Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/ee5c8804-1692-3b01-8cae-45c923677711.roa
File:                     ee5c8804-1692-3b01-8cae-45c923677711.roa (raw, json)
Hash identifier:          J09qlVe2R446UL3bmSYtP6h8m/jFsfpqN0QtZgs6tRk=
Subject key identifier:   F7:1A:03:5B:FE:94:96:ED:9A:0F:3A:45:89:A4:83:0F:4A:E2:4F:01
Certificate issuer:       /CN=48e7861e-5414-403c-8268-a7d7b18f405d
Certificate serial:       010D0C9F4328584AE1968B72CCB20E1C932BE040
Authority key identifier: 4F:99:9D:30:47:BA:8A:6F:1D:E0:06:67:BA:BA:4E:D5:1E:7C:42:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/ee5c8804-1692-3b01-8cae-45c923677711.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     20325
IP address blocks:        198.27.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:8b:72:cc:b2:0e:1c:93:2b:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e7861e-5414-403c-8268-a7d7b18f405d
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=cc6e6178-7536-4505-8dc4-8df0c520d827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b9:57:07:f2:5a:e8:87:81:ab:14:40:63:2e:
                    6a:ef:a4:0c:95:e8:23:83:3f:f7:9e:6e:30:cd:a7:
                    eb:ba:d2:54:21:d1:58:3b:c6:ad:71:b6:1e:e1:17:
                    1d:5d:99:0b:39:cf:34:a3:64:e5:e1:ff:75:29:f5:
                    87:6e:36:91:04:e0:9d:de:a7:12:4a:63:4b:4c:e6:
                    e4:d3:1a:2e:81:2f:f7:95:6e:06:54:15:7d:03:ae:
                    38:0b:09:30:37:76:a2:b6:25:00:2f:45:49:e7:56:
                    6b:0f:d9:08:68:32:f2:56:4d:c0:c7:42:b7:2c:9e:
                    c2:17:1d:c2:f4:6f:39:33:c3:93:13:9e:9b:33:39:
                    c5:1d:bd:3c:5f:4f:ca:44:7f:ef:d0:75:d8:9e:cf:
                    90:ba:a2:ef:ec:55:05:ce:fe:54:82:a0:e9:9e:49:
                    f0:bd:2c:4d:3f:fb:29:82:98:0e:4b:f6:49:32:45:
                    68:c8:2a:72:87:b3:d1:a0:98:20:53:13:fc:a4:c7:
                    38:12:d4:02:72:fd:41:93:8e:3d:0b:b2:f7:e4:43:
                    73:a4:70:ca:09:ee:00:e5:fb:c4:33:67:e9:d4:85:
                    75:d2:5a:98:3c:2c:bd:f3:a4:82:e3:ca:9e:a4:07:
                    61:6e:38:70:23:da:a7:98:2c:80:fc:dd:b2:86:da:
                    7c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1A:03:5B:FE:94:96:ED:9A:0F:3A:45:89:A4:83:0F:4A:E2:4F:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/ee5c8804-1692-3b01-8cae-45c923677711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.crl

            X509v3 Authority Key Identifier:
                keyid:4F:99:9D:30:47:BA:8A:6F:1D:E0:06:67:BA:BA:4E:D5:1E:7C:42:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.27.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c4:24:e9:f4:04:66:e9:80:50:6a:61:71:ee:a9:f1:f2:c6:
         19:53:76:43:7a:57:bb:8b:a5:c6:a5:60:e8:38:00:ed:d0:cc:
         a6:da:3e:6d:42:6b:00:5d:a6:9c:a7:56:af:d9:fc:40:42:d9:
         59:3a:f4:d4:15:96:40:23:c2:91:3d:11:95:7e:d2:89:87:1f:
         92:13:0c:aa:ff:6b:17:47:d3:2a:ab:10:46:fa:e3:32:22:e8:
         48:cc:8c:b5:0e:33:f9:4e:fd:23:2e:bb:4d:b6:89:39:42:94:
         a3:02:d8:0b:58:03:2d:3c:df:bb:a8:32:a1:85:38:04:02:6c:
         3e:8e:f1:9c:7b:bf:d8:f1:53:77:94:be:29:65:f7:77:23:f8:
         a0:85:ba:43:ae:c4:cf:d1:ee:7a:2b:96:e2:64:64:87:e7:0e:
         2b:70:f3:a5:14:56:be:db:7f:3d:6a:c6:16:fd:88:32:c6:a6:
         50:c7:77:25:96:42:3b:81:42:dd:13:b1:ff:ef:37:c0:83:70:
         75:3b:4d:7d:24:28:40:71:c3:e8:5a:1c:64:59:60:9c:b0:0c:
         0c:a8:57:c1:35:a9:62:ed:0e:4b:44:ec:e4:a1:be:04:d9:bf:
         bd:df:8d:41:2a:74:04:d5:8c:3c:fb:2a:04:2c:f0:7a:4e:02:
         39:b6:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:55:24 2025 by rpki-client