Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa
File:                     c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa (raw, json)
Hash identifier:          3TFI3TFUsuKsK4DgZreI6WiveqWOtlt9cgzvlkGYb4E=
Subject key identifier:   FE:2C:00:45:A2:4A:35:9B:98:B9:58:C7:B6:83:F1:6D:72:4C:63:3D
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584AA42B84849D19E43352FB0A40
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        65.37.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:84:84:9d:19:e4:33:52:fb:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=99869348-79ce-4195-80ac-ddc4f27d97fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:40:16:5d:bb:49:70:35:c4:6a:e2:c1:13:
                    7a:3c:d8:51:7a:69:2f:3f:3f:ac:7f:99:74:51:31:
                    7a:aa:41:e1:97:d2:03:8f:09:9b:92:ce:8a:f0:fb:
                    07:0f:37:98:3b:d5:6a:96:c4:83:64:07:6d:90:ce:
                    71:94:36:2f:aa:38:b5:90:ed:6d:e5:f2:e4:a4:30:
                    a0:3b:88:71:56:5e:54:be:a6:6e:b7:df:a6:5d:f4:
                    16:34:2e:7c:45:db:6d:45:f1:34:b1:48:79:3e:d5:
                    3f:06:11:75:fa:b4:97:00:19:37:27:ab:a1:1d:1a:
                    3a:44:c4:02:d1:e6:1d:66:2c:b4:63:42:c1:20:e2:
                    b0:32:d1:ab:88:65:a0:f2:4e:49:38:30:d0:10:64:
                    94:e0:bc:97:d4:37:0c:06:01:8c:5b:e8:53:0d:7a:
                    6c:2a:83:69:c0:dd:e5:41:3b:57:01:15:9f:6d:a9:
                    80:ea:70:a6:d8:0d:64:fb:42:27:6f:41:11:74:f0:
                    ae:bc:b6:29:1e:fd:26:85:ff:d9:f2:ea:5b:2a:5e:
                    8a:ea:26:f7:59:75:f1:f7:3e:e4:3a:e2:6e:94:5f:
                    a5:c5:5c:87:b3:96:61:cf:23:20:bd:af:3b:36:1f:
                    41:be:ad:c2:9a:36:2f:07:b5:94:ae:9c:a8:84:82:
                    15:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2C:00:45:A2:4A:35:9B:98:B9:58:C7:B6:83:F1:6D:72:4C:63:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.37.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:92:86:41:05:c1:00:49:98:61:fc:34:cf:36:ac:17:ea:e0:
         75:3b:a5:ad:9c:a0:f8:17:b8:61:cc:29:e2:ea:70:c0:bd:bf:
         fd:6e:86:ab:bc:bc:0a:d0:52:52:b6:20:fd:4d:fc:69:e5:b7:
         6f:65:c0:cf:46:08:d0:c6:01:a6:69:4b:f0:15:ac:8e:66:d8:
         65:46:b8:ad:30:21:e6:32:ae:1c:a1:d7:5f:21:b1:b7:8b:7e:
         6e:34:16:28:ec:1d:c9:ae:04:00:c9:13:7e:e5:69:d6:50:be:
         c3:11:3b:55:e5:50:49:80:4f:d0:da:1f:11:70:3d:9c:2c:87:
         85:c4:02:50:a5:89:d5:db:e2:db:30:8e:c3:07:13:8f:8e:55:
         51:ed:d2:5d:24:4f:64:94:32:72:dd:83:ce:09:92:28:3d:7c:
         0c:a5:1d:71:dd:63:2e:8f:d6:c9:2f:76:13:91:d9:48:3d:29:
         5a:bf:ea:ca:dd:64:3a:dc:e6:af:c5:4b:62:2f:54:77:bb:5e:
         80:3e:7b:75:fd:12:33:3c:fa:12:44:02:5b:d4:4b:2b:60:b5:
         8e:b8:fc:bf:7b:fe:fd:26:ff:a8:b6:2a:a3:dc:fe:b0:fc:dc:
         30:50:e7:bb:8b:b3:38:1b:8d:30:74:e1:f9:b9:ef:41:69:f9:
         b6:08:76:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:48:33 2025 by rpki-client