Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ee8fe3d8-ed30-3c51-933d-06467a468a26.roa
File:                     ee8fe3d8-ed30-3c51-933d-06467a468a26.roa (raw, json)
Hash identifier:          iv7aS0S4OvZ7BTJdQuOnSYPQa+BTWdCRk4UXXy8iGqo=
Subject key identifier:   76:C6:73:C1:AF:74:35:95:21:86:36:DE:2F:22:E9:A7:0C:A5:27:21
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584AB650D402F2D961AF88B3A910
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ee8fe3d8-ed30-3c51-933d-06467a468a26.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     30133
IP address blocks:        199.253.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d4:02:f2:d9:61:af:88:b3:a9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=f4cf98fa-c72c-4b4d-9ae3-9a09d8c42aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:28:2a:26:55:b8:8a:cd:f2:6e:ea:3d:df:
                    c7:54:68:a5:2c:9c:dc:5e:9a:10:57:c3:f5:f0:5c:
                    b8:3a:05:ab:b5:ac:33:f0:21:1c:46:f6:0a:4a:66:
                    36:89:77:3b:49:84:e2:7b:df:23:ad:e8:6f:d1:f0:
                    17:f1:70:3a:6c:76:e3:97:70:79:3c:08:f8:db:5d:
                    3a:9b:51:db:2f:73:ba:d1:e5:88:47:fe:26:dc:3e:
                    95:41:4f:1e:e0:ce:51:94:ff:35:6b:76:f5:81:eb:
                    44:4f:77:fa:5f:f9:a0:0c:0f:54:b1:74:90:6c:72:
                    7f:d0:26:85:a9:75:66:d2:bc:38:27:07:06:d8:27:
                    24:3c:59:74:5d:0d:cb:9d:8e:c7:f9:4c:32:33:8d:
                    01:10:12:86:51:6b:e6:2e:9e:80:db:5a:48:47:55:
                    a4:9c:e6:94:62:ae:13:70:2a:a3:bc:78:6b:59:c8:
                    38:c0:d8:ff:7a:5c:2e:e6:dd:47:ff:15:c8:5d:52:
                    e4:9f:3e:c7:03:42:08:47:20:55:2e:0a:cd:34:be:
                    64:9e:cf:57:11:72:42:6a:78:2e:f2:d1:b1:ce:f1:
                    79:b7:15:93:2b:f6:66:a7:08:23:01:5e:3e:34:7c:
                    48:91:5f:77:fd:dd:fe:ba:0b:0d:e6:02:55:b2:25:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C6:73:C1:AF:74:35:95:21:86:36:DE:2F:22:E9:A7:0C:A5:27:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ee8fe3d8-ed30-3c51-933d-06467a468a26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.253.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:d6:7c:9b:7a:a8:4c:65:36:65:ea:6b:2a:6d:3f:d5:e8:eb:
         1a:b1:bd:66:28:19:60:04:3b:7f:ed:42:51:3e:2e:b2:ad:a8:
         14:d8:a4:4f:31:2f:2c:b0:bd:20:98:9e:29:a3:45:2a:1e:32:
         2b:fb:2d:c8:d6:18:a6:c5:76:07:8c:48:41:e4:92:71:16:f9:
         7f:9c:0e:a0:40:4a:84:04:a0:cc:e1:7b:73:50:ed:02:15:42:
         e9:bb:82:60:44:e0:4c:7d:ab:f1:50:df:fd:d4:be:a0:e9:c7:
         4a:45:56:6d:b0:6d:f1:ae:e7:f1:86:14:39:32:4d:1b:8c:f8:
         d4:22:d4:71:a3:ee:b3:bb:cd:64:ab:67:93:d4:86:4b:69:41:
         2f:f8:8b:6c:61:d5:2f:a7:4f:ca:69:a8:b8:44:56:bc:af:44:
         f0:82:83:a6:85:c0:cb:d0:fc:f0:4b:58:1b:83:f0:a6:ad:02:
         2d:b1:60:9c:1c:69:c5:9f:ce:b3:ab:67:f9:75:91:cf:4d:4d:
         6c:27:6d:9b:0b:66:06:63:cf:da:37:fc:b6:d7:5e:14:a8:d6:
         4b:02:b6:b5:3c:53:d1:c2:92:72:59:87:46:4f:de:50:da:61:
         7a:d1:68:cd:e7:d5:4a:e2:63:fd:85:34:c7:47:16:3c:2f:0e:
         d0:8d:de:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:30:24 2025 by rpki-client