Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa
File:                     2253824c-087b-31f9-b1ec-ba694703e8de.roa (raw, json)
Hash identifier:          EAXP7ABn3+UIxoBKJ1mCLFkGKPku8/9grvskRuQHr5I=
Subject key identifier:   9E:8F:17:9B:31:F2:D7:44:35:DD:81:21:C0:06:ED:67:F8:61:66:34
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584AB220CE220A7B41C92447BD00
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     11650
IP address blocks:        65.255.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:ce:22:0a:7b:41:c9:24:47:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=5d9c0389-9f45-4270-a0ef-d8caa1d508fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:70:6f:63:94:ba:2e:d1:fc:b8:f6:27:3e:
                    b5:85:94:99:2e:11:c9:30:39:32:4c:0b:69:78:22:
                    15:ca:c0:3f:32:03:67:ed:1a:3e:ce:c3:bb:87:6a:
                    ae:f7:2a:5b:2b:e6:5e:0e:a4:1f:5c:63:27:62:67:
                    3a:fa:b7:36:3f:5a:ae:54:97:3c:48:ec:e4:e9:77:
                    f5:9a:55:e7:15:82:c9:ee:fa:67:e5:8b:12:12:4f:
                    cf:a1:71:c2:5a:e6:36:3d:98:5c:e7:d5:67:04:ab:
                    81:f0:92:d8:58:5b:f7:f0:26:e5:29:18:af:c9:e3:
                    8e:2e:be:03:36:32:8a:02:b8:95:1b:af:ce:36:f5:
                    a9:1d:41:cd:f7:eb:90:76:0e:c5:80:7c:96:b7:1a:
                    d3:0b:f2:1f:44:41:50:5d:b8:0b:46:f1:0a:81:9e:
                    68:7b:c0:37:28:aa:94:8e:d7:a5:62:76:23:7b:e8:
                    9b:54:94:cf:72:c4:7f:45:5e:ec:e4:40:af:6e:8f:
                    71:90:37:b0:15:02:47:d8:c0:aa:6f:c0:7d:40:73:
                    25:88:aa:e6:e6:88:b5:6c:15:ca:c0:2c:06:23:8f:
                    68:0c:c6:98:39:e5:42:59:73:54:10:b8:92:7c:80:
                    4b:fc:fa:02:1a:b6:dd:f0:f7:0a:02:2b:73:3c:c2:
                    c3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8F:17:9B:31:F2:D7:44:35:DD:81:21:C0:06:ED:67:F8:61:66:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.255.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:5a:16:9a:0e:de:da:28:04:0d:bc:f6:be:90:c4:6e:60:0d:
         f4:ff:c6:7b:52:5f:e6:6b:c6:20:82:59:70:cf:c0:b5:91:44:
         be:77:fe:13:93:cf:07:1c:68:73:99:bd:8d:2f:01:05:7c:f9:
         df:c1:08:e9:07:12:96:50:61:f8:c7:e0:2b:3b:31:66:33:6b:
         5e:3d:d4:41:4d:9d:7d:b6:92:c6:fb:27:3b:84:7e:8d:b9:7e:
         f1:2a:c2:63:25:6c:e8:c3:ef:04:43:1c:d1:f7:5d:95:80:8a:
         29:a8:79:01:76:aa:a7:b2:24:f0:6f:94:19:19:b5:81:22:e2:
         9f:94:ba:35:89:de:0d:6b:96:79:9c:21:d2:a5:68:84:4d:4b:
         8f:0d:7c:aa:07:33:da:bb:28:dd:a3:f4:8f:e1:a3:5f:8d:c2:
         5f:13:fd:ee:56:eb:bb:2a:e2:86:08:66:22:74:75:2b:f2:d8:
         02:05:9d:6e:ee:2c:73:c2:71:32:fd:af:ec:66:9a:b5:cf:e8:
         06:b5:f7:0f:74:55:ec:a3:b0:c2:8c:b6:fe:37:91:fd:6c:f2:
         ed:a7:a9:e3:3e:d4:a6:d8:e1:89:b5:f4:d9:87:cb:ac:cb:0d:
         a1:77:3a:c3:b8:ac:8b:28:60:80:c6:ee:7e:d8:a1:93:fd:66:
         a2:b8:70:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:22:53 2025 by rpki-client