Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/280c97c7-56b8-3514-9a4a-9008c60ea148.roa
File:                     280c97c7-56b8-3514-9a4a-9008c60ea148.roa (raw, json)
Hash identifier:          D+wHriNuZcnEaLhXqlWdgn5knH2vhOPGfxtdA752AFo=
Subject key identifier:   1E:04:7E:B6:9D:67:B1:D1:96:EE:28:5D:04:30:09:1C:EA:5D:5A:59
Certificate issuer:       /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
Certificate serial:       010D0C9F4328584A9D30EB339E0669BA24323200
Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/280c97c7-56b8-3514-9a4a-9008c60ea148.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        165.1.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:eb:33:9e:06:69:ba:24:32:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=48ad20e5-3ac2-4ed6-bb84-06a21c1c89e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:96:39:ae:c9:15:b6:58:c0:2e:17:a7:36:
                    ef:18:e6:b9:72:69:00:19:79:dd:b3:ec:3f:de:3e:
                    47:12:56:72:3c:6d:12:ab:a8:64:74:56:60:fb:cf:
                    ce:43:1b:48:c3:93:67:3d:02:1c:1f:af:f7:35:ae:
                    0e:ed:ee:05:d4:32:d0:08:fc:ff:b3:5a:2d:cf:12:
                    90:21:a2:18:76:10:08:a0:b6:0b:8c:d8:d3:6b:c9:
                    a2:e0:64:11:36:bc:15:56:7e:85:0e:30:bf:4d:cf:
                    5f:b3:85:5f:71:00:ff:e4:b3:9f:15:93:eb:58:5b:
                    04:13:48:c1:a0:a9:aa:10:72:52:c8:ed:2e:43:c0:
                    75:67:f0:4f:24:b1:da:2e:04:1b:86:de:9a:80:8b:
                    2d:06:86:3f:1f:1e:20:51:82:f6:0a:21:40:0d:66:
                    07:09:86:d8:3a:bb:c5:5f:21:37:19:c8:0a:7e:2e:
                    ac:43:51:da:71:4a:e1:f1:f8:80:60:1c:51:8a:5b:
                    d2:89:46:2b:ef:c9:9d:fa:f7:1c:c0:04:e6:2c:1c:
                    d5:12:44:fc:37:63:c0:3f:5a:e7:7e:4c:17:51:45:
                    7c:de:1f:89:76:8d:77:99:16:89:25:20:2d:09:f7:
                    50:d7:c2:73:04:89:e3:85:9f:45:14:4b:f5:da:ae:
                    e5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:04:7E:B6:9D:67:B1:D1:96:EE:28:5D:04:30:09:1C:EA:5D:5A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/280c97c7-56b8-3514-9a4a-9008c60ea148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl

            X509v3 Authority Key Identifier:
                keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.1.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:25:c7:58:04:67:f2:82:38:5e:67:e4:a9:12:a3:4d:75:e0:
         c3:f5:49:3b:19:a4:c0:f5:9e:39:2f:d5:29:19:ab:63:2a:06:
         a3:69:13:be:4e:59:32:56:99:e5:80:d2:be:e6:9b:9f:36:dc:
         3d:1e:38:06:03:ca:d1:d4:2d:ae:e8:d8:9f:0d:be:2b:6a:69:
         26:16:ac:60:73:2b:08:bb:f9:4f:d9:40:69:46:7d:52:ae:13:
         02:b1:54:e5:4b:59:72:25:28:0b:22:ad:0b:50:92:0f:c8:15:
         52:66:da:cc:be:c7:20:fa:9a:51:24:ef:10:20:e0:2a:dd:3b:
         dc:3d:b1:b3:66:c8:60:52:a4:46:1a:ac:dd:39:19:c6:78:a4:
         eb:51:7d:e7:ce:da:53:39:2f:8d:e2:09:80:05:83:30:87:d0:
         e9:bf:18:ee:09:24:6d:e8:09:be:80:8d:79:95:bc:31:97:33:
         bf:10:77:be:3e:dc:02:7c:88:56:c2:27:d7:1a:f1:d7:6f:ed:
         52:e5:6f:a1:fb:28:45:99:fc:7d:e2:50:9a:ff:f9:95:a9:df:
         0e:17:d9:53:54:c7:44:0e:e4:fe:23:b5:5e:3e:37:44:0b:79:
         02:ad:90:09:40:4f:d3:ac:3d:91:a2:a7:08:0b:61:4c:63:56:
         24:ea:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:26:37 2025 by rpki-client