Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/17e3eedc-636b-367b-9c8b-c31ffa765b7e.roa
File:                     17e3eedc-636b-367b-9c8b-c31ffa765b7e.roa (raw, json)
Hash identifier:          JfR0ku3Qm4vQumLpzTuYltetUvQHZwsuj0E74lziwQM=
Subject key identifier:   1F:54:AF:DA:36:07:9E:E3:91:9E:F8:30:32:C7:41:36:EA:70:6A:AA
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F4328584AECC13DD548B1864E7F504980
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/17e3eedc-636b-367b-9c8b-c31ffa765b7e.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     56274
IP address blocks:        198.208.96.0/21 maxlen: 24
                          198.208.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:3d:d5:48:b1:86:4e:7f:50:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=40724db3-e205-4e8b-9c1d-c0f8c2ed9b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:36:40:2b:d8:b6:35:14:7b:10:62:c3:9e:
                    4e:60:77:b2:47:59:4a:23:aa:c6:8b:87:fc:b8:81:
                    8f:49:98:99:e5:93:79:29:97:ba:1b:97:d8:bb:37:
                    50:9f:98:7d:80:40:6c:e8:75:36:a6:d5:32:2c:4e:
                    49:03:5c:9a:60:2c:05:0a:ca:c4:2e:c5:53:15:33:
                    08:61:73:ea:d0:d3:96:56:aa:af:d5:f5:a0:d3:e0:
                    13:d4:3e:f6:35:11:3e:5e:11:16:31:50:bb:49:87:
                    e9:0a:cf:8a:8f:d8:5d:0c:9d:55:61:c6:5a:54:27:
                    89:a5:07:6d:d2:bb:88:2e:30:d5:22:bb:04:41:6f:
                    fc:94:f6:df:9a:e4:0d:1f:b3:c0:4a:2a:a7:9a:29:
                    dd:6e:80:c1:32:50:49:d2:7f:dd:92:b6:f9:63:94:
                    fb:35:35:46:c2:dd:59:88:c5:a6:e6:74:86:aa:78:
                    c9:51:f0:77:51:b3:a4:67:aa:54:d4:d4:fc:8c:58:
                    e7:1c:16:e6:80:82:0e:fb:16:f9:e0:09:b9:f1:7c:
                    f2:81:25:d2:9e:d4:f1:d5:9f:9f:01:50:88:bd:c5:
                    d5:66:92:dc:7c:77:d6:d2:9d:91:57:71:89:c5:d6:
                    9e:46:06:48:37:ba:42:13:e1:0a:a1:dc:ab:de:2d:
                    e0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:54:AF:DA:36:07:9E:E3:91:9E:F8:30:32:C7:41:36:EA:70:6A:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/17e3eedc-636b-367b-9c8b-c31ffa765b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.96.0/21
                  198.208.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:25:09:fb:d4:b7:6e:dd:60:7f:72:b5:78:e5:12:14:6b:ce:
         ff:b7:61:bc:6c:63:e6:93:b4:13:0b:c5:f6:07:13:cd:63:89:
         6e:b9:4f:ee:6f:28:1b:2f:35:fc:88:08:11:4a:77:8a:0f:de:
         fb:58:f0:5d:35:63:e2:1f:be:61:87:bc:e4:a7:cf:da:12:6d:
         9f:0f:2c:93:85:29:8d:d1:8c:d3:40:1b:53:2d:25:b0:bd:95:
         80:4a:09:e8:35:a4:92:ff:63:a2:ba:36:4b:6c:9d:be:ca:a6:
         b9:b9:0b:63:f0:da:50:0f:1d:fc:25:fc:82:e6:c4:37:10:4a:
         be:cc:22:ad:61:00:9c:01:ef:2b:a4:19:ed:c3:c7:d5:e5:f2:
         cd:4e:d3:54:86:8b:e7:41:64:cf:84:a2:ea:12:0f:e6:20:86:
         ea:fc:d1:37:86:10:53:55:18:91:45:30:b4:0f:ca:0a:bd:bc:
         3a:62:8e:27:15:a0:4e:53:d6:97:51:18:b8:eb:04:2d:44:a0:
         8d:b4:b6:32:0d:18:52:84:b6:45:63:89:3e:12:eb:b5:3d:47:
         7b:cc:69:fa:a0:77:eb:80:30:c8:65:78:14:64:e4:6a:3a:cc:
         e4:51:0c:f3:17:c0:3e:4a:71:64:ed:3f:b4:04:19:b7:7d:28:
         fc:ab:90:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:42:11 2025 by rpki-client