Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/60b7bedb-cf92-3a5a-af1c-379c13e83f7b.roa
File:                     60b7bedb-cf92-3a5a-af1c-379c13e83f7b.roa (raw, json)
Hash identifier:          QxojO+FEfnPxCdYZzPUFzRZm36IJZCpIr+enKCTlL5s=
Subject key identifier:   48:2F:B1:47:57:8A:87:16:E0:72:7D:65:D1:13:84:9D:E7:0F:9E:13
Certificate issuer:       /CN=c2e53398-d877-4381-8fdb-2ec7db53fc5e
Certificate serial:       010D0C9F4328584AD7D12251E96A54A612B0F380
Authority key identifier: 2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/60b7bedb-cf92-3a5a-af1c-379c13e83f7b.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     16801
IP address blocks:        198.50.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:22:51:e9:6a:54:a6:12:b0:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e53398-d877-4381-8fdb-2ec7db53fc5e
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=138b5d4c-3fba-4f89-adae-296d51533a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:4f:0f:ff:04:ed:3e:af:c8:76:c1:1c:33:
                    3f:1e:5e:77:e0:5a:7e:74:f9:74:3b:3d:60:a1:1e:
                    0f:b9:97:1c:db:63:cd:a4:fc:5b:d2:67:23:45:c3:
                    64:94:88:4c:6a:b6:3e:00:8a:86:07:ff:e1:58:c5:
                    ae:cf:c5:e0:5f:c2:4a:64:8f:32:d7:61:6e:16:6a:
                    3c:fc:b1:c7:a1:2a:9d:d7:ee:2d:71:5d:da:54:34:
                    12:f5:1a:7c:36:23:40:ae:5f:cf:b9:80:aa:0c:e0:
                    87:e4:b8:dc:65:98:d3:52:77:f6:b1:bd:7f:aa:13:
                    1a:50:0e:65:44:4a:34:57:85:10:78:89:55:2a:e9:
                    e1:ce:38:a1:ab:8b:b0:df:7e:af:a4:66:1a:e2:57:
                    d2:fd:4f:64:08:24:cd:09:74:a4:f7:c0:34:2d:34:
                    ba:0b:3e:24:39:00:51:62:ba:61:38:8a:9d:ff:43:
                    26:27:29:a2:93:be:eb:49:fc:4c:87:c1:dc:a7:e7:
                    1f:e3:71:f7:4b:c7:af:54:f1:7d:59:b5:d8:d0:01:
                    cc:8b:b4:99:df:a7:6c:60:47:ba:03:87:6a:93:76:
                    a7:6e:51:0f:38:83:2d:11:6d:33:61:d5:64:b3:50:
                    69:ff:9b:07:ff:8c:e1:55:fd:e4:92:8c:1c:13:1d:
                    39:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2F:B1:47:57:8A:87:16:E0:72:7D:65:D1:13:84:9D:E7:0F:9E:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/60b7bedb-cf92-3a5a-af1c-379c13e83f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.crl

            X509v3 Authority Key Identifier:
                keyid:2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.50.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:23:f0:6c:ed:d6:c1:fd:35:e9:c6:45:ad:90:4b:35:9e:2f:
         02:1a:ed:f5:35:f4:e1:11:e2:ca:82:52:2b:de:72:c1:e7:25:
         a0:8e:04:b6:db:11:5c:09:da:d6:bb:53:ba:ae:79:94:06:35:
         0e:0e:ea:8c:7e:52:57:75:9b:1a:17:28:51:be:67:f3:67:88:
         75:0f:41:85:8e:b2:ab:ed:28:0b:19:3a:a7:1d:c8:06:5c:eb:
         f5:e7:d9:d9:75:f5:ff:74:7a:97:61:39:ba:3d:7c:91:6b:55:
         74:a9:74:ae:e8:71:2d:f0:0e:b9:fc:bc:4d:d7:2c:8e:3c:c6:
         7b:5b:4d:f8:ab:ed:8b:27:90:11:7f:c1:9c:4d:c9:3f:e4:88:
         c6:24:51:52:1d:ab:a4:d2:50:57:20:56:ff:53:f8:ae:83:d0:
         7b:ed:1e:08:63:f0:24:3e:b5:9c:42:6b:aa:cf:10:49:b4:f1:
         d1:34:53:e7:3e:c7:77:f3:a5:bb:9e:f8:a1:01:ea:de:45:9e:
         5e:b1:b7:dc:67:19:0d:9f:7a:d1:58:fc:d4:1f:00:1b:f3:78:
         95:13:18:6e:83:bf:a3:8c:07:7b:a2:3a:96:d2:65:14:03:e1:
         5a:34:96:e7:5e:60:76:11:94:d6:17:59:04:04:e3:b1:64:cc:
         d4:a0:f1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:11:54 2025 by rpki-client