Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa
File:                     cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa (raw, json)
Hash identifier:          XtH/V9tGkUEpMjVEp05wNd4P4tlv2Q+2vGJtlhLH0p0=
Subject key identifier:   E7:6D:5F:29:45:16:D8:A5:7F:1B:33:A8:B0:5D:3C:CC:B0:26:E7:4D
Certificate issuer:       /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Certificate serial:       010D0C9F4328584A82AB52C9D64DEA5E056B0DA0
Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     26666
IP address blocks:        162.220.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:52:c9:d6:4d:ea:5e:05:6b:0d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=0c2ef0b8-0b67-40aa-aa38-6a25749fcb62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:2d:d8:90:46:d8:90:f9:73:33:a5:80:07:
                    74:4f:3b:09:bb:47:33:26:f3:94:d4:62:72:82:4f:
                    90:d4:89:b4:83:64:2a:f0:0d:b0:43:d9:99:0c:51:
                    fa:10:55:7d:7b:11:0f:c5:d6:4d:40:16:18:2e:f1:
                    64:c8:a5:12:ec:4b:a3:1a:41:3f:39:4d:fa:e8:30:
                    ed:61:d6:ea:31:80:67:0c:d9:85:82:0b:4b:5d:84:
                    73:61:af:19:06:73:81:40:e0:51:f9:1d:b5:2c:ff:
                    56:70:91:84:29:33:d8:ac:76:25:08:52:ac:e0:89:
                    08:84:4f:e7:2b:ca:d8:69:7e:49:77:6b:45:27:90:
                    e6:c6:dd:1e:0f:49:3f:46:e8:a6:7c:e2:d5:f5:cd:
                    e7:b8:3e:3e:46:6c:6e:a8:fe:4e:bb:bf:2c:28:7b:
                    3b:f4:4f:c3:3d:d7:0c:32:78:ff:a2:4f:fa:e4:41:
                    be:69:b7:da:e5:f7:41:a2:34:fd:8c:62:83:5e:40:
                    6e:43:5e:d0:69:52:11:df:30:e8:98:2d:d9:95:3d:
                    40:59:ba:cb:42:ef:38:cd:b2:a2:e9:33:21:5c:9e:
                    55:f0:18:27:5d:52:53:43:45:4d:88:a4:09:73:51:
                    fa:f0:ee:a4:e9:ff:ea:af:c7:9a:2b:ee:be:06:e8:
                    fe:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6D:5F:29:45:16:D8:A5:7F:1B:33:A8:B0:5D:3C:CC:B0:26:E7:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl

            X509v3 Authority Key Identifier:
                keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:f9:e3:9e:35:e6:85:06:d5:19:0d:88:70:9c:66:8d:03:78:
         14:d9:e5:08:58:92:19:78:d0:f4:6c:31:f6:98:1c:f6:e4:7f:
         ff:c6:57:2e:61:d1:c6:dc:5e:b1:8a:16:a0:9b:03:43:fc:58:
         bc:93:f1:1d:6a:4e:bb:c2:c5:d9:c7:70:c4:43:9c:df:98:6c:
         2d:89:c6:d8:6a:2f:bb:d2:cc:d1:31:b4:f8:ed:a9:73:0a:73:
         5a:b6:18:71:00:54:22:a3:46:5b:9d:f4:0b:80:5e:b4:d0:d2:
         1a:20:7f:34:97:d0:41:5c:49:53:25:56:99:2b:a6:3a:c7:7a:
         46:2d:cb:b2:a1:23:13:60:d6:66:f6:ff:d4:a1:a3:6f:e1:4f:
         0b:23:fe:ba:42:5e:2c:34:2b:64:ac:71:81:72:a1:03:1c:d0:
         fe:c7:28:59:84:ae:6e:c0:05:43:8c:2d:89:d9:dd:e8:be:12:
         e0:32:7a:e6:9b:41:e9:46:4e:d6:f4:b4:59:81:af:2e:0f:a2:
         70:d9:9e:22:b5:99:71:86:52:c4:a8:30:c7:77:ca:56:23:4f:
         ad:45:87:a6:1d:cc:c6:93:af:8a:68:89:b2:92:fc:00:06:f7:
         e5:47:a9:ed:ed:bd:16:93:63:ca:51:d9:41:f7:05:fe:64:4d:
         97:82:0c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:17:56 2025 by rpki-client