Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60c62786-ddbc-3455-a949-575b6c3f74e9.roa
File:                     60c62786-ddbc-3455-a949-575b6c3f74e9.roa (raw, json)
Hash identifier:          rlBf8LOlMQNA8bwIOYrAx9z6gr4TCBY066nC63AJBMA=
Subject key identifier:   D7:4E:C7:9C:A4:FC:18:76:9F:3C:19:9B:F9:B4:44:1B:4D:B5:EA:F6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA9C0D31F9D2B937D2EB67880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60c62786-ddbc-3455-a949-575b6c3f74e9.roa
Signing time:             Mon 28 Jul 2025 01:00:51 +0000
ROA not before:           Mon 28 Jul 2025 01:00:51 +0000
ROA not after:            Sun 26 Oct 2025 01:00:51 +0000
asID:                     397202
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a9:c0:d3:1f:9d:2b:93:7d:2e:b6:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 28 01:00:51 2025 GMT
            Not After : Oct 26 01:00:51 2025 GMT
        Subject: CN=091a64ef-78cb-4411-901f-fecfb7bc14d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ad:04:0b:da:b1:e9:7b:94:e7:4a:2a:d8:14:
                    14:51:49:e4:c7:e5:aa:2c:da:b6:fb:c4:27:dc:36:
                    12:68:10:f1:23:15:cb:b0:f7:4a:d7:ee:0f:41:9c:
                    de:b0:cb:b1:4c:86:62:30:4b:5e:5c:2f:ff:99:11:
                    48:c9:42:05:8b:d9:51:97:8e:96:23:ae:70:ab:a6:
                    fc:f1:f5:e0:55:89:b6:3c:42:c7:f6:7f:5d:81:2f:
                    5c:9e:83:8c:ed:3a:db:3f:c7:c4:a4:40:af:3e:be:
                    22:d4:23:87:09:63:8f:0b:84:b9:27:53:6b:9b:33:
                    ac:56:f1:93:10:4f:12:b9:08:76:27:8b:7d:cd:b0:
                    99:5e:8d:21:b8:b8:04:7c:36:41:94:d6:75:fa:37:
                    e2:f5:4f:d9:80:54:8a:13:be:4e:09:c7:1d:da:74:
                    10:ae:bc:c0:ef:1f:54:f3:b9:ba:75:ac:c5:cb:c9:
                    1b:7e:e7:fa:07:bb:b4:80:6b:4b:70:a4:6a:71:59:
                    10:3a:30:db:13:08:1f:b5:63:d6:a2:b6:3d:0d:b7:
                    52:e7:cb:39:f6:e2:2a:fb:1f:30:1a:b2:83:c1:02:
                    e9:1e:15:a3:c6:d1:f3:63:08:40:14:36:15:ee:26:
                    36:b4:fe:3f:a1:8b:fe:79:00:97:66:20:2a:4f:cd:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4E:C7:9C:A4:FC:18:76:9F:3C:19:9B:F9:B4:44:1B:4D:B5:EA:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60c62786-ddbc-3455-a949-575b6c3f74e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:c1:77:70:37:7a:53:41:c1:d3:75:97:0c:2d:7c:f2:5f:c3:
         fd:48:56:2e:79:d7:70:da:71:c9:ed:9e:bd:9b:a3:7c:8d:bb:
         ef:28:42:b2:6c:10:ea:b4:55:bb:74:6a:29:83:16:34:b4:c6:
         07:9e:77:b8:91:aa:db:c9:0d:f3:2d:be:91:c9:e4:a6:1f:e8:
         d5:1b:19:22:e5:6a:e9:08:2f:55:30:e8:da:7c:b4:f9:20:99:
         12:e0:e5:ef:ce:0f:d9:87:3b:ee:65:b2:56:2c:46:e8:ab:87:
         74:54:6f:ba:dd:10:74:56:7e:06:39:cc:1d:1a:e9:c2:1f:eb:
         34:54:3e:38:65:6f:84:e2:d6:ea:f5:b0:db:59:c2:3a:b8:e8:
         73:fe:a2:b4:e5:0f:94:b9:67:46:75:bf:62:a4:31:d3:c9:f2:
         0b:a8:de:29:b0:ff:45:79:41:be:0c:72:9e:84:ec:b6:31:23:
         55:b4:a4:e2:67:75:e5:fe:5d:bd:64:18:52:40:02:39:a9:ed:
         4a:9e:43:9e:74:b1:f3:f8:5e:10:a2:be:cd:57:4b:d4:da:c0:
         51:97:20:93:ff:10:3d:98:82:ef:ee:86:7e:32:a8:8f:58:3b:
         b4:95:39:4e:4f:95:da:19:fa:30:32:54:08:d0:e0:2d:4b:20:
         fd:53:eb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:44:34 2025 by rpki-client