Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfb89ee3-c085-3c66-bffa-55be6e6bbf1e.roa
File:                     dfb89ee3-c085-3c66-bffa-55be6e6bbf1e.roa (raw, json)
Hash identifier:          ZaMZcDo62OQQX7doxTfca99sDIizpDQtFto4dyJsRQk=
Subject key identifier:   B4:32:FA:5A:65:D4:51:6C:FC:BD:C3:1D:C4:80:B0:FF:2D:98:BA:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA9C0D41DD405A0484CF98130
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfb89ee3-c085-3c66-bffa-55be6e6bbf1e.roa
Signing time:             Mon 28 Jul 2025 01:00:51 +0000
ROA not before:           Mon 28 Jul 2025 01:00:51 +0000
ROA not after:            Sun 26 Oct 2025 01:00:51 +0000
asID:                     36617
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a9:c0:d4:1d:d4:05:a0:48:4c:f9:81:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 28 01:00:51 2025 GMT
            Not After : Oct 26 01:00:51 2025 GMT
        Subject: CN=27f76b87-9ea6-4333-8a6e-87ea9acc353f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:69:b9:71:22:e3:bf:9d:34:44:89:33:31:79:
                    35:1b:e6:bd:2c:fd:e7:b2:96:2d:42:53:52:66:d0:
                    3a:92:ad:9e:8a:78:77:5c:df:32:a8:63:b7:0f:6d:
                    b7:ed:6d:a8:b5:8a:99:f8:28:74:e0:69:43:ba:1c:
                    75:c0:24:c7:7d:f1:36:f2:d9:59:46:69:19:78:93:
                    7f:99:ba:4b:f0:de:cd:12:3c:f8:ed:5c:76:2a:91:
                    a5:61:35:fa:5e:18:1b:f9:98:94:3d:89:42:c2:2a:
                    19:a1:e7:8b:d3:e0:90:be:3f:e8:fd:db:32:a9:42:
                    e2:67:5d:50:f2:17:cb:2f:0c:96:a5:7e:b6:bf:aa:
                    e7:85:0d:0b:cf:82:d8:67:4b:e3:e8:df:ae:b6:54:
                    6a:21:b7:07:4e:60:26:27:53:51:53:8d:a1:68:1a:
                    98:17:a2:ed:d5:58:83:b9:0d:cc:7d:e8:d4:77:3c:
                    95:16:3b:6e:14:90:90:af:53:9b:6b:0e:46:8a:2f:
                    dd:aa:62:51:a7:f6:06:b7:b1:56:5e:49:af:bf:05:
                    75:77:ce:30:b1:69:e8:25:3f:0e:7f:48:78:eb:91:
                    f4:c2:e0:d0:7b:d1:92:ab:b1:10:1a:fd:3a:00:b2:
                    88:34:e9:02:6f:c8:37:56:85:f1:61:1d:a3:e7:da:
                    09:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:32:FA:5A:65:D4:51:6C:FC:BD:C3:1D:C4:80:B0:FF:2D:98:BA:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfb89ee3-c085-3c66-bffa-55be6e6bbf1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:21:2f:64:57:0a:b1:27:27:9c:22:29:04:f9:2c:e2:c0:df:
         a7:47:57:82:1c:65:b9:5b:25:5b:59:77:41:71:1c:37:d6:c4:
         76:36:95:b7:01:a7:c3:a5:e2:39:d4:b6:3c:38:d4:aa:ca:98:
         b1:b7:51:88:2d:13:80:1d:f0:f0:54:ae:db:06:5a:c9:fd:bc:
         db:f8:9d:06:54:23:b2:70:97:2c:0c:1c:4d:70:cd:df:95:ca:
         a0:d6:4a:69:48:fd:b4:8c:0e:3b:c5:b8:e4:bd:00:dc:5d:84:
         e2:f7:b2:7b:91:8e:a6:9b:4c:44:93:19:d9:12:3a:df:3a:02:
         fb:4c:08:ca:b3:2f:51:20:ed:f0:97:ac:fb:0f:03:06:63:f9:
         4d:84:43:80:40:de:14:e5:5e:74:a7:6c:2b:b3:12:2f:a0:ca:
         9d:f7:f5:67:c6:dc:2c:bf:0c:10:0f:f8:43:56:01:c6:9b:1b:
         4c:cd:0d:3c:b9:1c:88:4c:e3:ac:1e:08:40:e8:24:b4:2b:49:
         1b:33:3a:30:b2:02:17:a4:76:ef:ed:dc:d4:c4:35:5e:68:63:
         fe:f8:d2:be:35:3e:00:f4:91:e0:be:e9:d9:8c:d9:2c:da:ae:
         d3:46:88:10:ea:24:fd:9d:f2:55:ba:a2:81:8c:0f:1c:af:7a:
         47:c8:f2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:17:14 2025 by rpki-client