Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffccd33d-330b-341f-90f0-88d1f1f909ac.roa
File:                     ffccd33d-330b-341f-90f0-88d1f1f909ac.roa (raw, json)
Hash identifier:          7V4Js6TGLIrofm+z2j6/WUHobU867mtw/6MVlbbHuF8=
Subject key identifier:   CA:B3:9A:FA:2F:E1:59:4A:CF:A2:CF:EB:7F:F5:2D:19:FE:4D:2F:52
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B8A7CCA1EE39409A8C565AC94
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffccd33d-330b-341f-90f0-88d1f1f909ac.roa
Signing time:             Thu 16 Oct 2025 13:00:38 +0000
ROA not before:           Thu 16 Oct 2025 13:00:38 +0000
ROA not after:            Wed 14 Jan 2026 14:00:38 +0000
asID:                     396575
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:7c:ca:1e:e3:94:09:a8:c5:65:ac:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 16 13:00:38 2025 GMT
            Not After : Jan 14 14:00:38 2026 GMT
        Subject: CN=472410fd-235b-462c-8528-7d883243b3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:04:13:26:fa:2f:dc:bb:06:c5:d4:df:22:
                    50:d4:5b:7c:79:3c:68:d4:3f:95:22:ea:ec:fc:bc:
                    6b:b3:67:32:7f:f8:83:b5:85:8a:2b:aa:13:7f:84:
                    b1:81:5e:1d:ae:dd:1b:65:17:74:2c:97:44:59:25:
                    47:26:87:a3:6d:43:67:c5:00:90:f2:a7:8a:92:67:
                    8e:db:c6:ec:a1:ba:01:44:d5:7d:76:f4:c0:15:9d:
                    53:49:cb:21:c9:01:6c:d7:99:06:5e:b7:52:cc:37:
                    f8:66:10:12:b6:7d:5c:cf:27:15:aa:82:ca:e1:67:
                    b4:d3:ca:7e:ec:06:ae:ca:89:7c:cb:c6:b0:87:3b:
                    0f:6b:13:1c:37:3f:f8:cd:7f:ce:3d:67:a8:9a:0d:
                    d9:35:4d:8a:f4:f2:fa:b2:93:48:3c:3b:84:63:5e:
                    14:34:f6:2d:50:d7:b5:70:10:17:5a:c5:f2:31:40:
                    db:6e:3e:50:60:ed:d6:57:65:83:6e:57:c4:13:02:
                    0f:7c:a0:63:cf:55:3d:0a:7d:5e:43:2b:65:37:d7:
                    4d:22:04:25:d3:74:b2:b0:fa:97:76:ae:2d:ae:34:
                    dd:6a:42:5d:59:c4:83:4a:c7:20:fd:c2:1f:57:5e:
                    cf:c5:17:4f:5d:08:ad:c3:0e:25:31:02:b5:30:5f:
                    ef:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B3:9A:FA:2F:E1:59:4A:CF:A2:CF:EB:7F:F5:2D:19:FE:4D:2F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffccd33d-330b-341f-90f0-88d1f1f909ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:eb:a8:89:03:5c:27:87:78:b2:26:ac:4a:ed:dc:54:62:44:
         e7:7c:71:f1:26:9f:12:87:c1:a2:f0:0d:85:fc:70:40:0c:fa:
         43:5c:f9:e3:97:03:4b:e4:2c:0a:f0:7b:13:d1:a5:33:45:75:
         3f:a4:17:26:ea:30:cc:83:89:bf:cc:a0:24:63:e3:bb:60:d2:
         f9:a0:e1:22:92:9e:4b:18:ad:14:99:94:94:44:b8:cb:41:4f:
         e5:b0:95:d3:3b:25:ad:ff:cd:ed:52:58:01:cc:3f:54:17:59:
         c1:81:4f:02:54:6f:08:b2:de:45:ea:b0:43:0b:f3:63:ac:50:
         2a:ba:fb:b3:b2:56:ed:ef:55:86:93:c2:65:85:10:86:1c:f9:
         1a:3c:b0:52:56:6b:0e:25:2b:9b:a6:03:09:74:60:a3:2c:2f:
         17:4f:8c:4f:22:a6:07:ca:4f:d5:2a:af:ae:5b:90:52:cb:23:
         df:64:8c:60:7b:fc:2b:79:3a:36:12:04:a0:29:45:76:2e:c5:
         8c:16:94:65:c9:4d:b6:8a:85:20:8b:36:39:fb:c2:43:6b:ae:
         70:67:8c:92:9a:76:c1:fe:7e:cd:28:9e:7e:bc:ed:cb:71:85:
         ff:69:5b:89:32:0d:db:ec:b9:41:44:3c:a5:2d:ea:31:96:b1:
         80:bf:9f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:47:09 2025 by rpki-client