Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/826a4506-faff-3fc0-834f-c2447661ac44.roa
File:                     826a4506-faff-3fc0-834f-c2447661ac44.roa (raw, json)
Hash identifier:          fqE3+VB2q9gOZdb3n/2FNLGmV4gJAYvyrjBW9w2aymY=
Subject key identifier:   C3:8B:63:8D:7E:F9:9D:0B:71:91:B1:7D:3C:7C:B2:DE:C0:CC:64:79
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F4328584A778091F27ADE5754D33D6000
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/826a4506-faff-3fc0-834f-c2447661ac44.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     5065
IP address blocks:        65.87.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:91:f2:7a:de:57:54:d3:3d:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=53166b02-e201-4305-a5be-45c820d245fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:eb:8e:80:b9:ce:cf:44:cd:76:95:fe:a7:5c:
                    98:d4:59:61:40:16:7c:50:53:43:f8:d8:bc:5e:1d:
                    3e:d3:c7:36:70:8a:bd:12:5e:5f:48:03:ba:cc:71:
                    6c:b1:8d:07:9e:46:d7:b4:6a:01:dc:21:61:a0:5f:
                    84:34:e0:91:f7:af:ab:b7:4d:c5:d3:45:23:ae:c3:
                    32:97:1a:be:1e:71:80:b5:2d:fe:de:18:7e:bc:e2:
                    21:09:a8:4f:b4:07:cd:49:b6:e8:43:83:0a:94:1b:
                    a9:4e:b7:2b:0e:0b:d4:59:32:0a:ea:d4:01:97:3d:
                    53:c0:e8:dd:b7:77:b0:19:4e:9f:ac:17:89:a3:26:
                    a7:f5:da:2f:1f:19:0a:9a:4c:55:39:ff:3b:d6:9e:
                    fd:e2:7f:d8:48:3c:f0:23:3f:0e:18:cf:3d:89:bb:
                    a8:04:53:9f:e0:e2:23:d5:dc:98:a0:75:85:8d:5e:
                    e2:aa:27:65:6e:d9:ae:ed:07:d5:97:ea:a2:7b:b5:
                    d8:90:ae:81:2b:a4:0c:ef:7e:0a:87:4b:07:cd:57:
                    db:77:6d:66:cc:6d:03:f2:ed:5e:99:6e:34:5b:6e:
                    21:f9:28:f8:86:e0:d1:a5:88:be:40:9f:59:4a:61:
                    2c:c5:c8:be:97:fa:1d:6b:93:ab:66:1a:ae:97:ac:
                    3b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8B:63:8D:7E:F9:9D:0B:71:91:B1:7D:3C:7C:B2:DE:C0:CC:64:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/826a4506-faff-3fc0-834f-c2447661ac44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ec:4c:5a:6a:fc:25:88:d5:e1:ba:1f:2a:d4:3e:c3:69:dc:
         28:38:b5:a4:8d:b8:aa:2e:a3:a2:c8:5b:57:ce:e3:c4:42:4e:
         cd:5a:cd:56:53:04:40:fd:b3:29:6a:5c:18:b6:42:a0:bd:f9:
         c7:0f:97:44:27:2f:19:b4:51:f1:27:0e:6b:5b:2e:21:74:da:
         8e:1c:59:a4:60:04:d7:cc:55:a9:95:ea:a2:9e:84:7d:5c:b7:
         80:2b:f2:db:6f:44:40:4b:3a:ac:45:f1:48:a3:9c:77:37:59:
         ee:1b:41:a9:8b:62:63:4b:bf:6a:f7:3b:35:fa:32:4d:82:aa:
         23:19:3f:62:d8:d9:8c:69:b8:8d:e0:bc:dc:d0:c5:d6:43:1e:
         18:b9:ec:d5:b5:db:29:50:81:f0:15:15:f0:a4:1e:4a:9b:92:
         5b:51:81:83:24:34:f1:be:e8:74:98:9e:30:e7:1a:36:f4:05:
         8f:58:70:c1:bf:c1:be:f8:82:3b:2d:0c:00:61:04:0c:3c:4f:
         01:a2:58:13:dd:b6:61:fa:c4:31:a6:39:f2:24:92:2f:df:88:
         a0:a6:1c:e8:f2:71:05:f7:82:8a:3c:59:16:9b:0a:3e:4d:1e:
         f9:df:f4:fe:fc:2d:bc:4d:d9:e6:a2:57:58:1d:8f:53:16:62:
         b1:df:0e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:10:27 2025 by rpki-client