Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0885ac99-d1f4-3229-8c38-0b02b849909b.roa
File:                     0885ac99-d1f4-3229-8c38-0b02b849909b.roa (raw, json)
Hash identifier:          DgVPTpmHoiWDCuuFZMmHxtVTQ2d+vPqIm6LBdhm6CtI=
Subject key identifier:   1E:1E:CB:EB:19:48:5F:07:77:38:08:9C:BA:FE:34:3E:CE:B0:EF:93
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B2FC1A0834C7D3EEC79559F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0885ac99-d1f4-3229-8c38-0b02b849909b.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     397231
IP address blocks:        199.7.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:a0:83:4c:7d:3e:ec:79:55:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=07341bfc-ebce-487e-be79-8b980277f9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:23:0b:11:95:27:63:ed:23:15:c1:b5:11:75:
                    6a:26:bd:9e:93:11:10:ca:56:fe:b6:7d:48:49:d9:
                    b5:96:79:3c:5d:8c:f1:c8:49:00:c0:6f:80:d1:d6:
                    77:45:0c:88:eb:b4:b8:9a:2e:31:7d:64:2e:03:34:
                    5f:f4:a1:e7:5d:27:6f:5b:4f:e2:9c:56:4e:77:5c:
                    4c:8f:7d:01:17:24:01:f8:97:ef:f2:e6:99:2d:39:
                    25:51:14:d2:0d:2f:15:bb:ab:9b:74:7a:88:9a:19:
                    49:ce:2f:16:22:37:7e:dc:15:83:11:eb:87:9e:b8:
                    48:ba:29:a1:53:2b:7e:5e:71:f9:70:90:4a:53:c6:
                    95:59:e3:cb:d9:c7:50:ca:19:25:f5:d0:81:91:5f:
                    16:0d:ce:e5:46:0a:75:4e:c1:ca:22:d3:54:18:e5:
                    bf:85:bf:3a:6c:0a:05:e8:45:14:6e:f3:35:e5:65:
                    73:6e:cf:62:3e:8c:7c:bf:08:e8:93:73:2c:5f:b3:
                    04:c6:f9:2b:85:ac:8f:cf:87:87:48:bc:23:fd:a7:
                    67:95:fd:32:ca:d4:d5:5c:3a:03:be:77:60:45:4e:
                    7c:6b:f6:9e:48:65:cf:b7:fe:3f:a4:d9:f9:16:ff:
                    f9:31:bf:f0:2e:f7:71:17:13:ef:bd:b3:5f:0a:ac:
                    0e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1E:CB:EB:19:48:5F:07:77:38:08:9C:BA:FE:34:3E:CE:B0:EF:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0885ac99-d1f4-3229-8c38-0b02b849909b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:75:8e:a4:d1:22:63:fa:16:45:58:f9:3a:d5:c6:7e:ba:c1:
         bc:81:5c:c6:c9:e5:61:b5:de:d9:9c:3d:83:ae:61:00:9f:e6:
         fe:15:38:06:d6:24:7a:f9:21:80:9f:a9:0c:85:2a:98:68:62:
         6c:67:15:05:6a:f7:de:ea:4f:57:df:07:31:22:62:11:0b:90:
         e5:de:bc:8f:66:03:57:a0:47:7f:49:9a:f0:11:9b:99:d9:bf:
         8c:1c:ad:a4:62:a8:bc:a6:8e:d3:8a:bf:71:f7:ba:a6:ff:7b:
         05:c9:9e:5d:c8:0a:fb:4f:2d:8a:ab:43:d9:5e:e0:a5:8e:db:
         89:1f:d4:1f:6c:3a:44:2a:e8:5b:f0:72:09:27:08:30:07:98:
         00:89:3d:a4:50:f9:4d:13:cc:a1:05:a5:dc:57:cb:e5:0e:db:
         77:87:1e:41:af:55:4a:ab:bd:58:4c:92:79:36:30:ef:62:b0:
         5b:56:0e:03:bb:33:e0:c8:2c:22:e6:09:06:e6:07:e1:e1:27:
         01:56:71:81:3a:87:ed:6a:84:47:2c:1e:5e:61:4d:3d:b7:0b:
         bc:b8:bc:92:36:01:ff:ce:0b:6e:ab:68:e1:08:e8:9f:d3:ea:
         42:d2:89:4b:e5:52:43:11:95:0b:84:83:c5:07:af:82:03:d2:
         fc:88:5a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:19:37 2025 by rpki-client