Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1cd203cc-512e-3c5b-ad81-8200b4d1cfcc.roa
File:                     1cd203cc-512e-3c5b-ad81-8200b4d1cfcc.roa (raw, json)
Hash identifier:          U0gLgWJqDy7C2OSD9LNnjNNo9l4JHVwIKoefXh6w0cU=
Subject key identifier:   96:29:D3:29:9A:76:4B:9F:66:A0:1B:FA:C4:C0:3F:1A:45:5F:4D:D3
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584ADD6677577CA6F00E68B7AA00
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1cd203cc-512e-3c5b-ad81-8200b4d1cfcc.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     11052
IP address blocks:        199.249.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:77:57:7c:a6:f0:0e:68:b7:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=8f694442-6041-4971-8f4b-904bfc90756a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:09:85:01:4e:d8:02:bb:d7:3d:66:ca:71:d9:
                    94:79:40:04:32:cd:de:66:2a:d5:d6:53:a3:34:70:
                    20:68:c9:a8:a4:dd:1c:7d:70:28:e2:bf:66:2a:3b:
                    43:8f:11:3f:19:44:f9:7e:32:1c:57:bb:98:b5:f0:
                    e8:1f:b4:a0:ec:4d:7e:84:2c:f2:23:64:3a:42:50:
                    15:0a:a8:d3:7a:63:db:5a:6d:7d:85:88:ff:0b:c5:
                    07:ac:11:c0:78:2b:f8:52:29:db:68:45:d7:65:a6:
                    a2:7f:39:5f:5e:89:59:62:de:21:82:2b:25:01:4e:
                    70:82:91:52:1b:9f:1c:44:56:1d:3e:b9:70:3f:9c:
                    db:e8:14:59:a8:71:c4:10:e5:0e:a7:eb:ad:a9:06:
                    bb:c7:c2:99:4f:04:8d:cd:9e:d2:e9:24:2a:39:f7:
                    7c:df:1a:a8:77:cd:41:da:d6:ef:7a:c0:78:04:e6:
                    a3:29:c5:e7:92:8e:ac:3d:9e:9b:6c:c6:19:42:9e:
                    20:a5:0a:9d:8c:96:f8:38:ee:6d:40:94:d0:e1:25:
                    39:b3:cc:01:07:bd:1a:4e:e3:6a:f1:f2:fc:61:6b:
                    32:64:b8:58:bc:72:a0:c8:4e:cd:b5:1e:53:20:61:
                    8f:48:02:b8:bc:bf:16:6c:70:7d:57:d9:f0:2b:75:
                    35:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:29:D3:29:9A:76:4B:9F:66:A0:1B:FA:C4:C0:3F:1A:45:5F:4D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1cd203cc-512e-3c5b-ad81-8200b4d1cfcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f4:85:88:bb:ab:bc:69:71:f2:d7:92:ce:1e:ae:3d:a4:48:
         01:06:06:2f:c6:c5:73:6b:77:15:ce:37:71:22:8d:fd:16:74:
         9e:01:38:aa:57:8c:f7:83:1e:71:48:78:1f:f2:a6:b3:ca:41:
         60:b9:a9:eb:a8:16:cd:48:f5:5a:bd:14:c9:df:62:06:3b:a6:
         5b:8d:21:10:7f:5e:4f:1d:49:74:bf:86:08:30:2f:1c:ab:74:
         80:63:83:b2:ac:ab:b7:84:11:c0:5b:7e:a0:f6:42:69:bb:16:
         8c:6d:44:b7:ea:e6:2f:2c:74:fc:18:6f:4b:a5:bc:01:7b:33:
         0f:5e:5e:f6:70:31:07:18:db:98:4e:69:66:83:2a:60:85:9e:
         d1:ed:3b:35:d1:a9:e1:f5:58:8b:64:1c:ab:1b:75:4d:e0:c5:
         f9:5f:37:0d:18:9a:1e:ff:cc:a8:95:39:04:66:5c:be:13:35:
         4b:a1:48:70:aa:ec:d0:0e:5d:b8:dc:96:db:2c:78:5c:56:59:
         a2:17:8b:60:b5:ee:dc:db:34:9a:72:6b:22:0c:75:d6:e7:da:
         b8:8b:80:e9:f8:75:aa:44:e5:7e:2a:5f:a7:c8:cc:81:5f:16:
         98:3e:13:7b:72:dc:c3:ae:04:b3:c2:26:e1:3c:01:be:c0:02:
         f3:e5:98:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:36:50 2025 by rpki-client