Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/29a0033e-011d-388f-8797-7e1f26f33d84.roa
File:                     29a0033e-011d-388f-8797-7e1f26f33d84.roa (raw, json)
Hash identifier:          8mF8ue8l3f5KBSxrFKcEVHp7HPPXjiaM/kSFPC2X4Rk=
Subject key identifier:   07:F2:6D:CA:2C:69:10:77:22:FD:00:34:07:B1:51:CE:70:B0:9C:3E
Certificate issuer:       /CN=d9bb608e-c60e-4ceb-b32a-f101c944038d
Certificate serial:       010D0C9F4328584AC446418EC65831AF1D82E900
Authority key identifier: 2D:B4:40:F1:19:22:37:C9:81:F0:FE:41:F6:20:D0:F9:98:47:E4:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/29a0033e-011d-388f-8797-7e1f26f33d84.roa
Signing time:             Wed 06 Aug 2025 13:00:42 +0000
ROA not before:           Wed 06 Aug 2025 13:00:42 +0000
ROA not after:            Tue 04 Nov 2025 14:00:42 +0000
asID:                     395354
IP address blocks:        205.201.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/d9bb608e-c60e-4ceb-b32a-f101c944038d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/d9bb608e-c60e-4ceb-b32a-f101c944038d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c4:46:41:8e:c6:58:31:af:1d:82:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9bb608e-c60e-4ceb-b32a-f101c944038d
        Validity
            Not Before: Aug  6 13:00:42 2025 GMT
            Not After : Nov  4 14:00:42 2025 GMT
        Subject: CN=26bae009-8bef-412a-8097-0a6d0891c22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:67:61:40:b8:0d:33:69:8c:27:2f:68:53:9c:
                    b2:35:a3:74:f4:78:89:70:50:e6:73:a7:d5:1d:61:
                    23:07:60:3e:19:b1:8d:9a:31:cd:17:24:06:be:9e:
                    ee:dd:c6:2d:24:76:9d:97:61:56:af:c9:3d:d2:58:
                    a0:1c:38:41:98:c8:c4:0b:f3:65:47:02:4e:08:96:
                    0f:f5:a8:da:99:4d:41:95:dc:a5:9d:57:73:e4:b0:
                    a0:7f:23:ad:db:cf:51:1a:de:86:b7:8c:eb:68:c5:
                    c5:a4:60:81:ee:1a:36:a6:b0:64:06:8b:92:6c:41:
                    73:a8:e3:f7:1f:1b:f6:b1:ba:1c:02:4d:66:57:68:
                    e4:ce:21:ce:25:c8:59:4b:6a:66:2f:84:98:7c:d4:
                    f3:2a:37:9e:5d:b5:43:54:16:f7:53:25:f7:b8:e4:
                    55:e0:d7:04:63:db:b6:8f:fa:76:78:a5:6a:b5:8b:
                    12:dd:58:2b:25:bb:2d:06:68:08:1d:c9:84:08:b7:
                    46:c2:c0:fd:eb:02:78:11:f8:54:3e:2b:f9:1d:49:
                    b4:19:02:49:8f:99:7f:eb:b2:89:d6:fe:86:5d:6f:
                    a6:50:6f:18:b6:09:1f:e8:93:1c:03:d1:49:49:fa:
                    67:7c:67:fe:0e:e0:6a:79:6e:be:4d:86:5f:e8:22:
                    1c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F2:6D:CA:2C:69:10:77:22:FD:00:34:07:B1:51:CE:70:B0:9C:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/29a0033e-011d-388f-8797-7e1f26f33d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/d9bb608e-c60e-4ceb-b32a-f101c944038d.crl

            X509v3 Authority Key Identifier:
                keyid:2D:B4:40:F1:19:22:37:C9:81:F0:FE:41:F6:20:D0:F9:98:47:E4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d5:07:c3:bb:f9:bb:ee:c4:88:1f:8b:9d:5b:82:55:ba:e4:
         09:15:57:8c:3a:4d:5b:a7:eb:bf:be:94:a9:77:82:5d:23:7c:
         75:8f:21:0a:bc:b7:aa:83:1f:c2:42:7c:4c:58:a2:3e:e2:cf:
         d8:dd:b9:3c:9d:19:66:23:af:06:4d:2c:5d:4f:69:17:30:97:
         59:ce:f8:18:32:e2:53:44:d6:d0:ec:87:97:18:0c:fe:12:41:
         98:6c:9b:17:5c:55:49:7c:ac:4b:53:30:b4:99:9a:b6:da:5c:
         10:45:d1:fc:9d:2d:71:33:fe:9f:15:b4:40:67:56:ed:2c:70:
         24:d1:29:71:fc:30:36:18:27:0c:b6:7e:93:e9:8e:70:94:85:
         1d:27:94:f3:2a:53:45:8e:4c:d4:4c:4f:ab:f0:b1:f4:20:85:
         e1:a1:24:fc:3f:49:82:73:f2:f6:10:2e:47:de:1a:3c:40:a2:
         c1:b0:f4:20:3b:35:fa:2e:36:e0:7b:5b:2f:98:ef:1c:15:f0:
         64:6f:ff:4b:2d:93:52:2c:60:92:79:15:a4:e5:1c:d9:d6:d2:
         3a:c2:f3:1e:a0:a7:1e:66:5f:01:53:80:84:dd:a1:e8:a8:ca:
         df:37:bd:c3:1d:65:52:06:fe:ed:bf:ed:91:00:5f:ee:1f:b9:
         ee:c8:9a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:39:11 2025 by rpki-client