Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/328e9cd1-913a-34b6-8a22-f43efa6a3758.roa
File:                     328e9cd1-913a-34b6-8a22-f43efa6a3758.roa (raw, json)
Hash identifier:          5fQCCecGOa4x4CTXlZH5JCPyA9F6CFjRsxwxJ36C1NM=
Subject key identifier:   6D:87:9D:BB:0C:2D:52:0C:D2:A4:09:57:F6:3B:FA:38:C6:42:B0:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA9C0D1DAEA09D33FBDDE3C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/328e9cd1-913a-34b6-8a22-f43efa6a3758.roa
Signing time:             Mon 28 Jul 2025 01:00:51 +0000
ROA not before:           Mon 28 Jul 2025 01:00:51 +0000
ROA not after:            Sun 26 Oct 2025 01:00:51 +0000
asID:                     396554
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a9:c0:d1:da:ea:09:d3:3f:bd:de:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 28 01:00:51 2025 GMT
            Not After : Oct 26 01:00:51 2025 GMT
        Subject: CN=514f5f7a-537c-4619-aea2-1d73a0246756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1f:f2:da:a3:25:31:e9:8f:c6:4f:99:a3:b9:
                    81:e9:78:7c:2a:91:15:0c:e8:0e:00:5b:f5:1c:03:
                    5a:b7:1d:61:d4:68:61:2f:de:d5:53:6b:c9:48:b3:
                    6b:7d:80:b1:05:c7:37:bb:35:7b:15:13:fc:ca:94:
                    5e:ff:ba:a2:3e:73:24:fa:f5:b5:c7:28:03:b5:cc:
                    89:39:ff:90:cd:91:24:d7:01:ff:5f:76:2d:72:8c:
                    16:85:0c:86:ee:c7:6f:88:50:05:02:11:d2:16:02:
                    fe:d5:61:7d:1a:8e:8c:cb:8a:6f:b5:f8:c1:9b:2a:
                    9e:f5:11:25:5e:c5:85:63:be:f6:24:05:2b:56:a3:
                    7a:15:71:05:0c:4f:b1:1d:2e:cf:9a:37:d4:ec:ae:
                    2b:42:dc:19:2b:0d:58:7d:4a:e4:51:55:31:07:6b:
                    d2:0b:2b:e0:7c:c8:a4:01:8b:60:32:88:64:a4:50:
                    42:ef:ca:7e:33:21:88:8e:29:17:d8:1f:d3:94:c2:
                    f2:7b:4d:e5:ff:45:61:d1:4b:10:e7:26:1f:1c:58:
                    c1:81:e1:e7:ab:77:82:27:0a:2d:5a:41:3a:75:7a:
                    8d:b6:2b:5f:b7:46:70:1d:99:c1:7a:61:e1:b4:8c:
                    bc:13:67:65:7f:f7:a2:ac:fd:5c:b0:7f:56:38:ec:
                    42:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:87:9D:BB:0C:2D:52:0C:D2:A4:09:57:F6:3B:FA:38:C6:42:B0:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/328e9cd1-913a-34b6-8a22-f43efa6a3758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:26:e0:b6:e8:ba:f3:bd:3b:6f:f4:06:f2:5f:3f:b2:72:e7:
         78:17:53:30:fb:bc:74:f0:df:98:d8:a8:ab:f7:0a:f9:2e:94:
         a7:1e:84:a1:f6:e8:16:45:9c:83:93:0e:cd:51:67:c7:88:c1:
         45:0f:cf:86:08:f1:bb:05:08:2c:10:cc:62:96:d6:11:b4:59:
         d4:cf:f3:c7:1f:1a:06:d9:60:ab:dc:08:c5:86:ce:33:66:ea:
         66:8a:68:b4:23:dc:4c:99:e3:7e:6b:e0:5b:9a:94:d9:2c:95:
         e7:66:9e:2d:c9:20:82:14:9d:08:79:3c:ca:c0:40:b3:b4:77:
         b1:e8:23:b7:55:2e:b8:cf:4a:dd:e7:65:ae:65:ff:b1:12:d0:
         68:9f:1a:dd:0f:3b:cd:2a:52:3c:e8:72:e8:3a:c2:41:e4:24:
         1d:b2:b0:23:e6:8b:a5:87:50:bb:56:2a:e6:76:69:37:24:a5:
         94:ee:3e:28:23:2d:7c:40:ca:20:6d:71:8e:a3:92:2d:db:db:
         85:db:af:b1:f7:23:59:64:01:b5:50:a9:d5:5b:51:b1:dd:9b:
         6d:67:a3:89:f7:43:40:dd:9e:80:2b:ce:68:77:4c:2e:ec:f5:
         10:3e:56:1e:52:26:92:26:31:e3:41:79:b2:fe:ca:b0:61:08:
         f6:00:4e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:19 2025 by rpki-client