Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa
File:                     0d363d93-28e0-3322-8517-a1ebec3877d8.roa (raw, json)
Hash identifier:          jbobRTv6n7vtdiGI/gwWhBBkJ9iO6DeaMl+i1lXdoOg=
Subject key identifier:   55:6D:4A:04:C2:C4:07:3E:FD:B1:72:F1:F2:A9:87:29:06:F1:12:22
Certificate issuer:       /CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828
Certificate serial:       010D0C9F4328584AC2E106B7D494F3CAB2695C00
Authority key identifier: B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     209
IP address blocks:        199.191.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:06:b7:d4:94:f3:ca:b2:69:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=7c47a4ea-602d-49e7-b0b1-998200fb6a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:cc:69:cf:e3:8c:f1:5c:06:4e:d9:41:50:
                    c8:67:f0:c3:8e:42:c0:38:cd:ef:e9:b3:1a:55:01:
                    ed:58:76:0a:1e:b8:7b:d0:e2:b9:72:ea:2f:b3:0b:
                    3c:74:be:ea:44:89:51:2c:cb:a8:9b:9f:81:dc:b9:
                    b4:5f:db:90:ff:03:7d:89:36:ea:c7:69:67:08:12:
                    95:44:84:5c:7c:c0:11:f3:d7:09:fa:75:7c:7a:82:
                    e4:0c:7a:d5:44:58:5f:69:9c:4c:86:ec:2d:43:cb:
                    c2:26:75:f9:32:0c:77:94:8c:d6:4a:bb:0b:29:bd:
                    80:4a:6d:e4:ac:67:1c:4b:40:c5:70:b5:9e:b1:46:
                    73:93:7d:c5:02:66:11:7d:3f:16:1e:33:9a:4f:ef:
                    14:1d:0a:d2:e0:ee:a1:32:f4:3e:a2:36:97:76:f3:
                    68:93:bf:0d:ca:13:bf:44:99:16:06:a3:aa:91:fc:
                    45:d3:f2:b6:d2:0a:e5:c4:45:19:03:66:ae:d3:66:
                    6b:c1:ec:a3:e3:66:a9:22:34:bd:76:33:ff:97:0f:
                    89:a7:cf:40:72:cf:36:e4:6f:3b:3c:0c:0c:e2:64:
                    ca:3c:10:c0:b5:85:3e:32:6f:3a:cc:8c:f7:bc:66:
                    0a:3e:b3:ba:09:4e:4c:c3:5f:1c:85:85:66:da:7e:
                    24:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6D:4A:04:C2:C4:07:3E:FD:B1:72:F1:F2:A9:87:29:06:F1:12:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl

            X509v3 Authority Key Identifier:
                keyid:B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.191.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d4:4d:3e:01:8d:fe:80:4e:4e:9f:11:67:9e:ee:ec:df:ed:
         a4:22:f1:76:62:2a:6b:09:29:8e:bc:d1:f1:63:ae:d3:a3:c4:
         eb:39:44:b4:28:c8:6d:4c:82:cf:da:12:ad:9f:bd:6d:49:76:
         99:1c:5f:4d:ca:b0:9f:38:1c:ce:b3:8a:0f:2d:f9:7a:63:1d:
         79:76:85:6c:2d:1d:4d:23:e9:50:02:1c:66:19:8a:93:1e:32:
         f6:d2:34:da:8d:56:99:b7:f3:ae:50:65:27:d8:5a:91:c5:67:
         3e:48:e4:bb:5d:84:d2:94:81:69:28:33:e1:3d:8f:0a:58:2c:
         83:1e:da:8f:3d:9d:2b:c3:31:15:36:51:2d:d5:4f:4c:e5:6c:
         9f:48:82:f0:7b:eb:33:96:47:27:e0:05:78:f5:1a:b3:34:6c:
         1e:18:e8:78:4a:30:30:cd:69:06:b4:e0:bc:63:af:6d:a1:3c:
         77:ca:ec:da:7d:a2:45:87:72:2c:55:04:53:3a:37:a1:f5:e0:
         30:f6:ce:90:12:64:f1:b4:3b:24:25:d0:e1:d9:0d:cc:b7:f4:
         1c:5b:ce:28:f0:72:df:2c:b0:fa:21:08:73:90:ca:93:31:52:
         d6:86:85:87:25:91:64:10:7c:81:8c:1c:8b:65:82:d7:d9:ed:
         52:f6:8e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:17:30 2025 by rpki-client