Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa
File:                     81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa (raw, json)
Hash identifier:          +uc/OydefQzII9s3gUAYZ4iMVws2d7Q1iAtAFzeexic=
Subject key identifier:   D2:B6:1A:05:5C:FA:B2:86:42:81:7D:30:E0:F9:AD:50:D3:C2:30:75
Certificate issuer:       /CN=aae4f0de-2296-435c-b411-b16981804498
Certificate serial:       010D0C9F4328584B01B148EC1003FD99D82368E0
Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa
Signing time:             Thu 28 Aug 2025 13:00:41 +0000
ROA not before:           Thu 28 Aug 2025 13:00:41 +0000
ROA not after:            Wed 26 Nov 2025 14:00:41 +0000
asID:                     398268
IP address blocks:        199.58.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:b1:48:ec:10:03:fd:99:d8:23:68:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae4f0de-2296-435c-b411-b16981804498
        Validity
            Not Before: Aug 28 13:00:41 2025 GMT
            Not After : Nov 26 14:00:41 2025 GMT
        Subject: CN=ed0f93fc-6433-431e-b47f-b7330c765b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:23:19:90:80:f3:c3:85:41:4d:ce:41:2a:
                    2a:a3:af:a3:03:41:d2:42:86:15:95:be:3e:53:67:
                    2d:5a:22:bd:63:7e:d9:f3:14:a1:11:4f:14:cc:de:
                    27:67:cb:89:9c:c0:10:f2:17:d6:82:81:28:96:16:
                    76:3b:6a:fc:51:3d:2a:7f:74:37:08:e4:1d:cd:72:
                    53:6b:bb:cc:02:d5:95:c1:50:c5:94:fd:49:fc:a3:
                    2b:b4:45:92:42:bc:f3:57:13:4b:fc:86:0e:da:10:
                    ed:18:0c:05:b9:2c:24:97:41:62:ab:df:58:13:27:
                    75:42:ae:a3:74:3a:2a:5b:56:6b:8b:dc:c8:19:07:
                    59:78:e7:ca:52:82:96:05:c4:06:a3:a4:7b:67:40:
                    6d:27:ff:27:43:c1:6d:a7:ab:49:08:9c:49:32:80:
                    87:ba:6e:53:52:11:c5:29:37:63:f3:89:64:4f:77:
                    2b:83:8f:0a:82:a1:92:25:c8:dd:9d:b3:45:f2:67:
                    f6:07:05:1b:90:97:3d:80:6d:15:8a:e3:74:5e:ec:
                    2f:eb:ba:bf:36:b5:a6:8f:fa:74:43:5f:43:fe:f8:
                    c8:39:43:cf:05:6e:41:6a:1d:8c:99:25:46:79:9a:
                    67:71:fd:88:26:37:4c:fc:14:05:ea:ef:ae:ec:53:
                    45:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B6:1A:05:5C:FA:B2:86:42:81:7D:30:E0:F9:AD:50:D3:C2:30:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl

            X509v3 Authority Key Identifier:
                keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:32:0f:db:23:cd:65:c4:5d:0d:1c:4b:53:e5:3b:27:02:15:
         d1:cf:09:d3:ad:21:dd:f7:b8:17:d5:9c:86:0d:0a:12:32:e0:
         d4:5a:c3:b4:82:8a:f6:02:5c:af:91:b6:55:d9:e8:bb:5a:dc:
         e5:0f:7b:c7:d4:4a:29:62:3e:50:de:55:5d:df:0a:b4:12:df:
         06:a2:f7:d9:56:92:81:81:7f:9c:4b:8e:d4:a2:36:bb:c8:13:
         fc:27:ea:20:9e:f1:2c:87:9a:cb:66:64:80:9f:b7:85:bb:15:
         64:ad:90:2f:f9:0a:92:0d:fd:a0:d7:7a:e1:7b:61:e8:5e:31:
         c8:21:4d:41:33:83:65:ef:0f:75:d0:72:75:50:bd:4e:c0:82:
         db:03:fc:6a:08:9f:d5:01:c2:ea:bd:cf:a5:a8:90:96:aa:9f:
         78:7f:b1:3f:af:0f:95:69:cc:67:5e:a7:84:dd:32:d1:50:74:
         c9:6d:ee:a3:cf:03:cf:97:fd:85:bf:7b:13:82:d2:a7:0b:75:
         d0:c1:ed:ef:b7:c0:1f:36:ab:c3:9d:a5:cf:06:38:69:fb:ac:
         31:1e:17:86:6c:10:fc:ea:e4:0b:8c:a4:bb:57:fb:b1:e6:5b:
         07:9c:14:8e:d9:1a:18:4f:0c:2f:7a:35:0a:f8:b8:84:c3:92:
         2f:0d:f9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:28:16 2025 by rpki-client