Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/814dcbf2-1251-3d71-a3fe-4f3347764cb0.roa
File:                     814dcbf2-1251-3d71-a3fe-4f3347764cb0.roa (raw, json)
Hash identifier:          eSIubP8+J3nSMxvCF9biOMzWIjAaGoBMcEWTAwB9aWQ=
Subject key identifier:   9D:21:C0:52:2B:C0:DB:04:30:19:3B:77:7D:46:54:EE:F9:DD:D9:D9
Certificate issuer:       /CN=a4aa20f3-940b-4178-8460-6af30ac20ab8
Certificate serial:       010D0C9F4328584B83820D4C8654A42F5FCC3880
Authority key identifier: 8A:E9:AF:DA:7E:22:90:8A:D4:D0:93:36:7D:8F:CD:98:4A:AF:C2:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/814dcbf2-1251-3d71-a3fe-4f3347764cb0.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     18908
IP address blocks:        198.175.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:0d:4c:86:54:a4:2f:5f:cc:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4aa20f3-940b-4178-8460-6af30ac20ab8
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=1a3394cc-cdba-47e2-bc93-425c2012b312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:f0:ab:18:c5:6b:33:0f:48:60:e5:e8:bf:
                    3b:08:96:6a:3b:88:c9:e5:50:91:89:81:85:7c:25:
                    dc:93:18:a8:b1:d3:94:c2:73:22:d3:e2:88:4c:95:
                    ff:4b:91:af:04:2b:95:4d:01:56:a1:43:2b:a1:09:
                    e7:af:68:45:bc:3b:e0:94:8d:64:af:97:cd:62:30:
                    aa:75:62:37:31:73:ed:f3:d1:9c:c9:67:dd:4d:2d:
                    60:6d:37:47:71:4f:a0:35:9b:ec:72:7a:3d:b1:c7:
                    fd:ba:c6:cb:22:e9:54:f8:af:2c:31:2f:8a:ba:a9:
                    c5:94:99:2e:6e:38:71:b6:1c:4c:32:32:07:aa:b0:
                    f4:06:56:30:18:94:74:8a:d9:3d:2c:14:3c:4a:f4:
                    45:d8:58:6f:1f:03:0d:50:2c:62:f6:b1:de:19:9a:
                    df:1f:68:1d:22:db:58:8e:cc:3b:af:07:de:0f:86:
                    9c:f6:2a:07:52:57:af:0f:44:a1:2c:84:ec:9b:3a:
                    d2:2b:63:5c:7a:7d:1f:7b:91:77:d3:b5:71:33:78:
                    06:93:68:f5:94:0e:05:b0:4c:7a:7a:12:4c:a0:28:
                    03:65:12:c2:46:4b:a7:d2:0c:27:d5:20:e4:0a:64:
                    a3:e4:44:38:4f:21:5d:58:3d:c8:fb:8f:93:cb:4b:
                    06:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:21:C0:52:2B:C0:DB:04:30:19:3B:77:7D:46:54:EE:F9:DD:D9:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/814dcbf2-1251-3d71-a3fe-4f3347764cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.crl

            X509v3 Authority Key Identifier:
                keyid:8A:E9:AF:DA:7E:22:90:8A:D4:D0:93:36:7D:8F:CD:98:4A:AF:C2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:7c:9c:9a:ba:91:6b:9c:90:f8:09:65:c9:3f:28:35:1b:
         7e:61:d3:46:c4:c3:1f:b7:0b:96:f0:ed:e7:a3:b9:ef:1e:6e:
         11:5a:60:46:0d:77:77:3e:b3:54:ac:48:f7:e1:d3:7a:8d:7e:
         be:10:72:ea:2c:06:5a:5c:48:d8:fb:01:e4:55:2f:9b:b6:07:
         a4:c3:98:91:f4:b2:ba:e5:ec:23:b2:69:43:75:34:34:69:eb:
         93:c5:9e:d1:b2:fc:42:b3:2d:e0:88:c8:04:66:01:de:eb:7d:
         b3:6f:66:e0:47:62:d8:a4:86:03:87:ae:ca:75:e0:b3:94:cb:
         aa:fc:b4:a5:43:1a:86:33:60:26:f6:f1:57:fb:ab:10:29:52:
         e0:84:27:45:e9:20:7a:0d:0b:98:7c:97:cd:de:0d:92:28:64:
         97:18:be:9b:d6:f7:f1:58:1e:61:7e:d0:28:8a:06:2c:45:33:
         85:f9:72:f4:c8:9a:99:b0:d9:1a:cc:03:b8:ab:69:2b:46:b3:
         c4:d9:80:e7:dc:23:77:27:07:4b:a4:95:57:40:f3:61:24:fc:
         0e:dd:09:d6:29:b1:61:e2:26:b9:09:85:6a:c9:81:34:8e:c5:
         24:11:83:c2:e5:e5:3a:74:e6:0d:8f:6c:dd:83:a6:e3:bf:13:
         04:51:ed:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:22:00 2025 by rpki-client