Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/371f04d7-0be3-3e98-ba4d-0d4a6f0fa303.roa
File:                     371f04d7-0be3-3e98-ba4d-0d4a6f0fa303.roa (raw, json)
Hash identifier:          fB58l7TDXc/CKtTX+ytLhPcbNEwuLn6Mbs0fJ5CdtxQ=
Subject key identifier:   C7:FA:A6:58:CD:E7:C3:C5:E1:CB:44:DC:7C:7A:C9:D0:3D:27:CA:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B8A7CCB405F02F8A1CC83D788
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/371f04d7-0be3-3e98-ba4d-0d4a6f0fa303.roa
Signing time:             Thu 16 Oct 2025 13:00:38 +0000
ROA not before:           Thu 16 Oct 2025 13:00:38 +0000
ROA not after:            Wed 14 Jan 2026 14:00:38 +0000
asID:                     396571
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:7c:cb:40:5f:02:f8:a1:cc:83:d7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 16 13:00:38 2025 GMT
            Not After : Jan 14 14:00:38 2026 GMT
        Subject: CN=bd44fd6f-9c17-44b1-b884-0796c944f133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:90:a9:c2:d9:da:71:07:00:34:48:59:04:99:
                    1d:95:ac:b7:32:7c:d8:25:7d:a1:40:d7:76:2a:7d:
                    c7:8b:cf:3c:88:56:59:de:d6:0d:d0:44:cc:0b:0d:
                    01:e4:dd:df:1d:5a:d8:39:2c:fb:47:85:de:9f:91:
                    86:60:4f:85:57:87:f4:ed:be:ce:74:ba:ee:67:98:
                    f6:b2:86:88:c0:96:17:2a:d0:0f:31:11:44:15:01:
                    55:44:f1:9b:23:6e:12:46:65:6a:cb:84:34:60:87:
                    b3:56:22:12:0c:f8:f7:6d:7c:db:0b:7f:0e:71:75:
                    fc:3a:57:bc:a5:f5:b0:4e:8a:cd:30:97:9a:f6:66:
                    26:59:df:d1:c5:e0:cc:7f:56:80:e1:2d:46:12:46:
                    a4:cc:1c:69:cf:87:37:50:ef:c1:07:09:d8:16:b2:
                    75:a3:0d:e5:e1:b3:0a:ca:26:ad:b4:08:3f:66:0d:
                    7d:03:91:bd:42:3f:53:7d:52:c1:30:dd:2e:d2:ce:
                    8e:83:0b:71:d3:ad:89:14:1e:db:23:25:e2:30:7e:
                    3d:97:1a:2b:a0:32:da:1f:1c:10:0a:75:63:c8:14:
                    52:f5:d9:ed:28:4d:49:cb:05:0e:35:6a:57:b3:ed:
                    ba:64:f2:05:4b:8e:f2:fd:cc:9b:bd:08:61:b3:55:
                    62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FA:A6:58:CD:E7:C3:C5:E1:CB:44:DC:7C:7A:C9:D0:3D:27:CA:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/371f04d7-0be3-3e98-ba4d-0d4a6f0fa303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:75:be:95:2f:17:0e:ba:fd:1e:38:e8:68:79:0d:e4:45:2b:
         7b:61:3b:d4:95:c8:d5:ed:60:ba:9f:83:f4:a1:25:02:4a:0e:
         37:63:bc:1d:2b:a2:c1:a8:dc:3a:92:c0:d0:4c:6e:b7:0b:d2:
         e5:a3:69:7e:5a:d2:c9:ec:cc:02:f4:30:5b:c0:02:2b:41:57:
         87:50:25:ba:ff:0e:89:a3:40:35:2f:fe:a3:89:0a:c9:a6:a3:
         e8:e9:2b:72:ad:9f:a3:ea:87:52:d4:f1:29:c8:3e:b1:61:51:
         a9:83:ab:3f:f6:dd:3b:7d:57:4f:83:0f:50:fb:4f:5f:06:6c:
         7f:6b:39:54:b5:80:8a:30:f6:74:24:64:aa:8c:1d:dc:f7:35:
         0f:49:3b:f0:7d:84:69:52:65:b9:58:22:0d:a2:fd:28:35:61:
         a9:08:60:53:17:61:02:37:51:41:65:5f:07:3b:88:4d:ac:2d:
         2c:71:f8:af:0c:f6:8f:38:24:54:30:14:4d:78:bc:6e:5a:8e:
         fc:51:49:43:5e:e9:df:6a:99:ac:b3:70:26:7c:ee:13:4b:e1:
         a5:cd:30:1b:af:13:3c:a0:fd:80:d7:27:bb:42:06:d9:3f:40:
         b1:54:54:b6:95:b1:0f:d1:63:ce:d3:74:60:40:16:ca:5a:de:
         78:2c:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:10:18 2025 by rpki-client