Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f/eb249647-6b83-39b7-bc0a-6db40d6c7428.roa
File:                     eb249647-6b83-39b7-bc0a-6db40d6c7428.roa (raw, json)
Hash identifier:          3IlvqqKp+DjuxV4NQOU6sFZOOBOF22RzDAJ3SfeINj4=
Subject key identifier:   91:70:49:A2:E9:F0:6E:96:8D:A1:90:FD:02:3E:3E:CC:AA:05:21:8B
Certificate issuer:       /CN=7fb8625e-5dd1-40c0-bda6-2628ddc6717f
Certificate serial:       010D0C9F4328584AEE269457DC39AED3A46E5880
Authority key identifier: 31:1F:D6:BF:74:5F:38:AA:19:D6:20:07:2D:69:85:50:49:A7:17:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f/eb249647-6b83-39b7-bc0a-6db40d6c7428.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     393988
IP address blocks:        199.244.245.0/24 maxlen: 24
                          199.244.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f/7fb8625e-5dd1-40c0-bda6-2628ddc6717f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f/7fb8625e-5dd1-40c0-bda6-2628ddc6717f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:94:57:dc:39:ae:d3:a4:6e:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fb8625e-5dd1-40c0-bda6-2628ddc6717f
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=867f7663-cce6-47d5-9485-2d8fa151be5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a6:b5:03:3b:96:5d:80:60:97:48:fa:a8:ac:
                    3c:48:fe:1b:f2:d3:d4:ec:49:f9:1d:f2:04:84:fc:
                    73:2f:54:88:a2:77:b5:d3:bc:f4:15:25:5d:0a:15:
                    0c:35:fa:46:5a:6b:7a:e2:7b:c8:bc:ca:33:0f:f0:
                    5d:8c:1a:9b:9b:7b:6a:9a:66:34:2f:a8:22:02:79:
                    b8:7a:fe:10:00:72:1a:0e:27:1b:29:4a:e2:c4:a3:
                    13:ab:3b:86:33:e4:bf:66:df:89:a5:ae:21:c2:07:
                    01:c6:e4:c7:66:fa:d2:ad:0c:58:d2:a6:e7:b0:78:
                    e6:c3:f3:13:f9:70:60:5d:98:44:fe:db:e5:af:ac:
                    05:a4:12:c4:94:c2:0c:3a:ad:3c:bc:41:36:f3:c4:
                    5a:15:6c:eb:bb:2f:42:04:f3:58:64:d4:99:10:47:
                    76:76:45:79:a8:8b:4f:56:9f:6a:1b:70:ee:e4:0e:
                    b9:56:e1:68:ed:c6:af:4d:ca:0e:11:aa:a9:44:aa:
                    6f:8e:0e:83:a4:6e:33:5c:bf:46:dc:95:64:74:7d:
                    86:30:37:bb:dc:ce:7d:24:a4:67:44:e2:77:1a:66:
                    5e:23:31:c2:7a:ed:92:e6:74:9a:7a:13:f3:9b:4e:
                    4b:69:15:38:92:a8:43:2e:cf:04:15:15:f8:cc:e5:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:70:49:A2:E9:F0:6E:96:8D:A1:90:FD:02:3E:3E:CC:AA:05:21:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f/eb249647-6b83-39b7-bc0a-6db40d6c7428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f/7fb8625e-5dd1-40c0-bda6-2628ddc6717f.crl

            X509v3 Authority Key Identifier:
                keyid:31:1F:D6:BF:74:5F:38:AA:19:D6:20:07:2D:69:85:50:49:A7:17:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.245.0-199.244.246.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:bf:18:97:fe:65:ec:26:8d:ce:0b:2e:8b:0c:6c:22:db:71:
         20:01:01:e8:21:23:70:18:2e:b9:69:f7:bc:4b:c1:0e:45:05:
         b8:cb:88:16:92:7e:f4:98:e0:00:f8:00:c3:87:2e:d8:29:2e:
         92:31:c5:f2:e4:0a:34:39:c0:d2:1c:4c:46:80:4c:7b:36:1a:
         ad:85:b7:94:29:f5:05:35:9a:c5:a6:64:47:a5:fa:ce:2f:aa:
         f2:8e:28:c5:80:13:1c:62:5b:75:01:2b:bd:b7:9a:23:87:fa:
         1f:cc:51:bd:97:f1:65:c4:e6:be:b2:14:8a:b9:fe:3f:88:2e:
         e0:b3:e4:32:ff:4b:58:b3:81:54:75:6f:2a:15:cb:d1:e3:19:
         86:e6:44:a2:a8:63:07:c6:23:65:0c:d9:53:68:d8:a8:b7:e8:
         82:65:b5:dc:96:55:7a:ee:0a:60:04:ae:f8:47:93:b5:38:c6:
         61:4d:f5:34:90:6f:68:1a:32:e1:5f:6b:e6:a4:83:93:4d:ae:
         d6:36:b8:65:0c:96:61:63:58:27:16:fa:e9:dd:9d:88:0d:3a:
         70:f6:47:f5:6c:46:20:41:c2:79:25:cb:92:d5:62:3d:15:71:
         7a:38:07:8c:d9:f8:fd:2b:ac:74:e8:3e:c8:d6:89:f2:e2:9d:
         9c:88:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:36:02 2025 by rpki-client