Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e0830e7f-f232-3d91-9109-0a32c4167c72.roa
File:                     e0830e7f-f232-3d91-9109-0a32c4167c72.roa (raw, json)
Hash identifier:          XYHw56UB+mXA9G18PpzhuAMpcsbgjRonbY2hh3AJaus=
Subject key identifier:   E8:C9:1C:36:51:94:64:49:78:09:75:0E:A6:1E:A4:26:25:A6:7B:F6
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584B8BE2269AC031CDE0F0746CE0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e0830e7f-f232-3d91-9109-0a32c4167c72.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     3491
IP address blocks:        205.252.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:26:9a:c0:31:cd:e0:f0:74:6c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=2b037cd1-82ee-475c-97e4-f726b1b4d8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ca:01:87:1c:58:8c:52:d0:86:f7:79:c1:50:
                    e0:4c:27:88:c1:ae:f4:d4:11:4b:74:39:ac:f0:e9:
                    fa:ab:13:10:00:e3:f8:37:f0:f5:15:c8:25:70:d6:
                    29:30:d9:b3:bd:d4:24:cf:b6:55:69:e3:ab:97:58:
                    34:c6:de:5f:11:81:ea:49:f4:e5:bc:1e:71:60:2d:
                    d6:55:49:72:c1:d7:ea:9d:66:81:53:7b:26:35:0d:
                    3b:93:90:57:f8:45:b7:58:1f:39:59:84:6e:ac:67:
                    a2:a0:ee:9a:7e:d1:51:e2:9f:1b:ee:b7:45:78:64:
                    c2:80:d4:5f:ed:c9:73:c0:8f:38:65:33:f6:e5:1b:
                    54:4b:89:2f:b4:20:9f:4d:60:27:e5:c1:20:5c:90:
                    04:b7:f5:e3:23:f5:d7:16:26:6f:80:b4:e3:78:1d:
                    bd:e5:49:ed:25:23:d1:c3:8a:7f:24:59:c1:b4:6f:
                    9b:1e:f7:75:61:97:ce:91:91:32:d1:e0:f7:8e:04:
                    d3:57:0d:3a:a9:0d:3b:b3:94:12:5a:8e:ba:c0:47:
                    5e:da:af:73:9c:7f:de:47:80:39:6b:7b:e4:a6:b2:
                    63:6d:0b:35:9e:9a:79:0f:f5:51:8a:d1:42:da:aa:
                    d9:fb:05:db:ae:bb:ad:de:c6:7d:ed:d0:3e:23:8a:
                    97:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C9:1C:36:51:94:64:49:78:09:75:0E:A6:1E:A4:26:25:A6:7B:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e0830e7f-f232-3d91-9109-0a32c4167c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.252.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:8c:9f:fe:ee:33:42:bb:c5:69:6d:5e:3f:b3:c1:fd:6e:02:
         4d:ab:45:4e:d7:30:9c:bb:ce:09:37:b3:83:e5:f0:33:e3:50:
         fd:de:7e:19:f0:da:54:05:b7:91:7e:c6:b9:bc:12:37:a9:c7:
         43:7e:26:5f:97:60:fd:19:1d:ce:f5:6a:cf:31:49:e4:88:88:
         1d:c5:df:01:df:d5:c6:52:d9:47:82:4e:b5:ed:9a:fa:78:5a:
         17:ef:05:81:83:5b:28:77:44:0e:18:ff:4d:56:01:ba:49:ec:
         51:40:6e:2a:15:6d:e9:88:8a:aa:77:81:26:50:76:5e:ee:f0:
         9f:c9:41:ea:fd:48:b9:c2:4f:6a:bd:7f:93:87:ea:da:ab:e2:
         38:10:4d:90:79:e6:30:c7:86:6b:72:ec:0d:51:12:30:95:6d:
         02:c5:9b:c8:e2:e8:15:59:07:6b:e1:33:40:c2:04:f1:3a:46:
         f3:68:fa:26:5e:5c:1c:7d:eb:23:b9:f4:40:91:a4:b0:42:23:
         1e:b7:bd:f5:49:ea:e6:68:a6:a6:a3:13:51:80:cd:2a:72:07:
         cc:f3:d7:b2:28:57:d2:65:2d:4e:d9:59:68:3e:49:b9:0c:30:
         27:12:54:71:01:95:0c:ab:e5:f4:e2:43:bc:db:e4:88:0c:78:
         be:44:36:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:26:46 2025 by rpki-client