Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/1cecd198-c1e8-34a8-af12-aeb52c5d99e5.roa
File:                     1cecd198-c1e8-34a8-af12-aeb52c5d99e5.roa (raw, json)
Hash identifier:          AA+oK9+NQ4I1rurkkQ0QNytlIJ+SXOQIFKvKZnJJYtc=
Subject key identifier:   43:99:6C:F9:DB:A5:4E:4A:C5:38:11:B5:D6:50:90:81:69:A7:1C:FC
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F4328584AB91B9F54840D5319B4A55000
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/1cecd198-c1e8-34a8-af12-aeb52c5d99e5.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     834
IP address blocks:        199.255.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:9f:54:84:0d:53:19:b4:a5:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=6d70cfb2-ae86-48b6-81d9-f35668a29c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:94:56:a4:06:31:2e:0c:d9:d8:d5:f3:77:62:
                    da:22:90:dd:d6:3b:37:cd:4c:12:1a:76:ad:e6:ba:
                    dc:e4:1f:09:84:a0:8e:ec:37:97:16:4d:ab:16:e5:
                    23:ca:d2:cd:ac:5f:ac:52:88:aa:c5:c6:41:d4:cd:
                    f8:bc:8e:5e:36:87:e4:fc:63:59:6e:93:df:a3:a7:
                    53:af:4f:14:c6:ef:1b:96:52:65:88:23:6e:b5:ad:
                    bd:58:ed:55:9a:dc:91:cc:d7:f4:f9:0f:8e:2d:85:
                    3c:4d:21:d4:7a:17:1f:f4:59:33:8f:09:ce:61:35:
                    50:8c:c8:69:6f:bc:31:d2:a9:bf:9b:d5:42:86:f0:
                    94:6c:b4:38:24:33:47:5b:03:44:97:65:02:71:76:
                    d4:d0:53:a6:54:75:35:b2:a7:43:e9:ea:bf:ab:a6:
                    6f:a2:66:83:94:1c:36:0c:ae:ab:75:ad:e9:66:06:
                    35:26:eb:19:8d:b3:1a:06:cb:c9:ff:d9:4d:54:c1:
                    f6:14:5f:f0:d8:38:98:96:16:eb:52:de:15:a1:d5:
                    d3:b0:cf:3d:3e:bf:1d:34:e7:31:bd:b7:8e:ce:58:
                    b0:b1:a2:7e:2a:17:7e:f5:08:b7:16:e9:2a:2e:b4:
                    19:d0:72:6a:1d:64:ce:0e:e9:87:a2:e2:e8:89:27:
                    dd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:99:6C:F9:DB:A5:4E:4A:C5:38:11:B5:D6:50:90:81:69:A7:1C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/1cecd198-c1e8-34a8-af12-aeb52c5d99e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:40:c2:90:8e:b2:5d:c0:8a:ba:04:97:ee:ba:75:e4:4e:97:
         8f:b9:0c:cd:05:12:29:f0:3c:c4:13:84:f2:ba:60:12:b2:50:
         cc:e5:2a:28:81:c1:50:f1:f4:8d:66:7d:0c:74:0c:70:c6:6a:
         28:f2:52:3d:ce:3f:71:d1:00:fe:bf:48:e0:77:32:b9:a2:3b:
         3a:09:7b:25:2b:cd:1a:b1:86:b7:0b:34:24:ab:21:84:67:13:
         dc:f5:c2:eb:c9:3b:ad:98:fa:e2:69:08:e7:23:2a:db:cf:26:
         30:d5:61:77:38:ce:e7:fc:22:00:f0:f7:29:d8:6c:a8:4c:15:
         78:ea:4e:06:c3:6b:cc:b3:5f:03:5d:35:38:ca:03:5e:b6:71:
         30:ff:f7:06:72:51:a4:d3:78:78:f7:b8:19:bc:25:e6:80:17:
         f7:d6:12:bd:02:09:dd:ba:2c:c5:76:ef:d7:c6:d4:a7:07:ec:
         a1:ed:90:18:d1:d0:35:08:1e:58:2f:68:41:27:41:f2:96:0e:
         75:82:46:f9:cb:0c:21:73:36:96:08:9b:4b:3c:92:72:5c:ea:
         94:99:2f:7d:98:da:f5:9c:b8:18:1a:0c:47:34:6c:a3:9e:6f:
         e4:06:15:21:5a:f6:f0:23:b1:88:c4:a1:21:ff:b7:d6:7e:47:
         a6:ca:ff:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:37:25 2025 by rpki-client