Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/f2911a88-5743-3066-bb25-16aad110f46f.roa
File:                     f2911a88-5743-3066-bb25-16aad110f46f.roa (raw, json)
Hash identifier:          8cHNICOFpoEvyVTDxMkapIW5sOLh4qXdycqTkHADp8c=
Subject key identifier:   33:01:D9:29:A9:8B:7F:09:B4:13:81:3C:33:B9:D7:A3:80:DA:97:D7
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584AC5AB8D356EF70B99F640EE40
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/f2911a88-5743-3066-bb25-16aad110f46f.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     394926
IP address blocks:        205.157.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:8d:35:6e:f7:0b:99:f6:40:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=37e5bee1-4e1a-44c8-bf53-2133f89ec7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:69:4c:be:5b:de:2b:0e:4f:02:09:37:7f:
                    d8:71:54:13:21:42:14:62:89:50:9c:b3:60:5c:48:
                    ab:ec:49:ad:b6:73:5f:b6:92:92:2f:dd:7d:1c:34:
                    f2:3f:de:dc:ca:75:ce:63:f3:e3:bc:f3:e3:da:f9:
                    2c:eb:9f:e9:49:0a:6f:2f:15:bc:c0:48:50:c2:02:
                    97:3e:39:2d:68:35:e8:c1:b8:74:e6:bd:d3:69:95:
                    0c:6c:20:fc:66:4d:0f:f7:85:9c:2e:b6:5f:b8:18:
                    cb:2c:08:26:8c:8d:76:95:3d:1a:d1:a1:6a:a1:8e:
                    da:9e:87:00:4f:9f:c5:e0:91:71:2e:10:8e:49:8f:
                    22:df:87:79:d6:af:ee:74:8b:ca:70:46:37:1d:23:
                    42:d6:77:db:98:36:bb:e5:1f:53:65:a8:b2:8b:bd:
                    f9:c3:96:c4:72:da:e5:a1:a1:0d:ba:51:38:e9:1a:
                    c4:bb:c0:56:a2:ee:11:eb:23:db:cb:90:36:82:52:
                    d5:a3:a6:59:75:10:2d:ac:9f:92:7e:4f:39:41:8c:
                    5d:7f:f3:13:1e:e1:1d:81:4f:71:65:3e:7b:e7:8a:
                    3c:7a:f0:77:cb:78:5f:b7:ae:78:59:4c:46:bf:ab:
                    df:33:20:b6:d2:18:aa:60:1f:f7:95:e5:47:5b:c7:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:01:D9:29:A9:8B:7F:09:B4:13:81:3C:33:B9:D7:A3:80:DA:97:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/f2911a88-5743-3066-bb25-16aad110f46f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:82:84:75:6a:cd:74:f5:f7:0f:e4:b0:0f:95:ee:e8:2c:7d:
         a6:90:ac:26:96:cd:2a:7c:59:f3:6d:1b:9b:b1:9b:6b:9a:99:
         b5:7b:20:fc:81:d1:e1:e7:68:08:2d:e6:ee:5f:f4:93:97:36:
         21:bd:d5:54:61:1f:72:2c:57:cf:bc:cb:9e:5b:f6:69:78:66:
         26:1d:19:dd:48:c2:0c:07:09:10:6e:79:2b:33:31:60:fd:e2:
         4d:19:12:ee:37:28:3e:5f:97:5d:5d:99:45:31:b7:31:59:93:
         a5:f0:dc:b4:79:b6:48:5b:33:c0:95:ca:8b:47:85:51:df:1b:
         4b:9f:ae:1a:d7:52:ee:e4:d9:e9:bf:45:72:7d:3f:c4:85:67:
         6f:55:c7:ae:91:b6:d0:b3:d2:51:5c:04:c4:92:fc:41:96:ab:
         a5:ca:d0:56:ea:c5:cf:cd:49:1c:a7:a3:60:88:01:d3:e0:eb:
         de:13:76:46:90:4d:77:3b:26:d1:98:91:fa:20:75:82:e0:d8:
         78:2e:a6:56:2a:2c:2c:22:75:d7:5e:a7:57:4a:11:66:04:63:
         f1:f3:e2:71:f3:14:cc:b1:fe:8b:56:a2:e0:5e:ca:2f:04:7d:
         08:ff:95:ce:e4:3d:e9:bc:4b:31:88:5e:a2:d3:46:cf:4b:52:
         37:bf:73:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:58:15 2025 by rpki-client