Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7d4a0730-5290-3e65-b079-91e1ebf53658.roa
File:                     7d4a0730-5290-3e65-b079-91e1ebf53658.roa (raw, json)
Hash identifier:          BQK8RmWTymdIpNEr00UUxc1Spj7svYr9Zz3rNh+JyV0=
Subject key identifier:   94:29:3A:4B:C7:71:FB:CF:35:58:8E:42:F8:AA:A3:9D:34:6C:97:2D
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285849CE9A5675207EEF629B90A820
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7d4a0730-5290-3e65-b079-91e1ebf53658.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     46152
IP address blocks:        65.51.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:56:75:20:7e:ef:62:9b:90:a8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=235e168e-8637-4f2e-9173-3dc1c7e0779a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:3e:18:20:34:e3:97:b6:06:7a:2d:e0:06:
                    84:d8:3c:2e:74:a8:2a:36:ab:99:15:02:0f:6c:3b:
                    86:3b:af:ea:b7:c3:fb:d9:3c:9f:73:b9:27:58:8a:
                    fd:1c:2f:da:d0:d9:15:35:b6:c6:97:a9:07:4b:06:
                    a7:20:7d:94:b3:09:3f:df:76:cc:79:63:a1:40:0b:
                    d9:ff:49:10:0e:61:2b:e6:f9:6b:3d:13:8f:bc:fd:
                    e3:87:5e:95:94:ab:f9:31:89:c2:8b:09:1d:d2:82:
                    f9:60:4b:bd:b7:6e:2d:36:c7:4e:eb:5f:ef:c0:33:
                    5d:fc:5f:c9:69:84:8c:ea:72:81:d9:c3:39:3d:a9:
                    26:4c:1a:0e:e3:93:8a:0e:a3:0c:20:06:6e:d9:99:
                    be:17:98:d1:0d:ea:bf:f3:67:0e:65:7a:0c:ef:1f:
                    e2:93:97:e3:de:7e:12:a2:33:a1:83:93:b1:d5:50:
                    7a:e9:c7:06:a6:c4:bf:98:ce:ec:05:18:d6:1a:fe:
                    8e:11:80:d7:47:f2:43:88:b0:63:19:f8:02:b9:36:
                    9a:b0:61:70:37:46:6c:84:a1:f5:98:41:9d:42:eb:
                    87:1a:b0:21:a7:be:d8:ce:74:70:06:99:e4:a6:be:
                    e3:b5:27:fb:43:4e:e4:89:42:b0:ba:2f:0c:d5:ff:
                    d8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:29:3A:4B:C7:71:FB:CF:35:58:8E:42:F8:AA:A3:9D:34:6C:97:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7d4a0730-5290-3e65-b079-91e1ebf53658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:fc:cf:03:af:c3:59:7c:ba:71:56:a4:9e:84:f6:a1:21:50:
         1e:74:b5:55:8b:81:d1:a1:a3:40:93:0c:40:9d:da:92:20:3a:
         2e:ab:4b:07:aa:cb:d5:cd:76:d3:c9:1f:7d:cb:e2:a1:b7:cb:
         88:43:ef:13:dc:08:c1:fd:21:29:00:ee:92:e8:0e:10:04:2d:
         00:ef:e7:8c:d2:06:fb:49:2f:4d:2d:f4:b2:6a:f8:31:05:13:
         2e:be:28:31:98:b0:8b:48:dc:1e:08:e3:52:28:b2:8f:db:45:
         a1:42:7c:73:cf:96:d3:fb:7e:25:6c:5c:83:40:81:15:6d:90:
         41:88:2a:cb:ca:72:6c:ef:ba:cc:23:6b:dd:cd:aa:b6:96:2f:
         e7:89:a0:34:e6:ab:93:67:a3:64:14:81:d7:3c:a1:25:62:9d:
         e5:b4:54:6a:0c:7d:64:2a:18:4d:7f:13:7e:d3:99:56:10:1f:
         0b:12:02:c7:79:b8:c9:12:86:fe:94:7d:e5:41:07:b9:eb:92:
         15:a2:a1:5e:22:8a:39:7f:59:07:c1:f2:28:e4:46:3a:c9:bb:
         13:4b:8a:75:29:f6:8a:3a:a7:68:e9:1b:53:31:af:78:89:85:
         c5:33:07:cb:4a:f5:4f:c7:83:a5:04:2f:1d:81:cc:d6:55:d8:
         37:7c:fc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:04:43 2025 by rpki-client