Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa
File:                     cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa (raw, json)
Hash identifier:          2rxejtSNkvqwQ61HEoDGf+lJlBG0qW8z+bMxWKlRA0k=
Subject key identifier:   26:2E:8B:3F:06:CB:FC:8F:E5:80:C0:FC:17:F6:B6:56:55:37:0E:AC
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584ABBE62AC1CABBCF45591C1C20
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     36105
IP address blocks:        65.65.128.0/20 maxlen: 24
                          65.65.152.0/21 maxlen: 24
                          75.41.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:2a:c1:ca:bb:cf:45:59:1c:1c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=2e1d8a11-c6bc-460d-adf5-e91d1308d007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:52:53:31:b0:12:48:f2:8e:01:aa:3f:f5:
                    60:ac:ee:ff:31:f4:34:0a:a2:ab:f5:1f:b1:a8:3f:
                    ff:00:a4:06:52:73:be:3e:2f:3a:94:aa:1b:3f:8a:
                    60:17:1e:54:df:d4:ba:6a:16:10:34:03:1f:cf:7a:
                    0e:d0:fa:bb:53:e2:72:55:27:33:5d:6e:42:43:af:
                    02:e1:8c:0d:57:0b:69:52:60:87:85:84:2c:d5:2d:
                    d2:6a:a3:5c:71:3d:4e:91:84:20:dd:0d:ab:f3:6d:
                    b5:8b:a3:77:bf:a7:5e:87:4d:13:b5:0a:27:f7:56:
                    20:b8:39:9e:fb:4c:ff:25:d0:b5:a1:03:1c:7a:cc:
                    01:40:e7:9f:5d:6f:4c:f7:ae:e3:a9:0c:f6:0f:15:
                    4b:a6:e3:00:1f:34:4c:6b:ce:82:fb:e3:5f:18:5e:
                    d1:62:b5:bb:f4:45:5c:e4:53:49:59:cc:54:95:01:
                    d6:74:77:dc:05:e6:02:66:ba:6a:ab:9c:bc:ec:71:
                    fd:9c:3a:dd:48:12:a3:89:39:95:6f:fa:de:3c:dc:
                    41:c3:67:cd:ae:58:60:f3:4e:2d:9b:c3:c8:4a:68:
                    fe:0b:8b:99:b0:e0:65:77:79:f9:46:5b:ff:6b:62:
                    d5:bd:03:70:2c:c1:a4:cf:7a:2d:21:12:6e:db:78:
                    98:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2E:8B:3F:06:CB:FC:8F:E5:80:C0:FC:17:F6:B6:56:55:37:0E:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/cb97bddf-6000-3ab1-a58b-ac8c3c2a4c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.65.128.0/20
                  65.65.152.0/21
                  75.41.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b3:46:36:a4:ff:58:89:44:c5:1e:6e:c5:b7:21:46:ce:42:
         25:7d:dd:1b:37:3a:25:75:3c:84:9d:f4:85:90:35:6c:95:00:
         9e:14:7f:2c:2b:46:e1:80:fc:db:c5:2e:8b:45:ab:19:cc:42:
         f9:78:3f:9a:4a:ec:87:7c:96:78:45:5d:d6:b2:c3:be:75:76:
         15:4f:d1:a6:77:ea:9b:2a:bb:f9:62:7d:7a:d7:12:a5:13:c3:
         46:ef:9e:a9:ab:3a:dc:13:7d:63:55:f0:fb:cd:ab:4c:02:49:
         b0:d5:19:fa:44:34:e0:74:5b:a2:0d:fe:cf:60:1e:5f:2d:ac:
         78:5e:1a:9d:9a:af:76:f2:57:65:eb:6a:cc:62:af:62:0f:bb:
         a2:5f:a1:2f:14:e5:76:d9:ff:26:92:87:12:d1:ee:d1:d4:e5:
         3e:ab:44:44:92:05:56:c6:90:7f:6c:e0:8d:2c:a4:d7:19:65:
         3e:ec:92:6d:c3:14:31:09:d9:55:16:13:ad:18:00:41:b5:52:
         37:e7:d4:2c:81:37:01:8c:d8:fb:c5:4d:05:a5:c1:8d:2a:e9:
         15:26:91:b2:ee:c1:fa:5f:40:ce:29:74:10:25:be:5e:c1:e1:
         da:24:df:57:f3:c1:40:0f:1a:c2:cf:d3:37:67:d7:8c:c3:18:
         da:0d:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:19:02 2025 by rpki-client