Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/e4f21359-fbdd-3835-adf4-0aa226c665da.roa
File:                     e4f21359-fbdd-3835-adf4-0aa226c665da.roa (raw, json)
Hash identifier:          DWnpy+uSqeLzrhed2L5XX+xk+J/422L+eSZmmP3JwZc=
Subject key identifier:   5C:A9:35:77:C1:EB:96:D6:76:A6:A0:41:35:C0:58:04:AE:23:9A:6D
Certificate issuer:       /CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919
Certificate serial:       010D0C9F4328584AFEE6CE750529BE014BA4EDC0
Authority key identifier: 13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/e4f21359-fbdd-3835-adf4-0aa226c665da.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     202
IP address blocks:        205.233.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:ce:75:05:29:be:01:4b:a4:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=e9b05f1a-66dc-48fd-a3da-d059a8175a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:81:d3:4a:c9:f2:d8:78:6a:5d:27:91:cb:98:
                    ae:b3:f5:8f:1d:ae:a3:1b:40:c1:0c:2a:af:21:01:
                    e0:8e:73:0b:db:17:8a:80:b0:cf:ce:9a:3c:62:07:
                    cc:9e:7e:76:84:b3:99:cc:ef:0c:30:1c:c5:e8:98:
                    3c:43:0c:80:cc:23:8b:a3:41:b5:d9:ed:63:3d:f4:
                    82:ca:95:e7:8e:61:f6:72:61:73:d0:f5:f4:b2:19:
                    03:c2:64:96:fa:a7:52:24:49:ad:2f:72:5d:ca:30:
                    e9:e3:0f:ff:85:35:52:a4:ef:aa:22:12:45:2e:de:
                    9f:ef:8a:c1:42:46:3f:46:c1:65:f8:1a:a9:b9:e3:
                    15:4c:26:b9:55:4b:20:a9:d1:df:b6:d6:c2:ff:cf:
                    a8:6f:f1:7a:a0:1e:d9:45:61:0b:42:9f:cd:d5:a1:
                    30:a7:65:8a:d1:dd:76:f3:9f:01:cb:f0:2b:b7:ae:
                    c7:ee:c6:38:16:bc:d8:5f:af:31:00:70:3a:a1:1b:
                    b6:21:18:80:3a:94:97:8b:ef:e8:19:29:88:a7:2c:
                    2a:69:d2:d9:af:4c:ed:9e:5c:99:65:fb:81:b4:fa:
                    2c:75:90:a7:cb:45:14:4f:4b:af:fa:2e:57:d6:92:
                    57:38:41:c8:c8:59:97:9c:a9:c8:7f:e2:aa:b6:fc:
                    ef:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A9:35:77:C1:EB:96:D6:76:A6:A0:41:35:C0:58:04:AE:23:9A:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/e4f21359-fbdd-3835-adf4-0aa226c665da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl

            X509v3 Authority Key Identifier:
                keyid:13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:53:46:fa:b8:d5:d8:4d:14:7a:35:69:36:a4:3b:1a:71:86:
         f9:62:ef:9b:84:d6:5f:0a:58:c2:a4:3b:c5:90:02:ca:36:ef:
         d6:50:60:e4:e6:48:66:fb:5b:d8:aa:44:7b:41:10:71:18:3e:
         9d:d3:fc:c2:d2:ab:d0:96:9c:d4:3e:3f:4a:e3:f4:f6:86:27:
         c1:df:73:d9:90:37:46:dc:f1:15:aa:80:52:bb:9f:4e:f5:cf:
         5a:13:d8:1e:e5:90:f9:22:3c:db:49:06:c0:f9:cc:af:4e:d3:
         c4:fd:0a:99:69:86:4f:21:0e:f3:ab:bb:1f:16:35:d2:f4:2c:
         53:06:b7:c3:32:b4:1e:1f:8f:fd:79:53:65:e4:3d:e5:0f:1b:
         e1:9c:a6:20:01:c3:3c:02:03:34:22:29:09:83:e8:61:c9:04:
         ae:d6:83:67:8e:94:93:9b:be:2b:63:41:09:8f:6a:1d:18:f5:
         a4:cd:27:1d:21:05:f6:71:ba:76:da:57:8e:84:99:77:7c:87:
         d5:da:aa:8a:a2:43:b9:57:73:c7:4f:41:4c:44:c8:27:60:ef:
         cf:d9:74:f1:1c:71:67:2e:8b:c4:0d:14:16:0f:84:bc:e3:40:
         87:b7:02:11:35:84:13:5b:a2:61:fa:a4:af:f9:6e:54:8d:c9:
         76:82:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:32:05 2025 by rpki-client