Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/8d0f3289-4f04-3390-b0f7-ead2fa143cd4.roa
File:                     8d0f3289-4f04-3390-b0f7-ead2fa143cd4.roa (raw, json)
Hash identifier:          8665Yvop9AjqThXRg1mDzF5RCAymDDNnl5a5kaetI+4=
Subject key identifier:   B0:67:AE:65:BD:2C:44:64:8D:45:D6:AB:B8:4D:89:91:50:15:92:80
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584ABD4B8C00D945561611F8D700
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/8d0f3289-4f04-3390-b0f7-ead2fa143cd4.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     13807
IP address blocks:        223.165.96.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:8c:00:d9:45:56:16:11:f8:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=d2bb4ce5-7356-4379-95ce-4bbcaca79f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2d:5d:8a:f6:25:f9:ee:12:3d:47:db:07:86:
                    b8:9c:89:5d:7c:a8:11:68:01:ae:9b:82:c3:15:f3:
                    1a:94:31:cf:2d:0d:6f:80:a2:c9:bb:1e:9b:58:a0:
                    ec:dd:21:b0:73:0f:49:69:0a:33:8e:02:0f:78:4c:
                    52:70:cc:66:b9:6a:eb:cb:7e:96:48:71:5b:08:d8:
                    a6:46:91:d8:67:d4:f3:63:55:0f:99:cf:c8:0f:2e:
                    2c:e9:76:0d:dd:f8:30:27:13:5c:9e:c9:86:c1:fe:
                    a5:30:33:a4:2c:dc:03:e3:63:9d:6e:d3:0f:46:28:
                    be:da:f1:67:bf:3e:40:f6:7b:94:78:b6:9a:55:9a:
                    dc:4e:00:ba:0f:8f:7c:d5:d3:88:69:ff:2a:1c:cf:
                    11:fc:23:f1:d7:72:ef:83:3e:02:05:68:0e:5f:b8:
                    b8:fa:0b:10:10:2a:1b:2a:17:31:54:76:73:27:7c:
                    b1:c2:23:d3:d0:2b:cd:d5:09:df:44:52:e5:b7:07:
                    ec:9f:8d:67:8b:69:4e:9e:e3:1a:fe:a2:f1:18:c6:
                    81:60:33:f8:fd:a4:9e:cd:03:08:1d:5d:5e:06:1c:
                    98:21:b8:fa:9a:82:03:52:ad:2e:82:3e:57:49:ab:
                    e2:ba:af:02:61:c2:ce:04:e3:c0:ac:87:59:1c:94:
                    aa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:67:AE:65:BD:2C:44:64:8D:45:D6:AB:B8:4D:89:91:50:15:92:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/8d0f3289-4f04-3390-b0f7-ead2fa143cd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:7d:70:86:29:29:29:41:1d:41:1c:31:2f:09:e2:e5:ba:44:
         fb:dc:88:96:e7:03:2b:4b:54:0c:38:bf:d7:c9:7b:1a:06:66:
         06:5c:c0:1c:f4:2d:0a:dd:98:1e:f5:a9:83:f7:a8:d8:64:74:
         11:04:ee:4c:a7:d8:7d:73:59:ff:da:7a:3f:c3:d7:cf:80:62:
         f6:e4:86:ef:7e:64:93:f9:97:88:18:2b:19:00:1e:42:c3:80:
         f4:76:8a:9a:21:17:5b:8a:df:f4:c0:e9:09:33:2c:14:de:26:
         84:33:e9:65:b4:64:c9:e7:a7:9b:0a:73:06:c8:65:cd:2c:bf:
         82:34:4b:fe:d8:7f:db:35:ca:9f:a6:3d:72:96:45:98:4d:77:
         1a:b6:2d:ba:8b:20:c0:5b:e2:e6:71:84:81:d9:71:23:20:98:
         6c:c8:84:74:a6:b7:aa:e4:9f:f7:11:33:a2:78:6c:ae:01:10:
         08:47:53:b5:be:3f:63:aa:87:7c:44:e6:cc:45:59:d2:a7:d8:
         ce:7b:8d:db:c9:65:b8:dd:29:6a:cb:28:98:a3:fd:87:23:c1:
         f7:d4:aa:f4:1b:18:43:54:91:7a:09:89:19:90:f3:a9:1e:c4:
         10:5b:73:e8:b8:a4:d9:73:35:c3:3e:2d:88:57:41:fe:95:63:
         1a:1d:b8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:31:13 2025 by rpki-client