Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a793e60d-de96-30fc-9bd7-83167359a55d.roa
File:                     a793e60d-de96-30fc-9bd7-83167359a55d.roa (raw, json)
Hash identifier:          erChyEQ219DpwJOM/5Ev3rcU5vAIu+GYS+HdrO1sUyU=
Subject key identifier:   42:7A:DF:D2:76:88:BA:2A:AB:EA:49:A9:89:22:F5:BA:3E:7A:A4:B9
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584BA0D24FF434161A4863DD5200
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a793e60d-de96-30fc-9bd7-83167359a55d.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     397394
IP address blocks:        65.51.218.0/24 maxlen: 24
                          65.51.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:4f:f4:34:16:1a:48:63:dd:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=cd390ab1-c781-400d-bb65-f5a6c65b8cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:5e:d3:0b:80:15:13:aa:64:c6:3c:a4:88:
                    fa:66:32:a8:18:84:a2:60:a5:9d:86:1e:c7:af:f9:
                    3b:30:3c:3f:7a:03:86:a9:f7:98:4f:c9:07:b1:65:
                    93:93:0d:b0:d6:0e:39:0b:3c:34:e4:64:d0:5a:f5:
                    b0:2c:29:35:e1:81:8e:75:17:39:fb:ce:ae:98:1e:
                    62:93:5a:a6:53:02:94:b7:02:5f:73:8f:3c:2e:76:
                    c8:cd:83:59:db:75:a7:a2:a4:d7:17:56:2e:15:b7:
                    4c:2f:80:c4:f6:02:ec:13:6a:89:ef:67:6a:42:52:
                    2b:18:1c:42:1d:b2:9c:c6:2d:f7:02:86:ec:20:e1:
                    cb:78:2f:56:f8:a2:57:2a:0f:ad:11:ae:fd:0a:ee:
                    51:ad:2b:7b:c5:62:ce:a2:71:43:d4:f4:29:8d:7a:
                    cd:99:d3:b7:95:40:c2:6b:a1:34:1b:9b:5d:d5:34:
                    4a:95:e7:a6:2b:1d:87:83:d8:f9:49:15:36:71:74:
                    16:27:d7:19:49:45:c3:15:e8:22:04:09:f4:a6:a3:
                    91:bc:a5:d3:32:f7:61:9c:7f:f5:a9:e2:a8:90:61:
                    12:07:77:67:46:e8:70:34:a4:eb:e5:04:0a:32:6d:
                    72:99:33:be:06:ed:5d:fa:2b:24:bc:48:f8:80:d4:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7A:DF:D2:76:88:BA:2A:AB:EA:49:A9:89:22:F5:BA:3E:7A:A4:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a793e60d-de96-30fc-9bd7-83167359a55d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:7e:2c:82:e1:ae:80:c9:42:3c:42:7d:7d:46:9e:a0:9b:f3:
         85:ea:26:4c:2f:c9:62:95:a9:2a:1b:8f:03:50:f7:1b:b0:46:
         dd:b0:01:4f:20:12:ef:bf:3e:c7:5e:b4:18:62:c8:a3:7f:3c:
         82:15:d1:a0:fc:5d:eb:02:d4:c2:94:8a:15:ac:d0:a6:0f:34:
         c9:85:e7:5d:65:c2:7d:72:9c:04:14:ff:4e:cb:5b:2a:64:55:
         c4:40:44:ba:bb:18:3c:ae:39:9b:56:f3:59:0a:c5:71:c0:97:
         c6:15:a8:f0:8f:f5:3e:30:af:20:7c:d3:97:9a:4d:48:eb:5a:
         49:a4:09:d1:89:bc:e8:5e:1d:38:76:f9:94:4d:47:d7:58:33:
         74:18:4b:7c:ea:05:ba:a5:b9:58:5c:c6:d0:c1:20:1c:ed:51:
         55:a9:00:3d:5c:6a:fa:2a:5f:01:c3:91:e6:7c:94:27:1b:1c:
         29:af:cc:76:86:14:48:6c:e7:c1:c7:7a:08:9b:62:0c:f6:95:
         10:37:2a:46:53:69:a1:ed:03:2f:bd:5e:a7:da:31:db:8c:c0:
         44:f6:4e:25:43:9c:a3:45:18:c0:aa:f1:02:e7:2f:89:cf:86:
         0a:da:b2:13:7e:28:8a:fd:c1:4f:06:52:c2:ca:78:fd:2c:da:
         2d:8b:c4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:37:35 2025 by rpki-client