Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee681e62-b53f-3d25-ab59-924f75337775.roa
File:                     ee681e62-b53f-3d25-ab59-924f75337775.roa (raw, json)
Hash identifier:          y0DBLFPA4dvi8zaxggPcg2Qe8IInOYLq3NFMkXrqHcE=
Subject key identifier:   EA:5D:0E:71:11:C8:36:87:8A:28:09:E4:15:43:FA:63:D3:84:10:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AF256A50D2027AB917D721A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee681e62-b53f-3d25-ab59-924f75337775.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     3855
IP address blocks:        199.172.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:a5:0d:20:27:ab:91:7d:72:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=eeb032f5-f105-4f70-bc53-37e5d9bdeac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:72:8e:3a:3a:c9:d9:cf:f1:f8:42:9a:41:74:
                    93:b0:ed:89:b3:83:0f:df:c5:92:91:6e:79:b6:9c:
                    54:82:24:d5:09:6a:46:4f:d8:63:e2:0f:01:49:23:
                    34:ef:ec:ef:54:a0:60:fa:3f:1f:f4:2f:5f:9b:30:
                    f0:2f:5f:43:f1:96:d7:78:c8:be:c9:a6:46:68:83:
                    80:5c:26:61:37:c0:ce:cf:47:e2:ad:1e:fa:1c:60:
                    98:03:be:ed:19:b7:4d:86:b8:bf:72:25:f1:88:c4:
                    f6:28:ea:12:82:77:1a:8f:63:a1:d9:33:c5:43:33:
                    0a:55:2e:fb:63:18:53:99:a9:be:1d:fd:04:2f:36:
                    e0:5d:da:c8:50:d5:d2:0f:af:84:00:3f:98:e0:6a:
                    82:5a:9f:a1:2d:a5:85:6d:05:b1:ce:85:e9:f8:84:
                    47:89:44:63:1b:b5:05:0c:6e:0c:ad:0f:5a:d2:a1:
                    78:cf:d3:73:05:d1:e1:57:c4:e4:dd:59:2c:b1:7c:
                    12:51:10:df:f5:c4:60:0a:c2:86:d0:c9:ed:f2:af:
                    00:81:e9:ca:60:98:2e:d5:4f:ed:8d:30:8c:d5:38:
                    61:ef:c2:89:47:ed:d2:50:98:65:fc:ce:8d:25:24:
                    1a:55:5b:3a:41:fd:d3:e1:b3:b9:98:a1:c7:26:f6:
                    0e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5D:0E:71:11:C8:36:87:8A:28:09:E4:15:43:FA:63:D3:84:10:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee681e62-b53f-3d25-ab59-924f75337775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c9:8b:5e:97:0d:51:0a:b5:38:31:8f:4f:93:a1:39:b1:3f:
         2f:47:cc:fb:f1:c9:6b:1d:c1:db:e5:b4:9b:b5:97:8a:3e:2f:
         68:ea:30:5a:77:48:0a:22:76:f5:56:fc:9f:67:3d:09:0a:cc:
         4a:35:38:5a:69:a5:50:55:19:40:28:00:bd:71:6f:b5:91:8d:
         8e:e2:e0:16:0a:43:09:e6:86:96:7b:16:dd:f7:69:8b:68:d1:
         94:ac:35:fc:0f:89:df:71:5b:f3:e4:ba:bf:8f:6a:10:fc:a1:
         43:cd:98:4f:d7:c3:58:c6:29:ae:eb:a8:1e:60:68:e6:06:55:
         c8:f1:72:cd:91:b9:35:1e:cc:83:ad:ee:c6:d0:41:7f:4e:32:
         10:86:bf:43:0f:f4:ce:38:cf:57:79:84:dc:af:dc:d4:a7:c8:
         a1:c8:2f:53:ed:69:ef:70:c2:91:fe:ae:18:90:e5:b2:e2:cc:
         c8:d5:4e:87:c2:45:a4:8f:f4:9f:d9:70:d4:bb:38:3f:74:a3:
         fc:b2:ef:d3:a7:50:40:a4:ca:21:51:48:08:dd:34:2e:b7:03:
         8c:36:26:fb:2f:88:5a:40:02:93:61:79:c1:b3:73:64:58:df:
         86:79:18:33:ca:5d:ee:48:f9:7e:f0:0b:96:96:91:4c:6f:24:
         b6:14:5d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:16 2025 by rpki-client