Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5028175-5311-307b-b633-50ccd9ee601e.roa
File:                     e5028175-5311-307b-b633-50ccd9ee601e.roa (raw, json)
Hash identifier:          WCrZqB20OVHpqPszMeZybvPs6t/vtKlbwJWkg4rFAYE=
Subject key identifier:   C5:DF:F6:11:83:EF:59:17:62:31:C5:F4:8E:28:1C:F1:85:06:51:C1
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584AC2E10012AEE71F7B1BF12140
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5028175-5311-307b-b633-50ccd9ee601e.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     16696
IP address blocks:        199.249.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:00:12:ae:e7:1f:7b:1b:f1:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=a464fb31-a392-4366-b1f5-35746d9692e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4c:87:21:bd:b7:f4:ce:e2:36:59:3f:2f:e5:
                    cb:83:09:c1:06:b3:f7:72:4f:58:ad:ce:ce:e0:1a:
                    27:f6:e1:8e:14:8c:14:47:92:2b:90:ea:8f:b1:17:
                    a2:54:24:cb:37:8b:5d:3f:60:26:d2:9e:4b:e6:e6:
                    03:f8:af:5d:50:2d:93:c9:05:19:3b:11:a7:4b:eb:
                    53:a5:ec:bc:a5:d9:03:25:2b:54:b7:45:b4:43:b0:
                    4a:94:ee:49:73:bb:b2:0a:02:8d:dd:65:7d:e2:b5:
                    9c:a6:7e:05:fb:a3:28:85:a9:ed:39:70:64:db:b5:
                    b5:69:8d:f5:0f:7b:be:2d:3a:ec:71:f8:47:b9:28:
                    4c:36:b4:45:98:a8:ae:88:2c:85:49:b9:ed:cb:da:
                    db:eb:35:fb:b5:3d:42:dd:ef:6b:02:2d:0d:be:16:
                    8a:2b:a3:0f:62:69:b1:45:1d:22:36:a1:bd:1e:7f:
                    6d:43:60:7e:1e:30:b2:72:01:40:7d:1d:df:b5:da:
                    fb:bd:ed:e1:fc:87:03:1e:55:08:d0:14:50:1b:91:
                    47:ec:42:2f:24:4e:4a:ca:c1:4d:cc:56:e2:04:e3:
                    fe:90:48:c6:74:16:27:02:d1:d6:d1:63:f3:86:79:
                    26:f3:77:3e:1d:11:5d:25:ea:b3:59:70:54:61:09:
                    b9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DF:F6:11:83:EF:59:17:62:31:C5:F4:8E:28:1C:F1:85:06:51:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5028175-5311-307b-b633-50ccd9ee601e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3c:52:ce:b6:d4:e7:9b:e2:b4:36:77:b7:6b:77:da:76:98:
         70:fd:5c:f9:86:32:b6:4a:7c:9c:ca:7e:fe:6f:9a:56:2f:3b:
         31:78:2a:b0:15:7d:b6:ba:d5:d0:02:20:27:cf:24:e7:21:66:
         df:a1:67:f3:ce:b6:8a:7c:0a:83:23:1b:fd:75:a1:79:14:e0:
         1e:b5:49:1f:5f:9e:b5:03:a6:b6:c1:b4:89:e0:68:1b:ea:dc:
         02:ea:12:1b:d8:5d:3b:e5:e7:38:cf:97:d7:7f:c3:8c:c7:12:
         60:bd:db:40:02:33:5c:0a:8f:ae:d7:0d:6a:ad:9e:f5:ad:45:
         4b:a0:18:e6:8b:2e:54:d4:2d:16:ac:bd:a7:48:82:01:98:14:
         a2:73:9a:04:70:a9:8e:6a:61:2e:bf:f2:2c:8d:dd:23:68:a8:
         04:ea:a7:c6:ee:84:7e:4a:e5:d1:33:c5:98:ec:4f:8a:94:51:
         f8:b8:19:aa:50:40:8c:e4:d6:ff:88:68:f0:0d:6b:06:fe:41:
         4f:ac:fb:2c:cb:d1:57:b5:41:62:e8:c8:ce:8f:8d:a8:13:cf:
         72:52:9d:db:b1:55:43:e4:b5:92:38:56:50:5f:44:03:94:5d:
         2e:22:7e:c6:f6:b4:21:44:c0:07:1d:8b:1f:fc:84:c3:f3:34:
         b1:71:eb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:07:05 2025 by rpki-client