Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fa6f675-946f-3abf-828f-5569afcc12df.roa
File:                     5fa6f675-946f-3abf-828f-5569afcc12df.roa (raw, json)
Hash identifier:          StI/x7OPyOx85UyCM5cBi9kYEw59tv2uuFrE7MKjESM=
Subject key identifier:   18:49:CE:92:60:D8:75:5A:8B:BE:8E:9F:4B:54:D7:73:D7:67:05:AB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD0D65447B34AD48D54E13100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fa6f675-946f-3abf-828f-5569afcc12df.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     13335
IP address blocks:        198.41.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:54:47:b3:4a:d4:8d:54:e1:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=06aa2e4a-30a2-47e3-b954-ab96a7ea02d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:da:15:97:e4:15:0a:cf:3a:1a:0c:0e:d8:0e:
                    65:f0:58:2b:31:ce:ef:33:d9:0b:8e:25:51:06:6c:
                    f9:21:c5:08:db:76:a5:ce:aa:4e:bd:5d:55:86:f4:
                    bb:1f:da:a2:43:14:6f:03:2a:93:77:56:49:7d:20:
                    e8:3f:d4:ba:80:91:24:2d:2c:18:b9:da:8f:43:20:
                    57:27:3c:bf:b0:f0:36:b9:78:7c:1c:b0:7e:82:14:
                    8c:ab:d9:d3:9a:47:95:f9:30:f8:c2:f2:25:d4:28:
                    b9:a1:22:50:7f:77:65:9e:f1:d5:06:cf:a6:76:6c:
                    06:6c:fd:c5:4e:f5:1f:e5:99:0c:8b:76:c2:d0:35:
                    61:90:ab:3d:0d:cc:06:64:d6:51:4a:bb:23:5c:27:
                    cb:34:aa:29:b0:a6:b3:75:6b:99:40:7a:e2:84:99:
                    cc:5d:b2:fe:f6:2a:ea:35:e0:b9:c9:a1:55:4b:5d:
                    11:14:df:e7:e5:fd:82:5f:4a:02:6b:2d:7a:82:5d:
                    df:fd:2d:c7:6e:f6:73:92:41:58:30:75:98:7f:08:
                    c2:fd:5d:4f:44:84:13:65:0f:23:3c:2c:f4:7c:e4:
                    af:8e:59:cf:cf:4b:77:1f:e7:f2:eb:53:2b:5a:77:
                    a9:51:21:29:71:ac:34:14:92:bc:a4:be:3d:b2:ca:
                    b7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:49:CE:92:60:D8:75:5A:8B:BE:8E:9F:4B:54:D7:73:D7:67:05:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fa6f675-946f-3abf-828f-5569afcc12df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:1f:bc:70:f6:9c:1c:12:de:b5:1d:00:52:b5:a3:4e:6c:
         db:dd:90:a1:81:06:13:c8:14:f6:25:9a:10:01:7d:90:fa:93:
         ab:5d:2c:8f:c5:de:eb:07:ff:d8:7a:09:89:18:15:6b:d1:9a:
         36:33:41:44:be:76:12:6d:de:6f:7b:ae:85:b9:e9:59:dc:25:
         91:ea:2a:9e:eb:34:4d:1d:df:b9:e0:42:a0:f8:83:78:7a:9a:
         39:51:b5:1d:a9:90:51:eb:5e:1d:cb:17:a2:d9:0e:7d:8d:3a:
         90:6d:57:52:9e:f0:79:4d:38:e6:10:1f:a9:ed:03:41:a5:f7:
         db:bf:f8:e7:0e:b5:23:c3:ea:77:9f:41:b2:d4:bc:77:56:18:
         e8:93:64:9d:81:a8:60:dc:1e:4f:dc:b3:4f:ee:b6:7d:a5:45:
         92:85:fb:17:84:13:56:62:f2:77:cd:60:dd:2a:1d:a7:88:e4:
         cc:26:2b:96:b6:95:7f:88:41:af:88:75:90:98:3a:04:e7:65:
         85:b5:d4:a5:25:ff:d6:72:00:dd:d8:6a:93:3f:ef:1e:00:3f:
         7c:07:a9:28:23:3f:f1:9a:be:b7:da:5a:09:5b:c8:0b:3e:84:
         cd:b2:89:cc:e5:f6:1e:97:05:39:03:cc:08:36:03:9a:64:9b:
         cf:6c:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:09:07 2025 by rpki-client