Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/19aab3eb-b91f-3936-9a65-879f9f6949b7.roa
File:                     19aab3eb-b91f-3936-9a65-879f9f6949b7.roa (raw, json)
Hash identifier:          6O8wPWSuQP4Q3Z8s2TcAvq610lgt9u7cpLmIF39L+PA=
Subject key identifier:   0B:FD:2B:85:59:5E:0F:9C:4D:5B:4E:0A:6C:D3:F5:5D:06:46:CD:4E
Certificate issuer:       /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Certificate serial:       010D0C9F4328584AECA83BF88177116423A635E0
Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/19aab3eb-b91f-3936-9a65-879f9f6949b7.roa
Signing time:             Thu 21 Aug 2025 00:10:30 +0000
ROA not before:           Thu 21 Aug 2025 00:10:30 +0000
ROA not after:            Wed 19 Nov 2025 01:10:30 +0000
asID:                     400072
IP address blocks:        205.196.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:a8:3b:f8:81:77:11:64:23:a6:35:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
        Validity
            Not Before: Aug 21 00:10:30 2025 GMT
            Not After : Nov 19 01:10:30 2025 GMT
        Subject: CN=c8b6c256-14e2-4c36-b8bb-ef129d57362d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:69:61:84:76:11:f5:9f:4d:8a:10:a5:0a:35:
                    28:51:82:d8:5d:e8:f9:d8:cd:bd:71:53:ba:6d:2e:
                    9d:ac:e0:29:ae:c5:6d:42:ad:ba:71:50:98:29:08:
                    fc:7c:25:3d:f1:9c:5f:4f:b9:7d:dd:a4:69:12:fd:
                    f3:a6:18:56:f2:c9:3e:d1:b8:f2:df:0f:d9:2b:95:
                    a3:c8:6e:a4:3d:17:26:0d:ac:32:81:6d:84:43:50:
                    c4:29:91:91:d3:e9:24:d9:23:1f:b3:45:bf:2b:8e:
                    fd:85:27:f6:1a:77:11:85:ed:10:be:11:a0:df:18:
                    c9:94:a6:42:c0:ab:5a:2c:a1:14:67:d4:ce:ff:5d:
                    76:56:07:0b:26:df:88:8a:ee:53:0b:29:29:37:1e:
                    fd:29:bc:54:1f:72:8f:87:a5:e3:a6:99:49:f1:f4:
                    d7:8a:dc:e9:a3:73:5d:b9:24:c4:7b:af:2c:cf:68:
                    b9:9b:e0:47:fe:5b:d2:cf:3f:17:b0:7a:95:1b:47:
                    62:7b:dc:28:0d:cc:31:8f:b6:c1:a9:b5:ea:ba:6d:
                    7e:e7:9b:64:c4:21:f0:d7:81:e5:98:1e:95:1f:a9:
                    8d:91:22:fb:43:94:e1:39:a1:8f:e9:7b:87:0e:7e:
                    83:13:4c:3a:08:f4:6c:a6:56:97:eb:26:b3:83:8b:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FD:2B:85:59:5E:0F:9C:4D:5B:4E:0A:6C:D3:F5:5D:06:46:CD:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/19aab3eb-b91f-3936-9a65-879f9f6949b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl

            X509v3 Authority Key Identifier:
                keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:47:48:ca:1b:0e:4e:5b:b1:7e:b8:06:7a:7e:1d:2a:9d:3b:
         51:3c:21:f0:da:b5:a6:07:e6:64:b3:26:c1:a0:a7:04:c6:0f:
         40:2a:e2:ef:58:80:b6:db:6c:e3:f1:a7:f5:bc:0b:22:b4:24:
         b9:a0:00:99:66:9a:79:30:d3:48:dd:96:30:38:83:6b:8e:9b:
         d6:07:97:e6:85:f7:a5:11:c9:e0:98:c0:ad:3b:2f:eb:c8:0f:
         31:b5:36:be:ea:ce:20:85:e4:56:c2:d7:e9:04:11:8f:0f:d2:
         34:4c:0d:2a:89:05:78:86:75:65:e0:a7:7b:c4:f8:47:90:9c:
         da:30:29:ef:87:cd:e7:7b:ae:f8:9e:77:cb:53:bb:39:ad:6e:
         c0:03:a6:58:8c:52:7b:4b:da:48:0e:c2:82:bd:0e:73:b9:59:
         8b:01:23:e5:19:8a:0a:f0:5d:aa:a7:79:f6:b1:da:ff:14:72:
         fa:a4:fc:76:19:1c:11:0d:7f:c9:e3:f4:50:84:a8:47:6c:a1:
         e6:19:4e:80:ce:11:0b:f0:34:10:f3:a6:a0:aa:1c:4d:0c:3c:
         52:5a:4c:11:36:e5:71:b3:21:18:22:a6:fc:eb:42:5b:e3:90:
         85:0b:e3:a7:c1:24:19:fa:4a:fe:56:4a:5a:0a:c1:20:9e:34:
         01:2f:22:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:07 2025 by rpki-client