Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa
File:                     d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa (raw, json)
Hash identifier:          c6XGCVI3VE5nKSkX/gKdVT/CMp7DYUGU5hspiFBkkN8=
Subject key identifier:   65:1C:AA:7D:8D:F6:27:70:C4:57:CE:E6:BF:08:85:56:CA:2D:21:EF
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A7E7B7687EB6B20EB36E57700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        108.170.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:76:87:eb:6b:20:eb:36:e5:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=d493254a-ea9d-4a3b-9660-756729e41e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0e:46:68:a2:c1:11:10:c9:a7:1b:da:9f:1a:
                    84:57:ea:03:99:64:27:e3:7d:7f:84:4c:ac:81:7b:
                    03:df:2f:75:e8:0a:37:ba:08:95:87:45:a3:b7:4f:
                    15:54:8b:af:1b:56:9d:12:79:18:b6:91:3c:77:4d:
                    70:78:8d:a3:33:4b:29:46:60:46:af:cd:bf:46:ae:
                    ce:ce:d1:a5:4d:c4:5a:21:93:d8:58:03:85:be:5f:
                    8e:5b:d6:f0:6c:bb:a3:e3:7d:0c:a4:27:fd:72:82:
                    a6:e2:72:44:89:d2:cf:ca:60:40:63:e5:12:c7:79:
                    ba:b4:38:91:0f:ba:7e:87:dc:bd:7f:7c:15:1f:0b:
                    c5:70:7f:3a:72:53:8a:83:fe:35:eb:c0:ef:a3:41:
                    c8:e5:a7:2f:0b:06:0e:1d:8d:de:a7:24:b5:2a:88:
                    09:09:ad:98:43:ce:04:88:43:81:fd:b3:cb:0a:c1:
                    0e:68:d6:e9:9a:ac:fe:13:d6:94:89:bc:4a:85:6d:
                    d2:a9:19:fd:c2:80:81:e8:bb:b7:67:4e:5b:8d:1a:
                    16:f6:a0:52:9f:b9:c6:33:bf:4f:10:3e:ac:34:48:
                    eb:38:b0:6d:7e:68:f8:92:a5:a5:96:14:3e:44:ed:
                    94:94:51:21:81:9e:3f:bc:a3:0b:7e:11:c9:76:bb:
                    c6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1C:AA:7D:8D:F6:27:70:C4:57:CE:E6:BF:08:85:56:CA:2D:21:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ac:08:61:03:9d:4d:40:31:74:4d:bc:df:b5:1d:ad:d2:67:
         69:af:eb:51:9c:7b:0e:a4:07:0a:18:c0:3e:ca:49:50:18:ae:
         b0:7e:6e:86:12:3d:fb:1a:77:b1:b8:fb:a3:5f:c4:0d:d7:a9:
         9b:e9:38:fa:a1:0b:30:6d:f1:78:82:cc:b0:83:24:b1:1f:60:
         82:2f:b1:ff:0d:6c:b6:c8:d4:93:b5:1a:b5:25:55:03:ef:50:
         91:1c:43:83:88:13:3d:25:cb:29:b8:06:33:66:5e:82:f3:8c:
         26:76:e3:54:89:aa:5f:3a:f7:95:fe:ad:66:d3:bb:29:e2:bb:
         c3:0c:89:a2:2d:f4:90:92:06:ea:65:ed:75:1b:9d:4d:d8:e0:
         f9:c0:f0:bb:f1:20:6b:4a:9d:4e:19:c6:42:e3:4f:ba:64:53:
         f8:16:4b:d2:a1:12:cc:f4:6a:22:a0:f2:88:c8:b1:85:f5:0b:
         50:3a:6d:a1:05:b0:dd:95:ed:5b:53:1c:bf:bd:89:58:24:c7:
         54:c4:ff:09:0d:60:26:12:72:d8:5d:29:f8:21:37:70:b8:4d:
         3d:2f:8b:04:6a:1a:2b:a0:22:02:ec:23:c1:8c:46:cf:6d:a0:
         4d:c8:1d:5b:6e:41:e3:74:71:0e:23:be:e5:b6:a4:9c:d0:54:
         91:fa:e1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:26:46 2025 by rpki-client