Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/eff67105-f705-3af7-ae6b-82a1033011ba.roa
File:                     eff67105-f705-3af7-ae6b-82a1033011ba.roa (raw, json)
Hash identifier:          4AAaVnXPBhJ3a0UExvvpVJRS8RYEn5RPdjcm/Tppotc=
Subject key identifier:   0F:E8:03:5F:A9:FA:A5:5B:1A:E5:16:1A:4F:29:A5:4A:A5:5E:8E:39
Certificate issuer:       /CN=3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d
Certificate serial:       010D0C9F4328584A9900C6018BC6C365EE392C80
Authority key identifier: D8:9E:DC:D7:20:00:0E:AC:D1:C6:40:9B:9C:68:96:80:C9:62:2B:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/eff67105-f705-3af7-ae6b-82a1033011ba.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     401285
IP address blocks:        209.182.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c6:01:8b:c6:c3:65:ee:39:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=98a29fa9-3b03-4c2e-88c6-e495735ce4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:d7:b8:90:34:8c:96:1e:d6:45:a9:0b:50:
                    16:54:c1:61:d1:15:8a:73:89:f5:f3:c8:ed:76:b3:
                    b8:3d:bf:19:a2:04:ec:dd:2d:ad:cf:84:b8:51:fd:
                    97:97:8b:01:c9:30:20:01:4c:66:e5:fe:34:e4:4d:
                    dc:4f:57:a3:62:ae:c8:71:5e:99:a3:3c:fe:7c:73:
                    56:f8:4e:80:08:2c:17:44:d5:25:bd:e4:3e:25:d8:
                    8f:b1:d1:f3:43:fc:e8:d7:2f:15:c1:64:3f:df:ff:
                    a2:34:66:de:62:40:a4:e3:0e:93:18:3c:f3:7e:08:
                    e7:a4:e4:72:02:23:bb:44:0a:52:24:1d:e8:3f:88:
                    ea:2c:6c:ef:68:e5:ef:1b:a5:1a:2e:a6:d6:c8:1d:
                    47:c3:8d:ad:9f:0c:1d:1a:4e:c7:6e:db:b5:23:63:
                    d6:85:73:02:68:3a:a8:6b:a2:0a:c6:50:9e:44:06:
                    89:fb:ce:50:9e:36:96:39:0f:36:7a:9e:33:81:95:
                    1d:41:9d:e4:5c:db:60:d3:74:57:8c:6b:2b:e8:b2:
                    12:77:73:f2:5e:00:77:98:05:fa:a8:b3:12:af:40:
                    6c:b7:e3:f1:bd:05:32:82:c5:65:47:f9:b9:1d:42:
                    65:fd:6b:07:b1:11:aa:1c:b8:74:23:bb:31:e0:3a:
                    ba:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E8:03:5F:A9:FA:A5:5B:1A:E5:16:1A:4F:29:A5:4A:A5:5E:8E:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/eff67105-f705-3af7-ae6b-82a1033011ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.crl

            X509v3 Authority Key Identifier:
                keyid:D8:9E:DC:D7:20:00:0E:AC:D1:C6:40:9B:9C:68:96:80:C9:62:2B:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:cd:b8:2d:c7:c2:31:c4:ef:fd:f4:77:a9:4f:f7:d3:18:05:
         24:7a:8e:4d:3f:9e:a3:04:12:45:d8:c6:50:45:a0:ca:25:9e:
         a1:6e:72:09:2b:65:bc:04:aa:96:b1:cd:94:c3:05:5a:a8:02:
         cd:bb:e0:46:c5:32:1f:c4:38:f0:77:e1:54:09:c3:cb:86:2a:
         bb:4a:a5:50:e2:8d:fd:ed:14:94:92:bf:df:f6:8f:db:bb:a0:
         26:a2:80:11:d7:25:fa:6a:1d:04:f2:81:f7:a4:a1:06:d7:2d:
         65:2b:7c:4f:21:bf:e0:c7:73:fd:89:9c:19:1f:a0:31:1a:42:
         43:74:69:7d:60:ff:2b:ae:50:c9:9e:29:97:43:97:cc:af:cc:
         c5:33:85:19:06:3c:af:eb:97:85:73:f5:d0:6a:ca:85:ed:d0:
         74:7b:4b:b4:61:64:ea:88:23:27:e8:92:f6:3c:4e:50:7e:62:
         db:b5:db:8d:4a:e5:71:5d:a9:13:3a:10:6c:71:7f:c0:df:ac:
         da:4a:e8:71:d9:64:d0:92:8a:03:38:9f:b7:0b:86:8c:86:95:
         93:d6:8e:ac:52:0e:0e:84:f5:54:fb:87:b4:c3:79:6b:3c:a3:
         b6:65:81:5b:41:03:40:bd:ea:7f:27:e7:a4:9b:b2:be:a2:9d:
         f7:d4:39:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:41:05 2025 by rpki-client