Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/c60df32e-02e7-3492-b504-59d4ffb6325c.roa
File:                     c60df32e-02e7-3492-b504-59d4ffb6325c.roa (raw, json)
Hash identifier:          tVqT089msTLepCVty7dU3Ar03Mk1LQC9W8cq+GBdByw=
Subject key identifier:   EA:69:BC:C7:F6:C2:DA:59:44:3C:F1:A2:E8:7B:A9:E7:F4:F5:BD:92
Certificate issuer:       /CN=cb079463-85da-4da7-b699-7f92f9faff04
Certificate serial:       010D0C9F4328584AF2568361296E98B554BE2540
Authority key identifier: 90:19:F1:21:95:02:6C:A1:2B:92:FF:1C:49:51:AC:D2:F8:7D:97:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/c60df32e-02e7-3492-b504-59d4ffb6325c.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     19337
IP address blocks:        205.166.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/cb079463-85da-4da7-b699-7f92f9faff04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/cb079463-85da-4da7-b699-7f92f9faff04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:83:61:29:6e:98:b5:54:be:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb079463-85da-4da7-b699-7f92f9faff04
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=503f6fa2-d578-443d-861c-780e895575a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7c:6e:32:95:23:71:6c:0a:5d:ae:b6:3a:04:
                    76:02:43:22:cc:6d:bd:b9:ca:15:e8:b2:0a:f6:ac:
                    54:92:f1:20:94:3c:b1:29:04:c8:6e:c8:c8:d8:a4:
                    f2:ab:4a:7f:dd:aa:01:9f:37:9e:11:9d:c0:28:b1:
                    54:a6:54:9f:dd:e9:74:fd:8f:7f:86:ed:d8:75:fd:
                    49:31:cc:47:70:09:25:c1:4d:5a:72:d7:a8:7e:cc:
                    28:59:3e:f1:32:1f:44:fb:7f:2f:76:f3:af:14:2b:
                    c2:b0:64:82:5d:da:43:96:15:6e:cb:b7:aa:98:f7:
                    a3:f8:33:5a:34:e6:bb:74:f5:fb:93:6b:97:b2:5e:
                    54:06:16:d5:d4:3d:59:6f:a1:86:91:a3:93:09:3f:
                    0c:08:9d:92:2b:ca:f4:52:c7:88:56:f8:71:73:a1:
                    3e:72:16:4f:ec:2c:2e:4f:f5:9c:8d:51:78:f6:fc:
                    d2:c4:1e:de:6c:40:a5:44:7a:88:8b:25:36:a2:fa:
                    7d:3a:57:c0:fa:d1:0a:6f:02:4d:18:22:3f:7b:3b:
                    1d:08:d5:9a:73:a1:38:5c:93:8f:70:0b:5a:ff:97:
                    f8:68:69:59:02:3c:88:7c:d3:c2:78:ce:07:6e:ed:
                    2e:24:74:47:fb:ef:7e:2a:ac:d8:2c:fc:59:0f:cb:
                    f2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:69:BC:C7:F6:C2:DA:59:44:3C:F1:A2:E8:7B:A9:E7:F4:F5:BD:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/c60df32e-02e7-3492-b504-59d4ffb6325c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/cb079463-85da-4da7-b699-7f92f9faff04.crl

            X509v3 Authority Key Identifier:
                keyid:90:19:F1:21:95:02:6C:A1:2B:92:FF:1C:49:51:AC:D2:F8:7D:97:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:3c:9e:61:c0:a6:b4:6d:a9:83:a8:39:40:d0:ab:7e:f4:be:
         66:88:28:80:8f:df:0f:f7:12:26:1e:00:96:35:f6:9c:03:f8:
         53:71:dd:ab:06:81:a5:cf:dc:b0:60:c5:d5:c3:85:71:08:14:
         4f:13:a1:c9:bc:82:01:33:37:fe:af:a5:94:00:49:74:30:96:
         b4:af:fe:a7:2f:2e:a8:8e:35:ff:2c:a3:b0:31:53:68:f0:7a:
         f3:ac:7b:ac:35:90:66:11:fa:f5:77:df:43:62:a3:04:84:76:
         97:67:6e:68:9c:66:c7:36:b4:2c:55:fc:45:fb:d9:96:c0:67:
         a1:19:64:91:da:f1:a4:59:59:9b:a2:10:57:da:dd:16:80:75:
         08:87:34:49:c0:84:5c:60:0a:34:d9:1a:4e:b5:28:31:92:3f:
         26:8f:08:35:16:8e:f0:58:24:75:1a:da:93:bd:96:34:71:58:
         d7:dc:fc:4f:4d:24:d9:6c:25:e5:08:4b:fd:b1:11:2d:43:0f:
         51:84:66:c0:36:d2:10:63:09:27:41:19:ed:6d:22:36:68:37:
         ab:79:d1:77:f7:b7:37:74:46:1f:39:89:9c:94:95:16:a0:6a:
         ff:a9:b3:36:90:52:e2:36:fa:6e:d2:1c:5e:b6:80:72:d8:7d:
         c4:ac:66:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:13:49 2025 by rpki-client