Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa
File:                     d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa (raw, json)
Hash identifier:          7ycQR6uyQogUM38QGH7OLUvklzt4idkYajcGHlc0CF0=
Subject key identifier:   56:83:9B:55:D6:BF:3A:0E:20:92:1A:15:46:8F:E3:EB:95:95:8B:27
Certificate issuer:       /CN=53ff129b-845f-449d-8e32-2b24ecbefea4
Certificate serial:       010D0C9F4328584AB91BB2FEFECCE7D812491100
Authority key identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     8075
IP address blocks:        199.65.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b2:fe:fe:cc:e7:d8:12:49:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ff129b-845f-449d-8e32-2b24ecbefea4
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=97949296-eb72-4973-90e5-204147c7b6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:60:98:38:b0:14:9f:7f:f6:03:b2:44:29:26:
                    69:23:d0:b6:84:a7:fe:3c:1c:66:aa:a5:88:25:23:
                    15:18:d7:01:16:09:f2:3d:a6:3a:57:6b:85:03:44:
                    8a:c6:2d:3a:20:2b:cf:cd:07:69:10:0a:77:a0:3b:
                    99:60:79:f1:49:48:3f:4c:30:28:5a:e4:4d:af:b7:
                    d7:8a:bc:f5:23:7a:14:02:22:31:1a:40:6b:a5:81:
                    af:75:83:b6:cb:b9:b1:9e:f7:92:79:f4:73:af:49:
                    f4:2e:8a:93:0b:64:c2:a8:af:ec:0b:84:03:fc:67:
                    3f:a8:21:80:97:4a:8e:6b:d3:23:28:b0:d9:58:d1:
                    58:2e:5e:86:c5:0f:ca:8f:e1:9e:39:f0:bd:94:d7:
                    b4:17:31:ed:b2:b7:85:6f:fc:62:fe:c0:0f:44:24:
                    e6:4f:ac:40:fa:e4:55:37:53:44:de:3d:16:7e:65:
                    f4:cb:c9:88:25:aa:73:c8:ba:22:fc:48:a2:b6:3e:
                    22:a2:c3:33:bc:ee:00:88:20:5a:ca:d7:66:47:a4:
                    7a:a0:01:15:6d:7d:9b:99:be:72:11:dc:c0:9d:e4:
                    53:61:ec:d1:c6:a7:8e:2e:f6:0d:5d:46:9c:9f:b8:
                    3d:00:41:56:6a:9b:8a:3e:f9:23:4c:d2:e5:3f:80:
                    ba:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:83:9B:55:D6:BF:3A:0E:20:92:1A:15:46:8F:E3:EB:95:95:8B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c1:7c:12:cc:03:4c:37:a6:dc:1b:5f:5d:65:39:aa:08:7a:
         60:b9:3f:cf:e8:66:de:ab:36:39:f6:84:50:32:4b:07:75:b3:
         5b:66:65:07:bd:7e:92:81:f5:c1:8e:4b:93:67:60:f8:45:d8:
         7e:c4:ff:dc:a7:24:ba:6f:26:f5:13:f7:21:5f:5f:6f:56:2a:
         61:c4:a8:40:37:ca:33:af:d5:70:29:1a:e0:09:12:e1:09:37:
         f5:48:9d:a9:c9:c9:d5:3f:9d:5b:ae:12:57:2b:f3:8c:20:b9:
         c5:ca:c9:b8:09:a3:46:ed:80:37:0f:30:04:3c:5a:df:55:56:
         57:15:20:3b:e1:00:bc:d7:32:4f:c7:46:bc:80:cd:51:f7:4f:
         09:39:61:5f:37:77:58:a4:b3:b9:de:a6:e2:b6:f9:23:66:ed:
         34:f2:39:77:c5:9f:c5:1c:17:1a:66:ca:b3:1e:3c:db:80:10:
         e2:7b:b9:39:0e:13:fd:c2:94:73:b0:d5:af:b8:2d:a2:63:8e:
         ef:44:d0:0d:76:f6:f1:3b:31:0f:d7:5c:2e:9f:d7:f4:ba:76:
         dd:11:11:36:32:eb:2a:be:1d:9e:c2:b6:f9:a0:a4:33:57:b7:
         18:21:c9:50:82:43:6b:21:e2:55:40:73:a7:70:01:ce:57:21:
         69:e4:90:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:28 2025 by rpki-client