Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/5df88610-8c98-30ff-85c8-e3bf83ed5241.roa
File:                     5df88610-8c98-30ff-85c8-e3bf83ed5241.roa (raw, json)
Hash identifier:          2efkjE/q4h7tKY07OYDNhVjtMxfB+ZNzHV/OaeINrtU=
Subject key identifier:   E0:9B:E8:A2:A3:A1:22:81:D0:F6:5A:66:F2:CB:40:FD:67:EF:8F:E0
Certificate issuer:       /CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
Certificate serial:       010D0C9F4328584A7E7B5EF16D415D7588C3B980
Authority key identifier: E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/5df88610-8c98-30ff-85c8-e3bf83ed5241.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     399341
IP address blocks:        205.207.186.0/24 maxlen: 24
                          2602:fa4d::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:5e:f1:6d:41:5d:75:88:c3:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=8c4475a9-dcdc-4cce-bbc9-1c295333be08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:05:82:a9:2f:53:75:b1:fc:70:81:76:b0:df:
                    b8:fe:a2:21:8b:63:59:a9:3c:43:aa:8a:b0:13:24:
                    14:bd:2f:1e:d4:88:c6:b2:81:bd:bf:67:77:a4:46:
                    85:68:76:cc:04:38:bb:e9:d3:bd:f0:12:d8:f0:c5:
                    a2:ef:f4:cf:e6:77:be:2d:56:98:49:ac:b6:5f:bc:
                    7b:8c:4c:86:b2:26:29:28:ac:c4:b8:52:b4:60:dc:
                    f9:9f:a9:1a:46:6f:f9:f7:0c:92:4e:96:4f:b6:0f:
                    63:34:a5:a7:7b:0f:ae:b5:68:9c:57:6a:cf:6c:19:
                    3a:1c:03:27:b0:28:f5:02:d3:38:0a:aa:1f:e7:74:
                    b4:e7:77:14:65:1e:36:93:b1:7d:13:3c:73:c1:eb:
                    73:a1:ae:d5:ac:b9:77:9d:bb:71:26:fe:ea:ef:63:
                    c0:f8:be:3c:2a:b5:a7:ec:57:b8:ff:15:8c:87:e7:
                    dc:bd:98:2d:3c:f6:fb:f2:09:8b:ce:fb:48:f7:60:
                    e6:b2:c3:c4:d1:1b:03:ae:b0:4b:cc:1b:99:58:1d:
                    ad:d1:d3:dc:a4:9c:c2:93:ab:55:cf:12:49:88:91:
                    39:fc:11:83:6a:e0:e9:54:d8:36:1c:e4:25:ae:15:
                    36:35:8f:db:19:d8:0d:72:25:63:9a:0a:03:18:e9:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9B:E8:A2:A3:A1:22:81:D0:F6:5A:66:F2:CB:40:FD:67:EF:8F:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/5df88610-8c98-30ff-85c8-e3bf83ed5241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl

            X509v3 Authority Key Identifier:
                keyid:E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.186.0/24
                IPv6:
                  2602:fa4d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7d:67:38:e8:28:b5:0c:fb:de:e4:84:99:91:e5:f6:71:8c:
         a7:e7:0e:e2:30:a3:b5:fa:07:78:fe:bb:e9:a2:1a:89:be:4d:
         98:6d:9c:b0:a5:94:bd:29:1c:41:ba:6f:99:f3:d3:cb:2f:c2:
         e1:4a:5f:b4:ff:be:2c:36:0c:64:9e:91:26:05:b3:f2:73:61:
         35:11:88:77:9c:5b:96:08:03:c2:fe:8a:44:dc:b3:c3:67:5d:
         8d:02:86:fd:ba:f3:9d:87:84:ff:f9:b9:af:f0:4a:6e:8f:72:
         bc:c5:5c:5e:aa:66:c0:79:89:f7:7c:39:7a:b6:37:76:38:10:
         1a:8a:ea:58:ea:77:27:88:dd:f5:74:56:16:dd:1a:f0:26:5d:
         16:09:fe:00:d0:fd:35:e4:e1:32:85:d9:8e:b5:df:68:fb:5c:
         be:19:d6:f4:ab:a0:23:b4:5c:38:a7:40:9a:23:e9:8c:db:4f:
         86:48:a5:52:c1:d7:1f:58:e7:9f:63:ce:3f:2e:62:8b:3a:a4:
         89:49:58:8a:a1:2e:8a:66:f3:62:e5:83:f9:04:ac:ca:20:86:
         07:5d:80:f8:51:f4:29:9c:ed:d4:e1:23:88:6f:54:0e:ba:6e:
         9e:05:6b:ec:1a:5c:d2:42:0c:b5:d9:c6:d8:d9:f8:f8:f5:95:
         4d:a1:1b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:10:56 2025 by rpki-client