Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/d87c5232-d44c-343e-8280-0d6012bdc024.roa
File:                     d87c5232-d44c-343e-8280-0d6012bdc024.roa (raw, json)
Hash identifier:          EjzHkyotTZCELnnFN5vwh8H7oaMxDhlnw4SWEiqJ8uE=
Subject key identifier:   9B:AA:E9:BB:E8:7E:F1:F9:6E:DE:AC:6A:A5:7F:E8:D6:B5:AD:7C:87
Certificate issuer:       /CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
Certificate serial:       010D0C9F4328584A5CFB1CD58D9B2EAB9A798180
Authority key identifier: AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/d87c5232-d44c-343e-8280-0d6012bdc024.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     14277
IP address blocks:        65.50.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:1c:d5:8d:9b:2e:ab:9a:79:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=460e9bcc-b10a-4dc0-aff3-c89f9be93b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:14:30:e5:96:4a:20:a8:e7:1d:40:de:86:b2:
                    cf:75:e5:e4:28:3c:0c:1a:0d:5c:ac:57:83:9e:e2:
                    31:91:bb:83:4e:96:47:f0:14:ea:49:c1:55:b2:0d:
                    d8:c6:e0:b0:a1:8d:8e:6a:d0:6f:29:7b:97:be:54:
                    ee:06:7d:a3:fb:4d:c5:13:42:b0:1e:61:62:27:d7:
                    d9:c0:64:8e:ef:f7:0c:22:29:88:55:39:06:f6:6a:
                    01:9c:39:c8:3d:d0:30:56:56:6c:b6:8c:3b:40:59:
                    db:19:56:12:8d:3b:46:ee:29:42:6c:21:a5:45:d3:
                    23:54:57:3e:ce:8f:fa:4d:77:a8:42:78:5a:da:f8:
                    7a:1b:01:a7:97:fd:90:97:6d:d0:64:fb:86:fb:3f:
                    c0:7d:63:39:47:8b:56:e4:4d:39:ed:ea:7e:f7:4b:
                    88:7b:1e:ee:67:25:81:fe:01:cc:3b:aa:f2:4c:70:
                    68:2a:9b:02:13:69:42:ed:f6:5a:3d:83:9d:0e:7f:
                    95:ab:55:de:e8:76:1d:14:f9:52:a0:01:1a:6a:db:
                    c5:c8:b5:60:1c:aa:59:5b:de:b9:b4:53:2e:e4:36:
                    c7:70:93:e4:3e:f5:42:15:7f:47:b9:60:77:6e:2e:
                    af:ad:83:b7:d7:dd:85:b4:c3:70:49:41:48:13:37:
                    3e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AA:E9:BB:E8:7E:F1:F9:6E:DE:AC:6A:A5:7F:E8:D6:B5:AD:7C:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/d87c5232-d44c-343e-8280-0d6012bdc024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl

            X509v3 Authority Key Identifier:
                keyid:AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.50.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:23:14:f1:4d:e9:18:01:bf:67:f0:a2:60:ac:aa:af:aa:41:
         f1:92:97:3f:a9:94:c7:8d:69:e6:b3:cb:9f:6c:82:d5:fc:07:
         aa:72:ed:87:85:71:b8:79:29:65:9e:89:0c:5d:76:a1:d1:dc:
         8f:78:42:cb:cb:ec:32:ed:56:b4:fc:1e:17:1f:89:c0:cd:6a:
         fe:79:3e:70:e8:a8:41:e1:8f:c5:67:5b:3c:76:d9:0a:ef:05:
         eb:1b:8a:59:6d:16:a2:3a:d1:ef:b3:47:ea:41:87:43:34:9f:
         a6:9d:d3:23:85:3b:2e:2a:c1:ab:5e:ee:a2:51:b0:52:d5:f7:
         fd:27:8a:82:67:a0:98:3f:33:64:2b:ea:29:dc:fd:0e:54:35:
         4b:e3:35:7d:5e:bd:cb:af:19:f7:fd:f7:6f:ca:23:8d:5d:d8:
         20:fb:27:c8:7f:98:4e:56:52:47:51:1d:b4:03:b4:f6:98:1b:
         88:9c:17:ce:bc:c8:63:26:36:bb:03:a4:e0:c5:6f:80:73:4d:
         d4:54:1f:c7:48:9e:db:ca:35:6f:f3:dd:12:55:eb:0a:4c:29:
         a9:a4:05:5c:e5:0f:ee:85:77:21:cc:d5:22:af:d8:a0:c7:06:
         7f:61:37:78:f5:7f:c2:d3:01:f9:cc:f1:88:50:cc:01:b7:c6:
         21:da:24:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:07:45 2025 by rpki-client