Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ffba404-d2ab-39a7-afab-901b940aa767.roa
File:                     7ffba404-d2ab-39a7-afab-901b940aa767.roa (raw, json)
Hash identifier:          DvAU1v1OhXNgLBgVr7QxEFGIEmG+4WqSkV6TOWq9UGs=
Subject key identifier:   85:DB:B9:DC:22:7D:A9:A5:F1:62:FF:87:F5:FC:22:65:87:97:CC:7B
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584AB4EB78B8D870A21B7CA989C0
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ffba404-d2ab-39a7-afab-901b940aa767.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     8560
IP address blocks:        162.222.200.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:78:b8:d8:70:a2:1b:7c:a9:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=dddd3da0-1d85-4211-89b8-a2189091eb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c6:e6:54:e0:0b:d7:4e:a1:cd:d5:62:c5:fd:
                    09:5c:25:9e:b0:a0:31:56:00:fc:45:85:ca:4b:09:
                    dd:30:e1:92:07:f7:af:3b:57:31:c3:17:04:2f:7b:
                    78:d8:c1:e6:55:30:e3:8c:55:1d:e0:29:93:c6:90:
                    d4:24:44:ae:7f:3d:5d:84:3f:e6:a2:b4:d2:9a:14:
                    84:8b:49:da:aa:39:2f:4f:2b:40:29:91:a3:3a:bc:
                    0c:66:e4:78:fe:69:9b:28:04:39:09:3f:7e:49:7d:
                    4e:ce:36:2f:f2:b6:49:ef:42:93:47:97:dc:a7:9b:
                    00:35:e7:a7:c7:7e:e0:64:7f:54:f9:ca:c3:8b:3a:
                    fa:8a:5e:8b:6a:c3:b1:e9:27:3e:35:98:29:01:c5:
                    3c:e2:87:fc:a7:bc:c8:4d:26:d5:b1:5d:da:41:a4:
                    de:ea:b1:69:3c:9c:52:99:7b:2e:f4:96:6b:e6:fe:
                    97:00:15:87:89:7d:8d:21:97:92:ed:48:a8:f2:d4:
                    f7:d7:5e:e8:47:9e:a5:b4:3b:ed:8a:f4:a9:73:55:
                    64:8e:97:a8:9f:3f:2e:0c:35:52:92:bf:32:6b:6a:
                    95:76:90:42:7c:f6:28:b1:fc:c1:9f:97:da:dc:ec:
                    c4:5e:4f:9b:d4:f7:a3:5c:01:7d:b5:4f:21:54:e8:
                    a4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DB:B9:DC:22:7D:A9:A5:F1:62:FF:87:F5:FC:22:65:87:97:CC:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ffba404-d2ab-39a7-afab-901b940aa767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:67:6a:79:f1:94:50:c2:3f:b8:92:34:fa:a4:c8:8f:45:7b:
         5a:cc:10:0b:7f:8e:6e:5b:cb:de:3a:cb:65:f6:a4:dc:26:72:
         02:c3:02:6b:c3:79:af:cf:85:55:78:60:05:6f:0d:19:0b:93:
         41:5c:df:bb:d9:37:2d:9e:46:45:61:db:4a:9e:55:38:f5:dc:
         d3:11:7a:2d:31:fb:1a:d5:24:cd:25:82:40:5c:49:08:b0:28:
         2d:4c:1f:db:90:34:2a:d9:15:c8:23:06:61:8a:96:40:27:65:
         97:b8:16:25:1c:68:dd:77:ad:fa:59:32:f2:ef:9f:31:0e:27:
         60:31:63:db:ec:f6:58:9b:d8:58:4f:ae:19:d3:9c:ff:1a:9c:
         e4:e6:16:e7:8d:6f:6d:d7:ab:a4:f1:75:8e:35:89:23:43:94:
         49:4f:3d:c3:f4:7b:3f:d7:25:bf:71:66:86:7f:5f:a9:95:d6:
         63:59:b2:67:41:6d:1e:53:0e:44:36:49:df:ce:72:0d:af:0a:
         c8:c2:b3:ce:ad:b9:7c:4a:a3:42:ff:2d:93:7f:59:19:fe:b2:
         b4:49:79:18:19:11:d2:e1:61:95:3c:51:57:3d:da:a0:36:d2:
         b6:0d:72:6d:f6:e7:ce:e9:53:63:b6:ae:d4:63:2f:1c:39:da:
         28:e3:67:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:22:28 2025 by rpki-client