Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa
File:                     a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa (raw, json)
Hash identifier:          M+zrpjFLGo/wiToZ1Ltp9h05j3cyeFvKhIL1e0rskHQ=
Subject key identifier:   FE:73:EB:08:2A:EC:F9:65:B0:08:A9:31:55:6A:8C:1D:14:4C:B1:A3
Certificate issuer:       /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
Certificate serial:       010D0C9F4328584A612B0DFFA0AE6BFACEDCA000
Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     15108
IP address blocks:        192.160.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:0d:ff:a0:ae:6b:fa:ce:dc:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=7c616ee3-4309-40b6-bf95-7b45f53cbdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:77:4b:03:d7:01:56:d8:02:66:d2:cb:08:
                    95:13:12:3c:b3:33:6d:d0:0d:36:88:c8:da:03:34:
                    16:4f:69:d3:b1:13:b1:23:33:92:3d:7f:73:e6:95:
                    b8:b1:2c:37:3a:19:ab:bf:28:75:08:af:89:a0:c9:
                    f7:d5:4d:3d:76:c6:ab:fa:6e:8e:fa:8c:a0:f8:3e:
                    20:75:ff:ab:87:d5:39:d7:19:3b:82:1c:98:05:17:
                    a3:25:2c:3f:6d:04:52:c2:c2:77:86:9b:a2:24:6d:
                    17:14:de:29:a8:d6:70:61:f4:2a:2e:7b:4b:02:4a:
                    29:26:44:e4:d9:ee:ea:d9:6e:f5:bb:f0:28:97:5f:
                    3c:57:6c:1f:4a:5d:a5:55:53:d9:fb:1d:a3:c4:5a:
                    ef:e6:47:5d:58:fd:1f:0c:24:ec:fc:1c:f7:f8:24:
                    6c:0b:bb:5b:79:73:75:14:ca:a5:8d:d9:d9:d0:48:
                    69:65:e1:0a:e4:3d:c0:d7:3b:ce:29:34:b9:b2:21:
                    d5:90:c7:1e:1d:12:14:5d:fe:e7:fc:84:7f:14:92:
                    2d:c3:33:6e:3c:8e:f8:4a:53:bf:97:64:7a:bf:11:
                    a2:0d:4e:18:89:9e:d6:b4:06:bf:5e:17:4b:e7:19:
                    1e:70:68:db:93:cf:43:72:01:38:18:68:d2:4a:2a:
                    65:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:73:EB:08:2A:EC:F9:65:B0:08:A9:31:55:6A:8C:1D:14:4C:B1:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:39:51:6c:a6:c3:c8:40:80:0a:1a:4d:fc:79:77:ed:f0:fc:
         7e:f8:31:ac:2a:19:13:95:80:8b:72:70:49:bb:d3:5c:32:4b:
         72:8d:b3:70:b9:21:b0:69:1a:13:c1:a6:6a:ad:17:e1:c1:3d:
         33:52:06:35:7e:79:72:91:7d:cf:90:7e:bd:96:2d:59:1f:fc:
         ce:80:17:fa:db:fb:91:96:89:a5:79:68:42:46:1c:82:88:b8:
         4f:a1:ff:1b:77:ed:ef:80:73:76:1d:ae:34:08:9c:b3:3c:23:
         8f:60:01:9b:93:a9:62:e4:85:a7:0b:2a:02:34:c1:3f:a4:ad:
         e3:4e:94:4c:30:90:9a:6e:1c:1d:a8:a6:43:a5:6e:17:59:25:
         c2:33:26:0d:6f:1b:f2:3b:8a:40:f9:ae:d9:e7:34:54:0d:a4:
         cd:a7:2c:94:5c:cc:e5:92:12:4a:a4:17:08:8c:a9:84:d7:8e:
         f4:19:a8:59:57:d0:de:b9:18:1d:dc:ec:69:bf:99:0c:3a:d3:
         31:8c:84:8c:8e:1e:27:df:ef:5b:11:f8:49:56:47:a3:1a:2f:
         04:fb:a3:9d:94:d1:5b:6d:f0:d2:84:73:dc:c5:02:a9:e3:65:
         3e:c0:a1:85:0c:2b:65:5a:18:9d:6d:2b:40:62:27:5e:f6:de:
         4c:0f:67:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:41 2025 by rpki-client