Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/e7c0ee8c-bc10-383e-8634-2618850db8f9.roa
File:                     e7c0ee8c-bc10-383e-8634-2618850db8f9.roa (raw, json)
Hash identifier:          NPrbWwVouI7UPQQYabH69mPKV+PfiXTP9sFvACOBDGY=
Subject key identifier:   AA:91:B9:0B:9E:A6:6E:7D:13:55:78:EE:B2:D7:D7:57:1A:4D:72:27
Certificate issuer:       /CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
Certificate serial:       010D0C9F4328584A5CFB1D67585E7EFCC6AD4720
Authority key identifier: AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/e7c0ee8c-bc10-383e-8634-2618850db8f9.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     14277
IP address blocks:        65.50.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:1d:67:58:5e:7e:fc:c6:ad:47:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=e397374c-1b54-425d-8dcd-7296c0c5108b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9a:c5:82:fb:e0:fc:4a:5d:cb:41:7a:d8:9c:
                    10:a1:8e:fa:91:bc:d5:f9:75:3b:24:36:e5:44:3f:
                    65:a7:b8:07:f4:c8:d6:b1:77:cd:92:ed:58:c2:63:
                    d1:9e:4f:5e:3a:b5:48:72:3d:c5:59:35:af:70:11:
                    48:50:4c:f2:92:ed:e6:cb:2e:83:aa:62:33:43:93:
                    58:f2:6c:0e:fd:c3:3a:9b:23:a5:ba:c4:17:79:1c:
                    6c:cf:f2:d0:63:3e:a3:fa:31:2e:1a:c5:2a:95:3a:
                    37:20:0c:50:13:07:13:c5:81:ee:3c:1c:62:2c:2c:
                    28:46:64:aa:06:e5:d6:57:e1:ed:3d:30:7d:1f:75:
                    ed:ac:50:dd:81:c0:70:05:49:56:23:a5:59:c0:43:
                    8b:57:5a:5b:6e:69:5a:05:95:4a:60:78:50:f8:cb:
                    9e:eb:48:b9:a5:c2:2f:4e:78:72:94:d1:23:74:fb:
                    46:58:38:21:95:56:13:87:92:59:1c:ac:93:dd:0d:
                    a1:3a:d9:3c:f2:66:24:51:e7:54:08:e4:50:da:c1:
                    e1:8a:7a:36:26:06:87:20:39:2e:0c:82:2e:16:6a:
                    13:c1:66:b3:1d:9a:09:4f:22:eb:d7:63:08:c5:6a:
                    8e:45:60:7a:bd:f5:81:57:79:7f:61:8e:29:b9:62:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:91:B9:0B:9E:A6:6E:7D:13:55:78:EE:B2:D7:D7:57:1A:4D:72:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/e7c0ee8c-bc10-383e-8634-2618850db8f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl

            X509v3 Authority Key Identifier:
                keyid:AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.50.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:d0:f0:05:b9:9b:f7:87:91:9a:b1:6a:39:c3:a0:4e:28:d9:
         c5:65:f1:df:7f:cd:a8:3b:27:fb:04:52:73:71:4e:37:49:d6:
         e4:46:42:f2:64:0d:26:f0:b0:02:70:2b:04:b7:3a:d0:d2:ca:
         d5:b1:b1:b3:61:6f:81:70:e3:8b:e7:15:de:04:ba:ac:3f:9b:
         24:b2:c8:5a:a1:69:64:41:21:b1:5e:b1:7a:90:a4:32:45:07:
         27:78:ca:1b:45:06:2b:58:c8:d3:08:fb:20:22:c6:cf:b3:fa:
         27:74:43:ac:34:69:94:dc:38:6a:e5:e6:6c:03:81:45:26:71:
         a5:8c:09:6a:02:bd:65:a9:46:09:f9:f8:5f:76:19:fa:d0:9b:
         6a:22:45:4a:6a:53:de:88:f8:34:76:5a:8c:b6:15:c3:cc:3b:
         c2:53:23:f5:64:d8:bc:4c:d9:a1:8a:24:26:04:ae:37:c7:1a:
         53:ca:5b:d2:d3:6e:74:8d:48:b6:36:88:46:76:7b:9b:11:47:
         fc:16:c9:bf:6b:d3:79:28:9f:64:51:5b:9a:6d:55:45:f2:75:
         99:1a:cf:95:39:89:ac:0f:bb:1a:f7:82:51:80:61:7c:8f:f0:
         ac:18:2c:4f:0b:b8:e6:7d:13:12:95:0c:87:1d:fc:ce:44:fa:
         77:06:27:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:27 2025 by rpki-client