Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/f308f711-937d-357d-a90c-7297f5b6fba6.roa
File:                     f308f711-937d-357d-a90c-7297f5b6fba6.roa (raw, json)
Hash identifier:          8HZYOrGIN8hjbZ3eKWwjmmLeDJd3lHZzEaJ6l0I3gDs=
Subject key identifier:   67:C0:AB:85:0E:93:6B:31:7B:F1:0E:7F:68:D9:46:1A:02:A3:4F:54
Certificate issuer:       /CN=48e7861e-5414-403c-8268-a7d7b18f405d
Certificate serial:       010D0C9F4328584AE19684E0A8CEE400C0EDF040
Authority key identifier: 4F:99:9D:30:47:BA:8A:6F:1D:E0:06:67:BA:BA:4E:D5:1E:7C:42:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/f308f711-937d-357d-a90c-7297f5b6fba6.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     55002
IP address blocks:        198.27.29.0/24 maxlen: 24
                          198.27.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:84:e0:a8:ce:e4:00:c0:ed:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e7861e-5414-403c-8268-a7d7b18f405d
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=8a6b85a6-c967-4b5e-af15-071aa3296902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a1:d6:0c:95:c6:eb:74:b9:dc:ff:1c:56:9d:
                    83:6b:cd:b2:92:69:c4:c4:87:b1:20:82:7a:42:49:
                    2a:f4:dd:06:ab:d7:36:66:8d:64:7f:6c:df:78:37:
                    91:f6:4d:24:68:8b:8c:8c:24:25:96:df:54:cd:b2:
                    ad:bf:c1:28:a4:3a:b9:c9:9f:c3:09:3c:56:33:e4:
                    2e:28:32:d5:17:cb:be:3e:a8:7d:9e:d7:e1:eb:83:
                    12:b9:84:1e:91:3f:9a:c7:c3:00:51:c4:cc:df:87:
                    bd:5e:a3:d4:93:2a:a7:40:d3:83:04:0f:62:a2:cb:
                    40:97:e9:ad:5c:c2:9b:1b:85:94:c3:c6:e4:3a:0c:
                    84:64:44:7b:9c:ef:e5:d6:29:b0:91:f3:ff:4a:a8:
                    81:de:03:42:bf:e5:9f:b0:ed:7d:b6:3b:54:f0:1c:
                    e8:b8:d5:28:28:fb:82:e0:4d:fe:47:be:62:d1:bb:
                    d6:84:f0:43:35:71:72:1e:8a:5f:d7:3b:28:7d:2f:
                    24:24:59:9b:78:8f:ed:7c:75:d8:4c:a8:3b:db:ae:
                    e5:f0:a1:0e:b5:b7:54:12:c3:49:da:56:b0:2e:16:
                    b5:b5:cd:01:38:a8:a8:7b:6c:ba:3b:4a:dd:df:74:
                    28:b2:4e:46:84:26:22:65:0c:24:d3:21:e5:18:f5:
                    72:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C0:AB:85:0E:93:6B:31:7B:F1:0E:7F:68:D9:46:1A:02:A3:4F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/f308f711-937d-357d-a90c-7297f5b6fba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.crl

            X509v3 Authority Key Identifier:
                keyid:4F:99:9D:30:47:BA:8A:6F:1D:E0:06:67:BA:BA:4E:D5:1E:7C:42:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.27.29.0-198.27.31.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a2:4d:ac:67:a5:d8:67:8d:a0:6a:10:57:43:52:90:03:e3:
         4c:bd:5c:ba:e3:a4:48:25:f8:39:d9:9d:91:8d:0a:86:1d:0d:
         2a:65:b5:ce:ea:1b:2c:e2:59:d1:3f:89:b9:61:4c:20:ea:5e:
         2d:ab:53:3f:96:2a:db:58:98:24:76:cb:66:fe:2e:df:da:ec:
         3b:20:b0:0b:b3:cc:24:32:b5:77:46:47:5c:e0:d3:db:5e:d9:
         14:42:27:e1:ae:67:a5:3d:a1:63:6c:3a:67:ad:01:0b:06:9a:
         d2:ae:ba:d0:9a:b5:3c:04:94:28:1c:ad:21:1a:97:b0:32:04:
         d4:60:c4:a2:36:e2:83:d5:0e:a8:32:c0:27:16:9f:ac:40:72:
         82:50:ce:bd:59:5c:85:4c:f4:d2:55:35:3d:2a:52:63:c8:e5:
         14:66:30:d7:4c:12:29:89:dc:94:10:08:f5:c9:dd:3b:11:40:
         bd:7d:4c:ac:71:bd:e2:28:18:5d:59:52:1d:85:1d:d5:26:1c:
         10:7b:ac:36:d8:f2:40:66:70:b3:b4:02:65:d6:1b:8e:99:62:
         f1:bc:77:5c:e3:40:a7:33:bc:58:07:7c:9b:b7:01:80:9a:c4:
         7a:c8:47:f5:2d:2c:43:74:1f:31:76:51:0c:42:1a:52:37:1c:
         3a:39:3d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:52:52 2025 by rpki-client