Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5885067-49f4-3a7f-bf2e-4f3c31808739.roa
File:                     c5885067-49f4-3a7f-bf2e-4f3c31808739.roa (raw, json)
Hash identifier:          3Ulp95Lrv/0TbS8auhwnYWKmJfcBvc8jmDGMLNDGBLE=
Subject key identifier:   2F:89:45:7C:A6:53:4D:85:EF:B4:7D:22:0D:80:A1:81:7E:50:BB:E4
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584AA85BB28D64E0FC4745B03810
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5885067-49f4-3a7f-bf2e-4f3c31808739.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     25899
IP address blocks:        199.182.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b2:8d:64:e0:fc:47:45:b0:38:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=1c0b03a2-1aa2-4af4-94af-f4cb803407f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:1a:5d:5d:7d:36:c1:f7:dd:73:3b:e8:13:
                    bd:0e:8c:a2:1b:c0:2b:7b:5d:fb:a6:10:1a:d8:bb:
                    f5:c6:12:38:ab:f6:97:f0:c9:64:fb:e3:c8:64:bd:
                    e7:8c:ef:9d:61:6f:80:f8:5f:87:e6:82:4b:4d:a6:
                    f5:50:aa:66:fd:27:86:d8:d4:73:97:f4:d1:c5:a2:
                    80:c5:bc:3c:00:a7:a7:57:45:8e:49:e3:93:fe:84:
                    56:f7:f7:d6:84:dc:ef:92:d1:2a:a6:ef:bc:1f:40:
                    35:36:a5:ae:3c:a6:8a:35:6a:1f:13:2e:b5:eb:6e:
                    52:f7:35:67:6c:bf:46:da:fe:6d:a1:0b:d5:51:ed:
                    6e:89:8f:bc:6b:a2:67:2e:13:60:ee:c1:6c:af:14:
                    79:d9:b7:0b:3d:4d:8f:ff:73:cf:b1:c2:f3:2d:26:
                    ff:97:3c:47:67:0a:00:1f:88:86:b9:c3:5d:8e:66:
                    47:20:5f:ef:a9:89:d1:69:c5:59:3d:74:d0:d3:59:
                    96:73:6a:8c:78:8b:c3:66:f6:63:c1:01:75:70:bb:
                    60:01:e1:b9:5c:9b:7d:93:a8:1b:24:9c:02:e1:6a:
                    52:23:39:08:22:5c:56:02:3c:ea:5c:51:db:8b:3d:
                    13:a7:77:1d:94:76:86:4d:33:99:f0:6a:38:59:88:
                    d7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:89:45:7C:A6:53:4D:85:EF:B4:7D:22:0D:80:A1:81:7E:50:BB:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5885067-49f4-3a7f-bf2e-4f3c31808739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:b2:16:20:4f:96:f4:50:9c:fa:55:ff:03:c3:b8:97:90:16:
         26:84:52:8c:83:28:83:25:4b:5e:7f:23:b2:50:e0:91:3f:14:
         e4:78:d5:80:88:24:ee:e0:2a:fb:ad:9a:f4:c9:77:9b:0e:1c:
         a7:6a:51:53:9d:8a:69:41:83:34:aa:05:a6:aa:8a:db:8c:82:
         87:77:52:0c:f9:e7:fe:d3:75:15:82:e7:30:6b:c3:b6:8c:a5:
         d1:a0:a7:59:fc:e4:dd:6a:49:b1:8f:4a:ae:84:cf:29:0e:31:
         36:49:87:35:b0:8b:c6:8c:73:40:57:48:e8:82:ae:18:e8:95:
         4d:67:e9:f6:95:7c:2b:75:41:b3:74:88:d1:f3:c0:2d:6c:19:
         ca:b2:dd:94:09:7c:e3:fd:a4:88:9d:67:92:78:22:2c:96:9c:
         95:dd:cd:36:a7:65:92:41:3f:b7:0b:3f:d7:06:57:50:be:f8:
         e1:40:f1:f3:45:61:28:c5:aa:e0:7c:05:29:f7:08:9e:83:bb:
         9e:14:96:1f:7c:07:00:e0:aa:ef:ae:20:57:84:22:ce:2f:78:
         f9:bf:4b:21:61:c1:4a:30:94:d5:e6:ad:53:29:99:b8:a4:56:
         20:9e:69:66:9c:1a:16:55:49:02:db:ac:d2:03:ff:90:a9:e1:
         e3:84:16:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:46:02 2025 by rpki-client