Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/29762275-50d9-3f12-8455-f9652b2a1bc2.roa
File:                     29762275-50d9-3f12-8455-f9652b2a1bc2.roa (raw, json)
Hash identifier:          DOqDs391UfwuXhPKXOEUuEQS2jFO9bD30qGxjhbkv1g=
Subject key identifier:   14:A0:31:86:E2:8D:8A:86:81:80:9F:CE:BA:29:11:3B:18:DF:CD:96
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA160EF332D6261528EAA48C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/29762275-50d9-3f12-8455-f9652b2a1bc2.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        65.185.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:ef:33:2d:62:61:52:8e:aa:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=7742c673-bb4b-4ecd-b8ae-46cb4a3c63ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:46:e5:87:00:cd:b7:c5:39:d6:1b:78:1e:83:
                    6a:8a:e3:37:18:07:67:6e:c4:2e:51:44:d9:32:3f:
                    47:a8:02:5a:85:25:e4:7c:d8:62:e9:f6:af:11:db:
                    6c:3e:d4:ff:de:04:87:1f:c1:26:4a:f7:72:f0:8d:
                    b3:45:13:14:9a:f4:6f:ae:cc:4c:a7:60:8d:8c:2b:
                    da:df:76:02:f5:08:ee:37:fe:c1:15:6e:da:6c:b0:
                    1a:bc:69:3e:92:4d:3f:6a:58:62:ed:9f:d9:6f:f5:
                    d7:52:67:3b:ff:3d:e6:8e:5a:05:4f:d9:51:41:da:
                    68:61:bb:f1:3e:e3:93:4e:d0:92:01:eb:f1:ba:1f:
                    57:2c:1f:2a:b8:ec:74:be:95:3d:21:0e:cd:6d:c8:
                    95:dd:f8:23:53:ed:d2:8a:63:08:73:07:6d:80:aa:
                    35:82:17:06:93:8b:3d:c5:86:d9:d9:30:aa:90:4c:
                    c7:36:cd:8d:f9:41:bf:9e:f3:8b:1d:54:d0:3e:c1:
                    ad:50:1d:aa:0e:19:bf:db:e3:6f:4d:b4:d6:97:e4:
                    14:9f:61:69:9b:89:03:a6:88:bc:c3:9b:de:f4:e8:
                    76:c7:d3:43:96:dd:e1:a0:4b:7e:e6:8a:79:f9:05:
                    2e:4c:a0:95:15:ac:f1:9a:09:ae:49:71:9f:b9:a7:
                    85:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A0:31:86:E2:8D:8A:86:81:80:9F:CE:BA:29:11:3B:18:DF:CD:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/29762275-50d9-3f12-8455-f9652b2a1bc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.185.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2d:b4:b5:6a:b6:f2:f1:6e:54:2b:91:85:4d:d3:ff:e8:4c:
         69:76:dc:fd:a7:27:7e:de:e0:05:fe:8e:78:d4:7b:79:02:3f:
         d0:0d:a1:3b:fa:e8:b9:2b:2d:66:31:69:fd:7e:e0:2a:b5:64:
         5c:c4:06:bf:8b:06:ac:0c:df:77:5a:8a:13:1e:2a:ed:ed:a8:
         3b:dd:c5:1b:8a:3c:7b:39:38:19:14:3c:da:b7:7f:1f:fa:cf:
         7c:ed:61:23:fb:e5:48:c6:64:96:13:55:b0:35:db:14:ba:42:
         c9:5b:53:6d:ad:f4:1c:b9:f1:a1:9a:48:dc:78:47:60:9f:b7:
         64:46:9f:4d:d0:05:f9:33:f4:e6:f3:12:1e:ed:8b:53:d6:d8:
         25:fc:95:a4:67:aa:1a:b9:83:22:c3:08:94:1b:2f:94:ff:97:
         13:71:3a:de:04:5d:d2:4c:96:dd:f4:22:20:b8:63:83:a6:3d:
         a4:84:c9:b1:54:b4:f8:5e:64:33:cf:55:a5:48:7e:e0:74:de:
         e0:5e:41:07:62:8a:11:bf:05:b6:21:ca:dc:49:72:c8:ed:ee:
         4c:6f:d7:7d:6f:ee:f7:fd:1a:4f:54:68:77:36:99:b6:bc:a7:
         23:fe:fb:ed:df:2e:be:96:66:b5:94:24:09:3d:a3:f5:c2:53:
         d6:39:9a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:13:07 2025 by rpki-client