Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/8a8e24bb-1625-3cea-badd-63b695b869b5.roa
File:                     8a8e24bb-1625-3cea-badd-63b695b869b5.roa (raw, json)
Hash identifier:          AvmBdGSyCJit3Gj6CRyvpgbnV+6qsXkQcELglXJBqhg=
Subject key identifier:   4D:D2:86:A6:FF:D0:6C:BF:E8:D8:88:F8:49:99:58:56:27:AC:5C:D8
Certificate issuer:       /CN=4e2aa2db-3714-4200-b480-469b49ebedb9
Certificate serial:       010D0C9F4328584A9BCB71AD66DE77974F5F1400
Authority key identifier: 77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/8a8e24bb-1625-3cea-badd-63b695b869b5.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     397913
IP address blocks:        206.225.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:71:ad:66:de:77:97:4f:5f:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2aa2db-3714-4200-b480-469b49ebedb9
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=50dbe04a-27b7-470c-a2c8-59b5d1b0bdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:68:c8:f1:66:1c:39:b0:bd:96:bf:24:e4:
                    9b:e7:f3:2f:9d:4a:6b:e1:5f:3f:74:56:f7:03:86:
                    f5:3b:e9:c6:ab:bc:a8:0f:f5:4f:99:be:c6:7a:29:
                    30:4f:b3:0a:5d:43:15:83:e8:3f:26:e9:2c:f9:40:
                    1a:7b:91:20:32:4c:c3:6f:5a:34:46:76:28:2d:c6:
                    f9:d3:2a:7d:d9:2e:84:c9:e3:73:e4:8b:1f:f2:3c:
                    f0:c8:3f:29:3f:1a:d5:07:46:c9:ae:77:a1:2f:4e:
                    cb:1f:fc:15:ad:5e:7e:6d:f4:8e:f9:a3:9d:f9:98:
                    ac:54:7d:6d:e9:5c:73:3d:53:22:49:1d:cd:42:01:
                    87:e1:30:0c:78:75:39:99:c0:91:b8:a7:73:71:09:
                    2b:2a:27:cc:2c:da:b2:94:73:30:26:2f:dd:7a:c1:
                    a5:26:d4:3c:6f:b1:db:83:49:32:b4:ff:bb:0d:36:
                    ab:b6:72:e8:00:ad:4c:b7:be:d6:49:45:e9:9c:02:
                    5e:bc:c8:ce:25:46:c5:f2:aa:d0:2c:f6:46:2e:bb:
                    43:9c:97:b4:8d:8e:1a:65:fe:17:47:25:d1:aa:ab:
                    00:e7:c2:19:69:ef:3e:bb:41:d2:25:25:7d:f3:95:
                    f4:35:fc:c3:d0:42:1e:37:d1:ff:89:da:d9:39:d8:
                    c5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D2:86:A6:FF:D0:6C:BF:E8:D8:88:F8:49:99:58:56:27:AC:5C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/8a8e24bb-1625-3cea-badd-63b695b869b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl

            X509v3 Authority Key Identifier:
                keyid:77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:73:81:42:eb:69:4e:56:a3:c8:32:cb:83:50:9e:56:1f:cc:
         bc:fb:14:78:74:a5:03:26:34:d3:b2:a4:f3:d1:3b:50:24:e1:
         d9:b3:78:6e:7f:b7:a7:66:94:c7:c1:24:21:5a:e3:27:8f:f4:
         a9:93:45:fa:dc:72:e2:95:a7:4d:41:f3:2e:32:a0:87:07:28:
         d6:47:8b:f5:cc:7a:ff:11:56:f7:ae:4d:df:e4:64:7d:36:63:
         fb:a8:7c:2b:49:31:62:cb:ab:ce:47:14:80:7b:7f:a6:85:1e:
         d9:3b:dd:a6:27:e9:35:52:f0:2a:c4:f7:06:28:19:47:ed:c5:
         16:e6:40:b4:66:5a:5e:d2:5a:ae:14:be:dd:7c:a8:82:cc:56:
         59:f9:31:f3:b9:08:94:9e:b7:47:41:b7:cb:d6:24:44:82:f6:
         7d:71:4d:e4:9a:57:3f:8e:da:ed:df:d1:44:64:d2:c9:34:c4:
         5c:af:4d:be:a5:b6:c5:b0:38:7f:4d:64:68:64:49:19:81:63:
         8b:24:0a:40:1a:15:bc:27:da:84:1d:ff:54:58:b0:74:7d:96:
         4a:4d:03:b0:86:19:75:1a:a3:0c:a1:14:d6:b1:4a:d8:8e:cc:
         4a:bc:4f:fd:94:f5:1b:32:53:5e:d9:d1:df:11:16:53:5d:b2:
         2b:8a:fb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:48:21 2025 by rpki-client