Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23cb877-4269-381d-8037-2744789720ce.roa
File:                     e23cb877-4269-381d-8037-2744789720ce.roa (raw, json)
Hash identifier:          ya+sEu1IxVRe55LI2xsP9KqzBqm9KjHKgrLqAEPNfkQ=
Subject key identifier:   02:32:D5:7E:44:BD:1C:51:5D:6A:F9:20:D0:A7:50:07:19:72:DB:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B8A7CD0BA4891585A97215800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23cb877-4269-381d-8037-2744789720ce.roa
Signing time:             Thu 16 Oct 2025 13:00:38 +0000
ROA not before:           Thu 16 Oct 2025 13:00:38 +0000
ROA not after:            Wed 14 Jan 2026 14:00:38 +0000
asID:                     36623
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:7c:d0:ba:48:91:58:5a:97:21:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 16 13:00:38 2025 GMT
            Not After : Jan 14 14:00:38 2026 GMT
        Subject: CN=7e770a57-edfa-4380-82f7-dbca421021be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f5:9d:3b:bb:24:d1:9c:01:48:13:5a:ea:c9:
                    e2:84:d8:86:9e:c7:02:c1:a9:47:87:66:59:68:72:
                    65:53:86:ff:83:36:ec:61:9e:f2:b6:2e:39:db:08:
                    7e:5d:11:bd:eb:4f:db:e9:ee:08:3e:65:93:ea:cd:
                    9a:98:72:89:21:a3:e5:d7:e9:7b:19:c3:1f:78:c1:
                    b9:00:d6:90:2c:c1:3a:0f:e2:b7:73:28:96:62:c0:
                    c9:73:99:b7:91:57:52:2e:7a:19:5d:57:79:95:cb:
                    9b:43:57:44:c5:93:b6:27:3f:aa:b6:6f:92:d0:cd:
                    e9:e9:a9:87:fa:e7:52:32:99:05:7c:a3:80:28:52:
                    32:79:00:3f:53:98:40:63:9f:f5:de:1b:61:07:84:
                    51:12:ec:58:19:84:9b:69:5f:72:50:3d:45:1a:17:
                    7c:66:5d:12:48:4a:11:fa:d3:50:be:88:df:28:e7:
                    95:b0:13:d7:3e:62:b8:8a:e2:be:a8:19:e5:ea:12:
                    37:40:e4:1a:b1:40:2c:f7:18:66:69:30:6c:91:18:
                    67:43:92:71:b8:4f:31:25:a2:28:de:34:08:c8:f6:
                    f9:b5:29:7d:8c:78:98:b3:a8:45:d3:f7:c1:74:5c:
                    10:81:9e:0a:62:7e:ff:08:e9:80:bf:b2:00:26:a4:
                    c4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:32:D5:7E:44:BD:1C:51:5D:6A:F9:20:D0:A7:50:07:19:72:DB:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23cb877-4269-381d-8037-2744789720ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a0:61:53:1f:5b:76:41:26:c3:18:08:24:93:66:b4:d3:ea:
         c4:60:0f:68:44:58:70:b4:23:8c:8f:91:cc:34:6f:38:ee:0a:
         04:a4:34:6f:26:90:b4:69:21:e3:a2:99:9e:73:89:ff:19:02:
         01:a8:bc:5c:e1:55:a8:10:91:fa:82:0d:b0:c6:c0:20:e6:5b:
         c3:6e:50:32:10:4a:ae:f1:53:e0:ef:0b:12:47:e6:74:a1:e5:
         9b:93:3f:de:14:2d:2b:b6:62:70:be:88:19:06:99:d4:0f:42:
         d1:9d:af:41:2d:3d:e7:1e:b2:2e:68:df:62:6c:da:65:a2:cb:
         b1:36:39:8f:b1:ed:77:52:7d:4c:3c:8a:b7:6e:35:7f:39:36:
         36:d9:e0:ac:c3:c4:76:e7:e4:4b:ca:14:fe:2d:d1:bd:0a:06:
         92:14:35:82:0b:1b:1e:fd:20:55:b0:17:67:90:cf:20:13:5b:
         6f:76:e0:69:81:6f:c2:e2:4d:94:fb:d9:cc:7e:02:f0:5a:15:
         8c:b2:8f:42:ac:a5:15:40:b2:01:0c:11:7e:37:fd:93:4c:85:
         5e:49:2b:8d:d5:3d:f5:7d:03:bb:97:9a:dc:ab:6e:7c:53:d6:
         0a:b7:fb:b4:c1:72:87:61:16:f1:21:be:0e:7d:78:30:f5:03:
         4d:e4:48:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:30 2025 by rpki-client