Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8e7b5787-48fe-38de-a161-771a37574b62.roa
File:                     8e7b5787-48fe-38de-a161-771a37574b62.roa (raw, json)
Hash identifier:          +/4CeaIUlEcHJuolp1WpME7DV+0hT2W+wt89geh/pXk=
Subject key identifier:   39:3C:91:10:78:0C:91:97:54:30:4D:97:73:DF:93:21:DB:DC:FE:05
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584BA39CF4A20541B3D7D98F3410
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8e7b5787-48fe-38de-a161-771a37574b62.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     132819
IP address blocks:        205.177.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9c:f4:a2:05:41:b3:d7:d9:8f:34:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=d87428ef-d13c-4f49-b51f-c1a23645e9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:3e:1a:54:2e:c8:2c:4c:0d:1e:8d:b3:b4:
                    9f:0e:58:f0:b2:13:3c:78:6e:98:b1:71:6e:5d:89:
                    38:ad:7b:cc:be:71:dd:ab:c7:12:96:b3:d6:c0:3b:
                    f2:1d:ea:0d:30:8c:0f:5b:d2:12:03:4b:23:90:95:
                    32:ae:94:5c:eb:ab:72:61:3c:7c:1e:99:b4:d7:4a:
                    ce:ee:a6:a4:5f:44:09:3b:02:d4:73:63:d5:e9:0c:
                    af:44:bc:b4:b9:e8:b1:6f:06:2b:64:ab:1b:29:cd:
                    51:e2:17:7d:51:1d:4e:28:86:7a:67:59:14:6a:86:
                    b7:be:c7:72:9b:bf:1b:cf:fc:6e:e6:1e:05:e2:57:
                    92:e4:c9:c7:cf:62:8c:2b:19:36:72:86:f4:45:38:
                    74:12:b9:43:fb:d8:53:ed:03:39:72:fb:d3:8e:58:
                    c9:60:c6:df:34:c8:7d:d3:ea:ec:38:e3:e5:c3:eb:
                    46:87:a0:27:31:e5:ca:a7:8b:a6:46:15:d1:3c:6a:
                    6e:2a:a9:94:ee:15:9d:f5:24:03:89:57:09:6d:3a:
                    31:87:1d:e9:52:1f:50:96:04:77:8e:0b:7e:63:4d:
                    d6:8f:5f:5f:f7:57:0b:31:92:f0:8c:5c:bc:ac:8e:
                    45:a1:f4:ad:21:43:43:b9:8b:89:dd:68:f6:8b:48:
                    93:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3C:91:10:78:0C:91:97:54:30:4D:97:73:DF:93:21:DB:DC:FE:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8e7b5787-48fe-38de-a161-771a37574b62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.177.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:32:ed:eb:ec:8e:45:db:c2:36:a1:d5:06:16:d2:31:bb:cb:
         8f:d8:b3:2e:fe:15:a4:a2:c1:14:ce:ad:2d:2d:a7:d1:a5:9b:
         3f:fb:3b:e6:07:11:47:55:52:f4:85:e3:49:af:8a:6d:17:dc:
         32:6b:c0:5f:bc:fe:f8:a9:8d:22:28:51:4d:e1:67:66:88:59:
         ff:bd:8f:f7:7f:05:da:ed:6e:6f:77:40:61:db:f8:73:a3:91:
         11:ff:59:96:c8:3e:f8:b6:da:75:10:85:72:81:d3:36:f0:96:
         7f:e8:e3:9f:3d:92:ab:a0:ea:bd:ee:f4:71:ba:75:54:b8:85:
         04:35:3a:12:9f:1b:1a:2c:69:e9:f3:47:ab:21:a9:5f:a5:d7:
         0c:ff:a0:d6:d2:cd:d8:60:bf:bf:bf:c0:36:2f:cb:b3:22:94:
         b2:e5:4e:94:87:61:e1:16:b2:16:6c:32:1b:fc:06:d0:82:a2:
         77:e4:d4:3f:10:20:c1:cb:10:c5:17:d0:02:61:2a:29:d0:9c:
         04:13:60:57:e1:fd:46:61:20:62:f9:2c:70:c2:a4:7e:99:65:
         bd:48:a3:e6:c3:2a:56:b5:33:0a:14:9e:cb:a0:e4:c1:52:16:
         10:25:62:ef:9c:7a:bd:17:cd:68:4a:e0:b8:8b:84:ee:98:a0:
         2a:a5:d4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:09:55 2025 by rpki-client