Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/ea87477c-4838-3182-80e2-bc319cbb9bd6.roa
File:                     ea87477c-4838-3182-80e2-bc319cbb9bd6.roa (raw, json)
Hash identifier:          yp5Xj7v7N6xjyFHAagdmhzw7NliNrWWgR1bZv2loAso=
Subject key identifier:   E7:E0:89:CD:02:08:9C:A2:D0:4D:ED:1E:63:EE:5D:54:82:CF:D1:78
Certificate issuer:       /CN=43dfd777-de1f-43d4-839f-074c5f3bd298
Certificate serial:       010D0C9F4328584ADECBD820E5DF0480F1287A00
Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/ea87477c-4838-3182-80e2-bc319cbb9bd6.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     400110
IP address blocks:        184.169.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:d8:20:e5:df:04:80:f1:28:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=d6c3ffd6-5fe2-4d93-b456-af18897fe1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bf:ce:e6:31:0b:33:11:ab:06:51:72:0e:8f:
                    2a:c7:ae:3b:09:24:7e:5a:1d:61:03:6f:f3:fa:a7:
                    66:2a:2f:0d:e8:56:a2:a9:71:71:a3:a8:0d:ef:45:
                    23:ae:7f:f6:5b:dc:c9:fc:86:d3:74:19:6b:50:9c:
                    b9:3e:47:c0:cc:98:f8:5f:eb:e7:89:55:02:52:71:
                    23:73:79:1a:4e:44:55:79:b1:5d:95:9b:55:8a:d4:
                    f0:4c:b7:ca:75:8e:74:db:07:79:ac:1e:46:b1:a3:
                    36:cb:e5:7a:95:81:9c:47:1d:0e:ca:4e:4f:b5:93:
                    50:52:3e:e7:5f:c3:6c:5b:f1:2e:92:04:1f:8f:02:
                    68:e9:c4:2e:19:1c:db:b4:0e:0f:e5:7a:b7:70:df:
                    d0:33:71:f3:fe:df:07:5e:80:72:44:c3:08:51:ba:
                    b5:60:7a:7e:cb:0e:ef:0e:57:60:57:65:12:13:5d:
                    10:e2:d0:b4:e7:ad:9a:93:f0:28:95:4b:c9:ea:33:
                    76:e6:1a:21:20:28:89:69:57:f4:70:6a:12:42:6a:
                    46:4c:82:1f:ef:84:b1:79:78:94:c2:48:c4:72:07:
                    21:14:39:40:0b:be:c6:fc:98:86:3b:0a:ec:66:fa:
                    19:2a:74:df:82:b3:fa:69:a0:6c:ab:91:fb:f3:77:
                    d8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E0:89:CD:02:08:9C:A2:D0:4D:ED:1E:63:EE:5D:54:82:CF:D1:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/ea87477c-4838-3182-80e2-bc319cbb9bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:f1:e0:68:53:1c:5f:ff:30:aa:e5:6e:c2:01:9f:b3:35:6d:
         3c:34:6c:cf:44:73:8c:b8:cc:37:49:c5:bf:8b:f5:b5:cd:5c:
         e1:13:3b:c0:c4:09:e4:73:ec:a8:b1:61:8d:d7:c9:4e:9b:ac:
         33:1f:d1:f8:b2:1a:f9:a2:b6:fc:47:ad:62:84:ff:9b:60:80:
         6e:15:92:4e:42:d7:3b:45:5b:31:8c:98:c4:44:b6:d1:a9:dd:
         de:cb:d3:fb:f7:bb:45:7f:61:85:00:72:1f:76:7f:40:6a:3d:
         55:af:22:90:f3:dc:5d:75:63:3f:87:29:eb:91:e9:4a:e3:1b:
         5e:cf:5b:4f:e8:13:ec:12:ff:49:a7:1a:df:f2:40:c8:57:44:
         41:05:cc:45:37:0f:25:10:ad:8a:6c:f2:5e:e8:74:0d:f0:2a:
         6e:f0:36:8e:07:0a:58:b2:3a:88:a1:e9:0a:fd:a8:47:a5:5e:
         c6:89:fd:65:73:4d:f0:41:3d:e6:0c:91:f6:47:94:d3:0e:91:
         51:ed:fd:70:73:72:55:98:08:66:0e:97:61:67:e1:13:59:58:
         f8:a6:14:cb:00:62:47:30:6b:ae:dd:4b:e7:11:4c:32:b7:61:
         e2:8f:a2:22:bf:39:d3:44:7f:63:f0:5b:42:9b:5a:9a:8d:09:
         44:ca:24:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:35:56 2025 by rpki-client