Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/cb3a074d-2be7-3b2c-8dc9-06cc90e19c8f.roa
File:                     cb3a074d-2be7-3b2c-8dc9-06cc90e19c8f.roa (raw, json)
Hash identifier:          xOhBVwfDj7hTxr9pbo0crkHJL7QGY2HpC6N+zc7q0ZM=
Subject key identifier:   51:CC:71:9E:EB:42:03:9A:44:AD:72:88:56:73:5E:2B:80:6B:41:8D
Certificate issuer:       /CN=f5d93400-0a6f-4938-9925-856c6ace39df
Certificate serial:       010D0C9F4328584AE0311ECC059F9A857D8F7500
Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/cb3a074d-2be7-3b2c-8dc9-06cc90e19c8f.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     14439
IP address blocks:        198.133.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:1e:cc:05:9f:9a:85:7d:8f:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=04811470-c697-4b35-bed2-73f3765c324a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:04:57:7c:38:56:77:d6:fe:98:aa:65:4f:
                    f6:4d:b8:f8:6c:92:82:13:66:35:25:60:96:50:9f:
                    ce:c5:88:a4:55:31:34:83:67:c2:0b:7b:16:34:f1:
                    1f:2a:b9:62:cd:1d:81:55:75:da:56:b0:bf:e5:d6:
                    a8:c4:95:e8:40:df:e0:86:19:1c:8c:fd:df:e0:e8:
                    86:21:77:be:c6:22:3b:74:33:13:03:90:9b:37:29:
                    37:81:e6:3a:37:3c:ac:bf:4a:48:d0:38:85:50:3b:
                    f0:7e:8b:de:35:62:ac:c9:74:ae:71:2a:10:0c:aa:
                    f2:53:33:8c:1a:d4:14:a8:ce:5c:6b:c2:54:98:4c:
                    73:66:b8:05:b7:07:02:cf:09:fc:c3:f4:12:f9:1a:
                    fc:d0:9f:ef:20:9d:80:f6:44:fd:e8:d7:01:3d:6a:
                    34:f8:fe:77:dd:db:6a:22:40:2f:e2:c6:a2:0e:45:
                    37:e4:e9:f3:0b:9e:f9:5f:a2:ed:d6:c4:4a:7d:42:
                    54:56:3e:68:da:0a:0b:76:cd:dd:9b:76:39:64:25:
                    6d:f9:8c:06:9c:39:bf:8d:cc:d9:03:1d:c1:15:14:
                    f6:9b:1a:a1:e6:b5:f8:43:e2:85:df:0c:ee:96:ec:
                    2f:6f:09:7d:7c:8e:18:c2:49:b3:9d:35:af:17:16:
                    19:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CC:71:9E:EB:42:03:9A:44:AD:72:88:56:73:5E:2B:80:6B:41:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/cb3a074d-2be7-3b2c-8dc9-06cc90e19c8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:54:c7:dc:b5:34:21:5d:ad:e4:33:eb:fb:23:04:4f:d8:8b:
         02:83:6d:ef:fd:d1:4c:bb:d5:64:03:7b:33:01:8a:d0:9a:ef:
         d4:4f:6f:72:ef:82:53:b1:5b:71:ee:b5:e4:41:01:f3:cd:e7:
         de:99:1f:3d:e6:3e:a3:f4:b7:f0:b7:97:d2:cd:e3:68:17:d5:
         4b:26:0a:ce:fa:d6:36:c0:b2:bf:2a:90:74:ef:b6:6f:fc:8d:
         95:3b:d8:82:7f:b8:60:41:9c:ed:5b:a4:e3:11:c5:ce:16:26:
         4c:0b:53:68:12:58:4d:b7:d4:c6:23:97:83:22:4f:ed:bb:9b:
         ca:1d:c1:4f:c7:5a:0a:3c:17:3e:3a:c2:c2:1d:a0:a1:06:ef:
         21:24:b3:47:a1:70:e2:a0:be:d2:33:b3:d6:d4:70:0d:f5:06:
         e5:fd:78:7b:c5:26:29:b9:e3:8f:1e:a9:b1:56:0d:53:e8:e3:
         12:cd:38:6f:10:49:9c:f5:7a:85:65:59:cc:ea:4e:ef:cd:f5:
         70:7c:c1:d5:1b:bb:d0:a8:28:54:51:82:69:17:b9:85:82:e4:
         6f:e3:52:1b:34:6d:99:b7:7c:01:45:63:3d:a4:52:88:f6:cb:
         19:31:76:5d:bb:eb:fe:59:b8:0a:ed:a6:c7:f9:75:f7:7f:d1:
         51:46:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:05:04 2025 by rpki-client