Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/29247b77-b19f-3449-9456-b1d4b5bac0ae.roa
File:                     29247b77-b19f-3449-9456-b1d4b5bac0ae.roa (raw, json)
Hash identifier:          SgmibR9guH4/u1JCMyXyULncoCWEflToRdBs0+GOVNU=
Subject key identifier:   7A:31:D6:84:F6:72:27:46:11:68:9F:52:0D:97:B0:17:EB:C6:3B:59
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584AF0F149D79DF280C63125A600
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/29247b77-b19f-3449-9456-b1d4b5bac0ae.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     25605
IP address blocks:        198.41.8.0/22 maxlen: 22
                          198.41.8.0/23 maxlen: 23
                          198.41.8.0/24 maxlen: 24
                          198.41.9.0/24 maxlen: 24
                          198.41.10.0/23 maxlen: 23
                          198.41.10.0/24 maxlen: 24
                          198.41.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:49:d7:9d:f2:80:c6:31:25:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=9f134858-dc7e-4f21-87c9-de538156c0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6b:72:52:d1:ec:57:6a:37:e1:4d:b6:3e:ff:
                    c0:fb:32:18:f5:fc:86:ee:6b:7a:17:35:08:cf:8c:
                    90:8e:fd:a7:41:a9:8c:07:56:64:61:5a:95:e3:2c:
                    42:95:c9:64:b5:0e:89:ac:a0:fc:b3:ae:e9:2a:b2:
                    dc:4e:a2:01:8b:61:dd:fc:db:8a:66:d2:fd:fc:6f:
                    26:fd:a3:4e:ce:40:b7:b3:24:94:f0:bb:95:42:9e:
                    55:c8:c1:3c:7f:ff:5b:79:7b:67:e3:4f:a7:18:fc:
                    ec:ef:14:fb:c5:5b:e6:18:82:2f:98:8e:6a:b0:09:
                    c8:a6:c3:8a:18:e8:f0:97:31:d7:7a:c2:6b:a8:a3:
                    cb:69:18:ed:e8:c6:64:eb:1b:aa:95:81:ec:41:39:
                    75:6b:58:7c:fc:8b:cb:b9:de:ab:78:8a:76:dd:5c:
                    11:74:19:68:18:a0:a6:15:b9:f7:df:19:5e:30:6a:
                    58:4e:74:82:4c:68:14:77:e7:f8:f2:ea:fa:07:8b:
                    11:9c:17:40:2f:be:63:af:9b:e8:d2:b2:ed:3c:74:
                    fa:33:4b:0d:c4:99:cd:d8:ab:57:a2:46:06:9c:ee:
                    c5:d8:a8:84:e8:46:35:95:f7:a6:fa:50:a9:4e:62:
                    c5:3b:b4:e4:6e:48:9e:d6:e4:a2:55:28:74:97:1c:
                    67:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:31:D6:84:F6:72:27:46:11:68:9F:52:0D:97:B0:17:EB:C6:3B:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/29247b77-b19f-3449-9456-b1d4b5bac0ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:98:54:bb:ec:a9:94:ca:9d:1a:39:7c:d6:3f:82:84:0b:64:
         25:21:8b:82:8c:dd:d4:38:85:56:9f:4f:96:47:e2:01:3f:e5:
         e9:ea:b1:f6:a4:13:28:5d:53:5f:1c:a7:f7:80:e9:d4:62:18:
         56:3f:ae:7d:01:df:7a:9b:7d:c5:e9:79:59:32:2a:a4:e3:fc:
         1f:a1:86:61:a0:63:b4:b4:35:ce:f0:73:41:37:41:4e:64:80:
         65:bf:75:5a:e2:93:cd:b7:85:3f:79:53:9b:ea:6a:06:e5:fa:
         09:a2:2e:bc:de:cb:31:3a:be:9d:a4:03:04:23:92:51:0f:0b:
         4e:dd:bd:62:65:28:14:41:57:b8:2f:68:83:62:0a:1c:d1:43:
         a1:33:6b:8f:83:8a:ca:03:3b:d4:44:4e:7a:0b:69:b7:d4:b4:
         c1:a6:ba:91:48:e6:81:9d:78:8f:53:32:ea:de:74:d0:85:53:
         d0:0b:81:20:ca:d1:bb:b4:fc:1d:d5:46:f4:0d:a1:f1:14:51:
         02:f1:88:0e:0d:81:af:d2:6d:a1:0f:fd:50:2a:7e:ca:7d:aa:
         97:3e:64:da:0c:4b:b4:11:0d:56:ec:a1:6f:ab:88:13:cb:69:
         50:75:a3:dc:c3:a5:d9:0e:ce:f5:83:cd:67:43:c1:09:e9:72:
         0c:fc:96:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:45:26 2025 by rpki-client