Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec76fda4-ab22-3074-9a9e-86c932a0db85.roa
File:                     ec76fda4-ab22-3074-9a9e-86c932a0db85.roa (raw, json)
Hash identifier:          0n0+ha3hjfl4bnWHu8A7hDBW8vAVZNZ+63/G7g0pGPM=
Subject key identifier:   D4:7F:6D:EE:6F:4E:73:C9:81:C0:9D:EA:AD:70:EC:1D:CF:18:45:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA9C0D77C57147B84ACAD7600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec76fda4-ab22-3074-9a9e-86c932a0db85.roa
Signing time:             Mon 28 Jul 2025 01:00:51 +0000
ROA not before:           Mon 28 Jul 2025 01:00:51 +0000
ROA not after:            Sun 26 Oct 2025 01:00:51 +0000
asID:                     396550
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a9:c0:d7:7c:57:14:7b:84:ac:ad:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 28 01:00:51 2025 GMT
            Not After : Oct 26 01:00:51 2025 GMT
        Subject: CN=85b1eb56-f217-4011-b8d5-9f8f3bdd8d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c6:42:08:fb:27:2a:39:22:dc:18:bf:06:49:
                    e9:0f:c6:0c:e1:62:b3:12:62:8e:15:fc:7d:d6:3a:
                    35:05:02:12:97:70:70:5d:54:75:d0:5c:be:6b:ef:
                    07:c8:8c:c0:0c:15:d2:95:c1:42:0b:c4:e1:c5:dc:
                    e9:77:9e:eb:22:05:cb:dc:1d:c0:a9:d1:ef:21:03:
                    e2:4a:49:87:9d:15:f1:8a:c9:1c:63:13:0d:e3:f5:
                    29:f4:77:28:3a:04:d9:f4:a6:d8:ce:0a:db:f7:ec:
                    cc:c6:a9:7f:ba:4f:11:b8:f3:bb:6c:d6:e3:63:32:
                    8d:02:09:13:84:96:2f:4e:ad:66:59:81:9d:cc:45:
                    de:71:f9:bb:8b:d5:54:83:64:83:89:6a:6e:71:71:
                    2f:55:a4:9c:b4:54:6d:35:e7:a4:55:9a:42:ac:a4:
                    ba:fb:7c:a1:c3:5a:c4:8e:d8:b6:ed:99:7b:0f:15:
                    ab:47:32:84:ef:5f:c9:8a:cc:e2:fd:c3:dc:69:da:
                    4d:b7:de:48:81:64:a7:a3:e6:a2:a9:eb:f3:79:a1:
                    5a:7a:51:cb:a7:ac:b6:61:65:0b:59:54:f0:67:ea:
                    93:6a:ff:ad:6d:09:cd:8b:39:58:32:e2:05:8a:72:
                    37:22:95:d2:72:f0:16:4f:4f:ba:ab:e7:18:98:43:
                    e1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7F:6D:EE:6F:4E:73:C9:81:C0:9D:EA:AD:70:EC:1D:CF:18:45:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec76fda4-ab22-3074-9a9e-86c932a0db85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:37:fd:69:ac:4c:af:1c:c4:f6:0a:a8:37:86:31:43:a7:4c:
         cb:1e:a9:b0:78:19:e6:c5:a9:58:75:a7:c1:0a:54:d0:e5:4b:
         9b:1c:41:7d:49:5c:82:b3:f9:c5:d7:dc:a6:7a:ab:ba:1f:da:
         50:86:dc:db:8d:0f:d6:af:db:15:ad:da:ec:8f:d8:56:d4:4d:
         3c:b3:6b:75:54:b8:d6:80:9f:2b:a2:cf:63:8f:46:d7:44:7b:
         14:d3:b8:2a:c8:93:c4:09:8d:bc:f3:1d:4f:7d:e0:7e:fe:d0:
         18:dd:49:d0:c5:3d:fc:6e:b2:a6:d2:e8:b3:7f:75:2a:8f:a5:
         d9:3f:78:8b:a6:c0:21:ff:a9:20:e9:ee:f0:96:18:ee:46:47:
         c9:94:88:e8:60:4b:4f:2e:67:75:e6:cd:a6:69:46:76:ad:f4:
         8c:0b:4f:a0:4c:b8:60:7d:ac:1b:e9:d3:66:31:93:d9:91:68:
         44:45:1d:1a:e3:3b:34:9c:4e:bd:f0:39:4c:e0:28:87:6e:67:
         fa:99:3a:1e:f4:5f:e4:55:53:2d:40:b7:31:c4:b7:31:b1:6a:
         ec:2c:b1:17:74:84:d9:6f:d1:c8:4c:84:a5:54:72:c8:be:25:
         67:bb:e5:16:d7:94:94:9a:33:90:8f:1b:2c:ba:90:70:2f:21:
         43:f4:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:13:37 2025 by rpki-client