae:51:cc:85:b7:7e:9e:d3:4f:83:ba:46:
         0a:61:b3:85:62:b1:4d:a8:ca:38:6c:e7:ec:bf:43:ea:62:9e:
         1b:23:e4:4a:8d:63:f7:b6:41:76:4f:b9:18:79:bf:ec:43:18:
         0a:ce:f9:c5:27:b0:25:8d:6b:ea:06:d6:f8:40:db:d3:d0:df:
         87:d4:9b:3d:46:ed:e0:0d:d6:06:35:f6:88:66:f6:40:2f:7a:
         67:12:b5:c6:eb:42:93:5d:0e:82:d3:2f:36:5c:51:32:3f:69:
         76:f6:6a:a4:00:c4:01:2d:8c:52:a0:2c:a0:8e:c7:e4:80:2c:
         9c:d5:1d:b7:b4:be:bb:20:61:5b:ee:e3:09:6a:a8:92:27:d2:
         dd:63:f7:95:13:85:94:7e:30:ec:1f:62:7d:6e:f3:d4:2d:09:
         02:bc:3d:98:bf:3e:98:98:bf:59:3a:79:3d:7c:99:65:49:51:
         6f:fe:ec:a3:27:6b:5d:e8:73:fe:19:cb:86:fe:d2:b2:c8:f6:
         a0:ea:46:4f:c8:77:63:b0:11:54:5f:78:1c:2d:de:6a:6b:37:
         4b:26:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:34 2025 by rpki-client