Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed8e202b-9455-3983-a785-732e544f6c3f.roa
File:                     ed8e202b-9455-3983-a785-732e544f6c3f.roa (raw, json)
Hash identifier:          2eDuR+0PDHPJ6IGICxwL47caZYSgvWUGX0UlZ9f5blg=
Subject key identifier:   F0:8D:0B:48:05:CE:5C:48:D5:55:0E:F1:20:00:75:0A:E8:39:F8:53
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD0D662618E0E52283AA61700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed8e202b-9455-3983-a785-732e544f6c3f.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     13335
IP address blocks:        198.41.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:62:61:8e:0e:52:28:3a:a6:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=6af3a3c4-96fa-4e51-9049-60c50c51bb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:72:9e:ef:63:29:14:b9:61:87:d9:6a:fe:
                    5b:10:d4:d4:6b:9c:70:a6:cd:bf:67:a9:9b:4c:16:
                    8f:48:0f:63:e0:5d:66:ec:1f:5c:d9:07:6e:4d:0d:
                    ee:f6:61:f8:aa:8c:97:38:8d:09:51:eb:22:39:e8:
                    8f:9d:3a:6d:49:f5:15:f2:37:e0:f6:27:14:d4:46:
                    dd:87:4d:1d:61:92:ce:d0:75:13:c0:3f:19:c4:7b:
                    af:5e:5e:7d:c3:5f:47:84:02:dd:8e:0c:19:8e:08:
                    b3:48:48:4f:7a:35:47:1b:83:88:1a:17:43:26:30:
                    cb:9e:c2:c6:66:f2:32:a9:44:09:2e:ea:bc:8e:71:
                    57:08:3f:ab:9e:14:69:82:f5:0e:80:33:1f:82:ab:
                    01:09:85:a0:c5:78:31:91:a6:77:42:c1:e7:14:16:
                    9d:77:70:85:a1:b2:04:73:cc:54:db:5b:2a:c0:85:
                    45:8e:64:cc:24:e8:eb:4c:23:54:cc:df:8a:da:de:
                    5a:35:47:a8:a1:1e:81:f6:25:5a:4d:3a:b6:8e:f2:
                    d3:da:90:db:b3:16:90:17:3a:14:7f:a1:88:48:f4:
                    87:2a:5a:f5:e3:df:6a:42:50:a2:40:be:b9:f2:e9:
                    f3:7f:02:be:c8:8d:11:a4:22:d2:46:64:49:d3:e5:
                    53:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8D:0B:48:05:CE:5C:48:D5:55:0E:F1:20:00:75:0A:E8:39:F8:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed8e202b-9455-3983-a785-732e544f6c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b1:71:3c:e4:0f:db:ae:5e:f9:97:99:c8:72:2b:12:d7:6c:
         92:f3:1c:73:d1:f4:38:12:e7:ee:b8:af:d1:fe:32:b1:4a:7e:
         7b:24:bb:2e:ce:4b:6d:e8:5c:b7:13:55:87:0e:5f:30:93:6e:
         1b:54:fe:e4:12:72:ec:9b:fb:e4:51:7b:af:c1:66:05:3d:69:
         18:f3:85:ff:17:6e:cb:9d:9a:38:96:19:e6:8d:8e:1b:93:43:
         4f:9d:b2:47:02:5c:ef:2d:33:27:80:0c:3a:b4:f7:b5:d6:1a:
         d4:c1:00:d7:5b:62:32:32:60:04:a5:15:90:8c:5f:f5:6f:19:
         e0:56:20:99:12:04:b7:b5:19:7c:c1:21:16:89:11:c3:10:7b:
         96:e2:be:9b:55:16:a5:2d:cd:e9:00:20:be:1c:a8:de:df:10:
         27:f4:c2:65:a4:de:20:8a:fc:2e:e4:5b:a4:05:46:93:7d:33:
         b2:58:fc:8a:bb:1f:58:d4:a4:b4:af:0a:d3:83:eb:29:d7:d8:
         9d:88:81:45:22:34:09:0d:08:54:ed:ec:52:fc:d7:cb:9f:be:
         b9:e9:ff:60:42:c7:1c:2b:95:bf:c5:53:d4:89:7f:a3:d6:a1:
         50:34:98:b0:31:92:6c:c8:e5:e5:b0:00:74:f0:1f:45:8a:70:
         40:3e:36:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:35:26 2025 by rpki-client