Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/6d600f3b-f2b8-3e94-ad98-43b4403b553e.roa
File:                     6d600f3b-f2b8-3e94-ad98-43b4403b553e.roa (raw, json)
Hash identifier:          Q+wRRXrOi9mMQa51sAy4mQWnZU4pWAANwTt/kvjETGc=
Subject key identifier:   17:40:DC:2E:31:26:B0:A0:AD:F1:5F:D3:46:34:C3:76:BD:E6:4F:0E
Certificate issuer:       /CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
Certificate serial:       010D0C9F4328584A9900BA33517A13151CDF0E00
Authority key identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/6d600f3b-f2b8-3e94-ad98-43b4403b553e.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     22903
IP address blocks:        165.140.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:ba:33:51:7a:13:15:1c:df:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=5a637d5b-9457-4ebf-8129-51134e9dfb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ae:1f:d9:25:22:02:71:1f:9e:24:bf:8d:c3:
                    0b:40:23:1a:6b:57:2a:be:66:1c:c3:53:8f:5a:81:
                    64:4e:32:b9:36:93:9e:10:f8:d4:41:9f:e6:b3:3e:
                    46:aa:e6:81:5a:44:50:c2:1e:ca:ac:23:e0:8c:70:
                    ce:39:00:2a:ab:2d:72:9c:2f:41:71:d2:0e:41:46:
                    65:cb:82:6d:21:90:c9:1e:df:22:43:72:73:98:91:
                    d8:1e:1b:85:06:7c:8f:67:c8:f0:12:2b:7e:b5:71:
                    ba:9a:08:70:17:97:da:72:0e:05:e0:8f:91:80:8e:
                    1a:32:06:d0:a4:b5:11:d5:69:5b:ba:44:18:2c:d7:
                    d5:17:c7:94:98:6c:1b:3e:d9:47:ae:b9:14:d0:6a:
                    74:fc:8f:f2:f1:7e:e4:2b:e2:40:ab:9a:3a:29:d3:
                    8d:2b:e2:f2:2d:16:ab:7e:6b:20:98:d1:da:e2:a9:
                    c4:72:5f:e6:3e:f4:22:72:7b:55:df:5d:d6:23:9a:
                    45:94:ea:48:d1:c9:cd:e3:b5:36:ef:a5:98:64:b2:
                    a1:cd:85:f8:a2:c6:76:fb:0d:ef:14:e5:22:08:77:
                    73:1b:cd:8c:61:1b:9d:2b:84:5e:1c:5a:17:d0:e7:
                    70:ee:0f:1e:45:d0:b9:b7:73:4f:c3:be:f7:8b:fb:
                    e2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:40:DC:2E:31:26:B0:A0:AD:F1:5F:D3:46:34:C3:76:BD:E6:4F:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/6d600f3b-f2b8-3e94-ad98-43b4403b553e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl

            X509v3 Authority Key Identifier:
                keyid:FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:54:ce:89:6f:43:48:6a:70:56:e3:54:41:51:3d:3e:c0:4b:
         34:ae:2b:16:55:70:82:5a:d9:14:6c:f8:40:f5:7a:c6:4a:87:
         1a:be:81:97:da:9f:ca:4e:b4:ce:05:10:5a:e5:55:ac:cd:9c:
         b8:08:c8:bd:28:9d:f8:5c:6b:ff:05:55:35:f1:d0:61:04:1a:
         ca:73:0a:cc:f3:d1:5e:5e:ab:b0:f6:35:df:77:61:c8:6c:c5:
         ea:87:a0:a9:95:7b:3a:a5:9d:8d:01:ee:11:95:9f:a8:6e:df:
         f0:59:0d:d6:9d:e2:4f:ab:9b:c6:8e:6e:a3:ed:9f:85:91:af:
         77:f4:4d:46:ba:b4:0f:2f:16:e9:a1:e5:27:a3:c9:d0:43:14:
         d0:02:b8:c6:36:34:7b:3b:4e:16:49:05:4d:26:7b:bd:1c:91:
         9d:e2:09:08:34:fe:c8:21:6c:76:f9:24:b2:69:78:62:12:68:
         e3:cf:57:d6:b4:88:73:02:cb:6a:ef:e1:33:85:77:c1:dd:8c:
         72:58:53:8a:58:41:c4:26:75:10:3f:35:d6:a0:bd:a9:58:70:
         51:8b:29:2d:1d:5a:da:cb:e6:69:bd:60:9b:16:2f:40:3c:80:
         8a:f2:14:7c:5c:41:9e:80:2a:26:3a:70:ea:4d:be:af:a2:24:
         bd:ef:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:56:27 2025 by rpki-client