Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/e3c73815-5e87-3c85-aa0f-933a09ec04a9.roa
File:                     e3c73815-5e87-3c85-aa0f-933a09ec04a9.roa (raw, json)
Hash identifier:          p+OtyW0jyZ2h3f9o4mJdN0arJRpKGkABdu/6GrqHdFs=
Subject key identifier:   E9:E8:58:8D:35:27:3F:44:F8:FB:0D:28:19:05:E9:AF:01:50:12:6E
Certificate issuer:       /CN=3cd40041-6571-4f30-b76a-4746a4c2d957
Certificate serial:       010D0C9F4328584ADD666990041F4EE5C9640120
Authority key identifier: 0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/e3c73815-5e87-3c85-aa0f-933a09ec04a9.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     398646
IP address blocks:        205.207.255.0/24 maxlen: 24
                          2620:13e:500a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:69:90:04:1f:4e:e5:c9:64:01:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd40041-6571-4f30-b76a-4746a4c2d957
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=988d1406-25c3-48e9-b711-79eb718671a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:10:98:75:0d:3d:b6:d2:41:9c:3c:5b:29:70:
                    70:03:d2:a2:26:9d:09:46:49:15:19:65:b2:8d:d7:
                    05:14:92:5f:99:ca:72:b1:76:51:15:01:fd:6f:c4:
                    32:23:95:68:a0:49:3b:d1:f9:e5:c7:5f:92:e9:da:
                    f5:2a:05:4d:33:fd:be:1b:13:34:42:5d:46:f5:6e:
                    d5:79:7c:92:8a:1a:1c:e7:78:ad:98:22:3f:c1:c6:
                    d3:a1:50:18:c8:f6:16:81:14:f9:75:f5:66:2f:2d:
                    c5:18:5c:1b:e8:0d:5d:14:a6:67:c0:2a:bc:96:c3:
                    04:1d:02:e5:34:51:c9:9a:24:0d:08:98:f4:d8:aa:
                    b8:52:7f:a7:18:ef:a0:50:1d:04:c7:61:73:0f:24:
                    63:c9:0d:ae:83:a0:a0:2a:d2:ee:bd:28:8b:b5:5b:
                    96:09:98:04:88:b0:75:0c:5f:06:85:7e:47:89:4b:
                    ae:63:34:d3:83:ff:8f:94:c8:92:23:c2:98:7f:97:
                    f1:51:d2:6b:a9:67:ae:23:67:9b:50:76:c4:38:1d:
                    af:1b:c7:e7:25:46:71:6c:eb:c6:ec:82:85:73:27:
                    cb:71:c4:29:a3:b0:cf:d5:b3:13:7c:5a:58:8c:05:
                    f5:65:0d:5b:2a:b4:b6:5d:e4:b6:37:4e:cb:5b:dd:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E8:58:8D:35:27:3F:44:F8:FB:0D:28:19:05:E9:AF:01:50:12:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/e3c73815-5e87-3c85-aa0f-933a09ec04a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl

            X509v3 Authority Key Identifier:
                keyid:0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.255.0/24
                IPv6:
                  2620:13e:500a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e6:66:c3:86:58:a9:ea:cc:83:cf:53:5b:98:5a:42:47:e7:
         aa:6e:9f:c0:cd:36:3e:31:cd:68:3b:c8:2d:17:35:fa:b6:bf:
         ea:41:00:0f:96:4f:36:36:86:ed:85:47:45:a0:97:32:51:83:
         06:d0:97:88:bb:bc:13:1a:8d:71:32:cd:f6:8c:fd:93:a8:f5:
         8c:3b:7d:72:94:7c:11:af:ef:ae:33:93:a7:29:b6:6f:a4:cb:
         df:68:f3:26:1e:a8:60:ac:07:ed:ca:8c:7f:5c:5e:24:1b:59:
         5e:f5:eb:e8:75:3d:83:71:74:ae:fa:48:eb:da:08:c1:b4:1b:
         9d:4f:d9:d3:b9:76:b6:16:ba:58:12:f2:13:e7:a4:ae:6a:d6:
         4a:65:87:e0:e9:6f:10:c9:23:86:2b:97:e5:c5:96:ee:1e:69:
         bd:3b:3a:a7:37:2e:de:12:e6:f4:6c:23:7c:0a:3e:ea:12:58:
         60:b5:4d:a5:a2:82:b6:e2:bd:60:d9:b6:3e:41:35:b4:52:39:
         f2:a5:60:a8:bd:cc:b2:36:37:45:da:3c:6b:ea:a9:55:92:d3:
         a5:0c:05:bd:f9:4c:81:78:52:43:3e:59:03:d8:5b:e4:41:84:
         7f:8b:31:5e:f5:20:1d:45:19:ab:09:d7:69:c0:6d:5e:5c:bd:
         bb:6f:1a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:26 2025 by rpki-client