Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7ed06f05-dd82-3a43-84f7-0175ed2b5c35.roa
File:                     7ed06f05-dd82-3a43-84f7-0175ed2b5c35.roa (raw, json)
Hash identifier:          8x78TU4ADfZSioIjzfW8byKNuw4IiFdCHfWgmAA/tso=
Subject key identifier:   E5:99:C9:52:0A:6F:F2:59:EC:54:14:BB:3B:FD:02:CF:82:7F:29:96
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584AA1621CE79073EB4CB4420940
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7ed06f05-dd82-3a43-84f7-0175ed2b5c35.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     398395
IP address blocks:        199.253.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:62:1c:e7:90:73:eb:4c:b4:42:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=e1743cd9-c1cc-4518-b067-d86a65291a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:d7:3f:b4:fa:9e:d8:7b:b8:f6:47:17:90:
                    cf:64:90:fe:b2:db:94:6b:8a:86:2b:33:78:64:d1:
                    ca:29:24:80:32:d9:87:23:0a:17:64:42:d2:aa:a2:
                    1c:26:e4:eb:d2:25:14:90:86:58:f5:aa:4b:5d:a5:
                    c9:c3:ff:e0:cb:ec:19:cf:d6:d2:0b:3f:63:c0:27:
                    37:18:d5:e5:1f:d4:ee:e1:f2:97:37:8c:8e:29:c8:
                    64:45:81:b6:ac:38:db:5c:76:38:19:5e:9f:22:d9:
                    ec:09:40:46:fd:dd:38:11:79:26:fc:7e:2d:b9:84:
                    90:bd:31:ba:5f:61:b3:25:72:e3:93:6b:b2:e0:0f:
                    1a:10:7a:be:4d:6c:0b:ef:bb:58:aa:37:c8:8e:68:
                    92:4e:55:e3:a5:96:30:bb:62:0e:8b:72:07:4e:d2:
                    f5:13:a9:25:6c:d2:8a:2f:dd:fa:6b:5e:51:01:99:
                    30:83:76:5b:4f:d2:83:7b:21:3d:06:92:58:d8:77:
                    7f:56:82:1d:de:a9:4e:60:67:b3:41:16:49:3e:1d:
                    92:67:1a:c1:c3:74:d5:a0:eb:d7:c1:0d:d1:e0:40:
                    c6:c5:12:03:cd:28:4e:87:10:9d:8e:35:88:8b:b3:
                    3d:62:82:d5:66:09:ea:5d:cb:d5:b4:53:de:eb:0a:
                    18:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:99:C9:52:0A:6F:F2:59:EC:54:14:BB:3B:FD:02:CF:82:7F:29:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/7ed06f05-dd82-3a43-84f7-0175ed2b5c35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.253.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e2:b6:76:10:c2:2a:87:df:30:a3:cb:15:90:60:79:b1:a3:
         25:1b:ef:e9:03:4d:36:bc:e7:c4:82:3f:96:db:42:aa:8f:0c:
         02:d6:7f:55:1a:59:31:81:71:2f:a8:15:2b:75:73:67:26:37:
         1c:a4:90:5d:9b:03:11:f0:2b:64:bc:ca:71:a3:6e:f0:8a:cc:
         1c:99:8f:1a:03:f3:74:ca:92:19:42:7f:87:65:12:76:86:8e:
         f6:21:56:5e:ac:fc:74:11:e6:5e:0b:14:35:83:cd:5e:56:60:
         00:98:2b:c1:46:63:84:1a:39:23:70:63:e1:3c:01:f7:ef:63:
         ae:73:6b:67:d8:5a:b7:ba:05:0c:9c:75:df:7a:47:d5:38:5b:
         24:e8:96:fc:aa:05:20:44:73:8d:68:f6:ae:f9:22:9d:86:10:
         19:a6:83:22:3d:89:11:08:ba:13:1c:ec:d5:98:28:55:17:da:
         d4:47:cc:a7:8d:b7:a6:93:2c:09:de:b7:85:dd:a1:a3:73:e4:
         c3:f4:7d:b2:7e:70:eb:48:e2:6c:91:94:10:21:9a:2c:fd:24:
         2a:0b:14:85:1a:c3:3c:35:a9:1c:9c:f2:db:d6:fb:36:48:1e:
         f1:af:3d:93:d1:d0:21:bf:65:ef:a5:81:53:26:0e:f0:8a:cf:
         01:76:6a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:19:20 2025 by rpki-client