Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/caaf565f-91cd-3865-a0f7-d23af4838303.roa
File:                     caaf565f-91cd-3865-a0f7-d23af4838303.roa (raw, json)
Hash identifier:          vP6X46F67vOHYCLsaJxHtnBR19Qh1/d0BLhjt8QyDSg=
Subject key identifier:   7F:B3:7C:1D:81:C8:72:F1:52:CC:02:A2:95:9B:AD:A4:42:9F:AB:FB
Certificate issuer:       /CN=7019d1c7-b32a-4a65-a135-234cde3c7680
Certificate serial:       010D0C9F4328584AA03D95EB499C879D01045920
Authority key identifier: 22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/caaf565f-91cd-3865-a0f7-d23af4838303.roa
Signing time:             Thu 24 Jul 2025 15:14:11 +0000
ROA not before:           Thu 24 Jul 2025 15:14:11 +0000
ROA not after:            Wed 22 Oct 2025 15:14:11 +0000
asID:                     8075
IP address blocks:        199.27.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a0:3d:95:eb:49:9c:87:9d:01:04:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7019d1c7-b32a-4a65-a135-234cde3c7680
        Validity
            Not Before: Jul 24 15:14:11 2025 GMT
            Not After : Oct 22 15:14:11 2025 GMT
        Subject: CN=f16523a7-b49e-4448-a557-f511ca843515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:68:e5:b7:dc:c5:5e:ab:3c:43:1a:d3:54:
                    98:b1:f0:a4:1e:0a:cd:ae:df:c8:6d:6e:b3:61:d3:
                    22:d3:c8:e8:b9:b0:60:09:71:75:99:fc:33:a8:41:
                    b5:8d:f3:cf:cc:ce:93:42:f8:23:52:41:14:ca:90:
                    a8:08:86:51:2d:99:53:c3:a7:02:59:7e:04:39:49:
                    24:a8:6c:9a:eb:ca:84:a7:1c:b9:98:96:e6:13:ec:
                    ba:89:71:bb:99:ac:80:e5:c8:de:d2:4e:68:4e:36:
                    ad:57:da:be:d8:9d:dc:2c:e1:60:a7:79:2b:b7:07:
                    03:48:80:a2:1d:18:87:7c:e7:dc:4f:ca:7e:1b:3b:
                    ff:1d:49:3a:8d:01:ac:78:3b:8c:df:92:1d:2a:47:
                    37:2b:21:1a:f2:e2:f6:73:b2:e7:62:04:96:e4:8c:
                    10:e0:2b:03:f9:2e:43:f5:3a:48:5f:5d:dd:b1:75:
                    31:2a:4b:62:9c:48:ec:cc:15:ca:37:50:c0:97:3f:
                    c5:80:f6:62:41:e6:0d:9e:6d:db:3f:61:09:71:2f:
                    71:9d:64:e5:4c:a3:1e:41:3b:35:02:f3:3b:e5:cd:
                    95:81:05:dc:62:57:97:db:9d:55:3e:95:ae:a1:f8:
                    73:2f:fb:5f:c9:6c:07:32:0a:8d:11:5c:ee:b1:2f:
                    90:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B3:7C:1D:81:C8:72:F1:52:CC:02:A2:95:9B:AD:A4:42:9F:AB:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/caaf565f-91cd-3865-a0f7-d23af4838303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl

            X509v3 Authority Key Identifier:
                keyid:22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6a:82:dc:18:82:68:c1:72:68:91:10:ab:88:ba:6a:b1:38:
         94:73:85:89:e6:17:b6:d5:7a:e7:1a:ab:19:39:69:2d:11:da:
         81:e2:e6:e9:95:53:eb:30:20:db:d1:d0:ed:be:71:6e:cb:c6:
         03:8d:65:ee:b7:6b:2a:c4:5d:27:7d:91:6e:e2:81:a9:d3:20:
         26:96:3e:95:8a:7d:a0:20:71:7a:44:56:f6:ab:a4:a4:f6:5b:
         9b:37:1e:a4:38:1b:9c:d9:9a:c6:bc:1a:53:28:70:b5:38:33:
         e8:a8:98:fc:03:e5:40:d0:93:e8:2d:d3:17:a8:89:d7:25:1e:
         cd:4c:44:34:e0:23:e7:2c:38:ea:58:3a:d4:97:34:d2:8e:1e:
         c7:74:80:ef:21:08:92:de:6c:71:d8:1a:cc:22:c0:72:82:03:
         57:58:69:a6:b5:1a:35:0f:ef:fc:e5:4c:21:0e:1d:9f:7f:c4:
         56:96:6f:f3:3c:96:9d:e8:8d:0e:a0:b0:ce:b7:f2:6f:c6:10:
         99:33:bd:8e:51:8f:69:78:25:70:09:9d:2f:ba:81:40:de:21:
         a2:74:63:54:94:7f:40:4b:06:76:13:92:9b:07:23:16:68:b2:
         7b:e0:1b:6a:d7:10:8d:e7:1f:3d:7c:40:98:03:93:86:08:21:
         d5:35:f9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:05:52 2025 by rpki-client