Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/8414eb1c-dd88-3f46-8664-ebe59c86fdbf.roa
File:                     8414eb1c-dd88-3f46-8664-ebe59c86fdbf.roa (raw, json)
Hash identifier:          Rj41MT3GxODDoytFS7fGdB0jorNYLatjFFJ5V60PN4k=
Subject key identifier:   88:C2:6B:7C:C6:06:CA:42:A6:71:52:D8:CB:1D:2F:F0:49:6A:F8:B0
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F4328584B8D477F0D62397789561EA100
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/8414eb1c-dd88-3f46-8664-ebe59c86fdbf.roa
Signing time:             Fri 17 Oct 2025 13:00:39 +0000
ROA not before:           Fri 17 Oct 2025 13:00:39 +0000
ROA not after:            Thu 15 Jan 2026 14:00:39 +0000
asID:                     30383
IP address blocks:        198.208.0.0/24 maxlen: 24
                          198.208.2.0/24 maxlen: 24
                          198.208.28.0/24 maxlen: 24
                          198.208.48.0/24 maxlen: 24
                          198.208.79.0/24 maxlen: 24
                          198.208.90.0/24 maxlen: 24
                          198.208.154.0/24 maxlen: 24
                          198.208.155.0/24 maxlen: 24
                          198.208.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:47:7f:0d:62:39:77:89:56:1e:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Oct 17 13:00:39 2025 GMT
            Not After : Jan 15 14:00:39 2026 GMT
        Subject: CN=b5fd46fd-5378-45c4-ad6a-3c44e7140a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:69:92:44:5e:f8:d7:d7:86:3b:eb:0a:c5:3a:
                    b7:4e:24:09:9d:a6:9f:0d:d3:a7:15:99:f4:25:b4:
                    89:2c:ae:93:de:4d:16:b6:1b:97:e2:16:d0:bd:6f:
                    ea:99:ab:57:37:4f:c6:10:31:c4:50:3f:d9:87:7d:
                    24:8c:7f:c4:fa:07:0f:53:a9:00:86:42:fd:3b:26:
                    80:f2:57:1d:fd:ca:9f:d1:09:5e:b4:72:c9:51:ae:
                    68:cf:22:90:36:f3:a4:0b:47:0a:29:18:d3:cf:f1:
                    7f:8c:86:de:74:96:cc:dc:04:54:97:e3:75:99:39:
                    62:de:04:33:f6:64:3d:f9:4c:00:b3:14:55:ee:00:
                    1e:72:e4:e9:e6:53:42:aa:07:9c:74:44:19:18:ff:
                    d3:2c:71:22:74:9f:00:04:9b:63:ec:67:71:c8:c7:
                    fa:e4:9c:bd:a8:8b:ce:e4:d0:55:91:c9:59:6e:61:
                    33:87:27:b1:76:f2:dd:cc:e1:61:e4:5b:29:67:1d:
                    6d:16:91:14:d5:90:02:f4:81:41:69:61:58:e7:39:
                    c5:ee:9d:ab:05:37:f9:27:07:1c:63:1a:a7:2d:84:
                    95:e6:76:40:73:c1:cb:b0:32:ea:68:a6:2b:88:e5:
                    5b:e8:b9:a1:2b:c8:87:1b:16:9f:65:c2:87:98:98:
                    6f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C2:6B:7C:C6:06:CA:42:A6:71:52:D8:CB:1D:2F:F0:49:6A:F8:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/8414eb1c-dd88-3f46-8664-ebe59c86fdbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.0.0/24
                  198.208.2.0/24
                  198.208.28.0/24
                  198.208.48.0/24
                  198.208.79.0/24
                  198.208.90.0/24
                  198.208.154.0/23
                  198.208.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:08:46:bf:f1:a6:52:98:31:14:8c:af:53:f5:8b:19:19:3d:
         35:ae:f3:17:f8:3d:2e:2e:87:6e:b4:82:95:1f:41:db:84:b9:
         b9:92:87:29:e4:5d:49:9a:61:d7:76:49:10:b3:76:1f:a1:b2:
         9a:52:e4:06:70:62:13:4a:81:0d:e2:69:25:45:8f:d4:d9:ee:
         61:32:7e:6e:03:39:1f:07:2b:a9:7a:4e:65:0c:db:84:97:39:
         a8:43:b1:50:de:80:9f:a3:a0:63:ea:13:83:ed:eb:9b:de:02:
         ec:84:f3:8d:62:0b:0d:de:95:ed:19:20:2a:5c:f0:83:bc:b4:
         29:43:61:77:c1:48:b3:c9:3a:1d:c8:0a:81:52:45:a0:1f:03:
         a7:8b:21:2a:21:2e:14:13:ac:99:f3:34:8e:bb:c9:4d:cf:7b:
         67:29:72:c1:79:f2:87:e5:24:e8:57:8d:ea:e3:b2:be:9c:27:
         41:04:46:6b:11:3b:e7:d9:64:0e:e9:90:37:e7:24:85:ba:a1:
         5c:32:d8:95:59:33:ec:f8:22:ce:02:ba:3a:5b:1c:fd:ca:a7:
         17:6a:06:e2:66:b8:9b:55:7e:a7:76:13:d4:cc:9b:d3:e4:16:
         18:b4:58:e7:8e:b5:74:ac:a5:4e:ac:51:83:c8:89:9a:dd:54:
         8d:e3:c9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:21:02 2025 by rpki-client