Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/2b33ad14-189d-3a2c-acdc-181a057bd6f4.roa
File:                     2b33ad14-189d-3a2c-acdc-181a057bd6f4.roa (raw, json)
Hash identifier:          rUkkUSPNcY14MNKDOBwEYRu40K7YIQERpdcjwD82GdU=
Subject key identifier:   9C:09:69:60:A8:29:93:F8:93:91:44:A0:0A:B4:D2:53:06:E3:EC:61
Certificate issuer:       /CN=c0aed97d-7073-4206-b05c-18a84d3f256d
Certificate serial:       010D0C9F4328584AE8912D9FF1F1ADE10D47A800
Authority key identifier: 89:7F:03:30:67:E4:3D:E8:6D:FC:A9:72:8E:4B:37:8F:AF:87:0C:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/2b33ad14-189d-3a2c-acdc-181a057bd6f4.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     55002
IP address blocks:        199.34.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:2d:9f:f1:f1:ad:e1:0d:47:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0aed97d-7073-4206-b05c-18a84d3f256d
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=c55bfb3f-16ca-470f-b571-3134443c77e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:fe:8b:8f:9d:ff:27:4a:69:7f:9e:c7:d4:
                    ce:5d:39:b8:40:b8:e7:1c:ed:07:a6:41:36:cb:9c:
                    71:ba:e5:db:8c:a2:ab:fd:03:e6:8d:77:cc:4e:c7:
                    67:99:79:37:65:f8:97:e2:f5:bc:0e:c0:5c:b6:69:
                    d4:c8:b8:09:0e:b3:d5:5d:19:34:fa:ac:f1:e3:61:
                    47:cc:c7:36:a1:28:4b:52:89:49:16:bf:0c:c9:2f:
                    7b:c4:66:f7:12:53:3a:1f:d9:8c:8c:8c:c1:f0:4a:
                    16:72:1b:27:5e:34:d9:c3:25:37:30:be:ed:06:60:
                    f1:eb:54:a1:e6:49:58:6f:7f:15:42:b5:08:a0:a6:
                    ac:1d:ac:15:50:7d:9a:f2:69:88:67:89:dc:9a:51:
                    ea:31:36:46:89:d4:64:82:57:55:1d:d1:cb:f8:10:
                    aa:bf:67:7c:85:6d:18:24:59:07:45:9b:42:f6:29:
                    e7:0e:2b:0e:64:a7:63:dc:d9:01:cf:1a:11:bb:80:
                    3d:2e:89:47:b4:82:48:5d:a3:83:ba:87:3c:ca:da:
                    ec:99:36:4e:34:93:0c:14:40:5e:1e:ff:db:89:2d:
                    72:77:18:89:ad:bc:7e:04:e8:0e:62:41:79:b9:98:
                    0d:1c:3d:39:1c:21:64:ef:ac:e6:2d:ad:32:80:28:
                    34:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:09:69:60:A8:29:93:F8:93:91:44:A0:0A:B4:D2:53:06:E3:EC:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/2b33ad14-189d-3a2c-acdc-181a057bd6f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d/c0aed97d-7073-4206-b05c-18a84d3f256d.crl

            X509v3 Authority Key Identifier:
                keyid:89:7F:03:30:67:E4:3D:E8:6D:FC:A9:72:8E:4B:37:8F:AF:87:0C:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0aed97d-7073-4206-b05c-18a84d3f256d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:10:0e:e5:e4:c6:2a:53:86:b5:92:bd:c6:bc:48:d0:c9:df:
         08:ce:3e:3f:06:5c:ad:fd:d8:03:be:71:c7:f3:ea:56:96:b3:
         7b:e5:7f:84:3f:12:ad:34:61:e2:f8:fa:39:63:85:60:01:15:
         bc:74:c6:60:eb:70:1c:f1:e6:fc:63:de:cb:72:13:02:13:12:
         9b:a0:c1:d3:89:d5:06:ba:d7:3d:85:4d:72:02:ad:4c:34:94:
         e1:ec:af:d5:37:f1:61:e9:cd:08:7c:47:60:72:e6:09:7c:56:
         a2:ec:a9:65:ad:f6:3c:80:d7:3f:80:c6:6d:7b:2c:7f:21:2d:
         88:76:f5:a4:29:93:7a:1b:3b:4a:b6:45:26:87:c5:1f:03:f4:
         ca:cc:ba:de:2d:c4:82:5c:87:b8:92:6a:98:88:6f:0e:c2:79:
         e4:04:88:c3:38:ad:f7:0f:3c:d1:41:fe:d9:2b:bd:9d:9e:a9:
         5c:1e:48:9c:f1:eb:77:e2:5e:df:b3:08:66:47:ce:04:bf:39:
         e8:71:02:5c:97:5c:78:27:3d:43:d4:ae:3f:ad:c6:c1:2a:d5:
         82:b6:f4:bd:a3:f0:3f:e7:3b:14:f9:16:2f:9c:0f:e7:ed:86:
         a1:1b:e1:54:2e:76:1f:52:b2:0c:18:63:91:09:3e:38:26:82:
         1e:52:fc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:00:54 2025 by rpki-client