Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/44e8f65f-ce57-333c-a470-bc9213b738ea.roa
File:                     44e8f65f-ce57-333c-a470-bc9213b738ea.roa (raw, json)
Hash identifier:          suUT9IbLSFi2AIzoF/kgTR+d4MfJEeQjW/l0pJDOQvI=
Subject key identifier:   74:9B:BB:56:02:06:9E:E0:2F:55:0C:6A:67:A7:D6:C3:CE:E2:52:DE
Certificate issuer:       /CN=08e01c34-608c-4615-9e00-7b09e447bf4c
Certificate serial:       010D0C9F4328584B89177772A395C0DA25272900
Authority key identifier: 4F:D7:EC:EF:A2:E3:3A:75:01:61:29:F9:45:D5:37:CF:54:EE:63:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/44e8f65f-ce57-333c-a470-bc9213b738ea.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     15116
IP address blocks:        198.182.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:77:72:a3:95:c0:da:25:27:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e01c34-608c-4615-9e00-7b09e447bf4c
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=f2034c56-bc19-4ff5-9be7-52c006bff42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b2:9d:1e:c3:ba:3c:c4:b8:ea:82:48:15:ef:
                    5b:97:3c:b3:e2:4e:6c:cd:32:35:c6:2e:63:8d:57:
                    ad:26:e7:28:f1:9a:cb:e8:9f:1a:eb:e3:66:07:e8:
                    6a:1a:62:c1:83:38:26:a6:d5:1e:f8:7f:6c:cd:2d:
                    35:98:ba:92:7c:7f:d6:f2:09:8a:0b:c8:6f:8c:96:
                    4a:3f:22:ec:17:b1:5c:dd:a1:f5:ce:61:e9:85:d9:
                    4c:5c:86:90:a0:0c:75:a1:2b:93:9a:13:94:1d:1e:
                    45:0e:8b:a8:e1:15:f5:bf:a5:fa:9a:e8:6e:49:3b:
                    bd:11:60:12:e8:ef:ef:99:9c:e9:5c:17:5d:a3:1a:
                    85:46:57:5a:7d:c2:43:83:53:65:a9:6d:fd:42:49:
                    cf:d0:2a:8f:38:71:03:fb:fa:79:8a:ef:af:01:73:
                    41:b1:4a:31:4f:74:f7:38:a1:8d:65:5c:ea:b7:11:
                    2b:88:a1:7b:d0:03:01:92:fc:a2:24:f2:d3:83:29:
                    06:22:80:9d:86:02:fc:aa:79:3d:ff:de:12:e0:28:
                    db:59:63:2b:4f:90:d5:3a:5d:f3:3b:d7:18:91:c1:
                    52:c5:22:bd:61:6b:06:87:88:33:a8:d8:64:ac:8a:
                    b3:f1:d8:ad:23:b2:a6:28:ff:4b:55:25:b5:d5:77:
                    ef:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9B:BB:56:02:06:9E:E0:2F:55:0C:6A:67:A7:D6:C3:CE:E2:52:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/44e8f65f-ce57-333c-a470-bc9213b738ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.crl

            X509v3 Authority Key Identifier:
                keyid:4F:D7:EC:EF:A2:E3:3A:75:01:61:29:F9:45:D5:37:CF:54:EE:63:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.182.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a1:5a:0b:b4:45:66:8e:05:5e:23:a9:be:c2:5f:90:6e:dc:
         e8:c6:b5:58:5c:20:73:db:00:c5:f6:19:59:06:c4:5d:0b:54:
         4f:61:71:9d:bf:bd:31:6d:14:99:a0:45:78:e5:01:b1:c1:09:
         93:57:61:4e:1c:ce:e6:40:63:d6:a4:c0:16:8e:7f:2d:5a:32:
         77:5d:81:13:43:61:25:7b:1b:92:0d:6f:a8:0e:f9:11:68:6e:
         df:5e:dd:9e:97:d1:48:d8:ed:0c:4e:52:72:05:b5:99:75:e5:
         3c:c4:33:89:9e:ff:84:e0:a1:a9:5f:ba:5f:8a:d7:7d:f7:91:
         a7:3c:a6:56:35:3d:a6:b4:a1:18:f9:7e:e2:e1:a8:fa:21:02:
         d7:2d:24:82:c0:ed:a2:e9:49:15:fb:c6:72:33:50:01:68:b3:
         05:44:6a:93:3d:c3:08:d5:a3:2b:64:c6:6c:b9:0c:f3:52:7a:
         15:ff:64:bb:d8:38:e2:bf:41:d9:3f:b3:89:19:58:c9:8c:42:
         80:73:dd:d7:b1:77:00:da:79:6e:46:fb:c8:87:2f:c8:c8:a3:
         c8:3c:a0:53:63:0d:6d:60:c5:0e:ad:93:32:e7:45:e4:ab:2a:
         fb:a9:cd:3d:ad:14:b5:9d:a7:0d:46:2d:0f:f7:a3:d2:46:a7:
         68:07:80:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 13:21:10 2025 by rpki-client