Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1988590f-aafa-3f41-b2ea-8df5d93e3730.roa
File:                     1988590f-aafa-3f41-b2ea-8df5d93e3730.roa (raw, json)
Hash identifier:          RJTMfdzzwpEx9DW2XD8YeoryhRpCdCWYdM0qBQHc8QY=
Subject key identifier:   8C:14:2D:C9:3D:2E:06:D2:56:1B:60:AF:CF:91:09:3E:54:C8:2A:81
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A9900D027D0AA5ACA5FDD1C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1988590f-aafa-3f41-b2ea-8df5d93e3730.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     3855
IP address blocks:        199.172.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:d0:27:d0:aa:5a:ca:5f:dd:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=de20b744-582b-4f41-93f6-6ca421f62da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:86:3a:2a:a1:91:57:47:9f:dc:4c:50:ba:09:
                    52:86:87:ec:4d:5a:a5:d7:fa:50:96:70:c4:09:69:
                    40:d0:94:be:ec:50:1a:1e:5f:da:93:fb:f1:84:43:
                    30:50:d3:34:85:14:b9:38:fa:c1:3d:2c:39:0c:cf:
                    54:b8:34:93:f0:5e:c0:f6:42:a7:0c:c0:85:e5:f1:
                    c6:8d:51:26:96:a9:41:ea:40:79:a7:d9:9c:49:e4:
                    7a:27:0e:10:c2:92:ff:05:c3:88:ce:a8:f9:ad:8b:
                    6c:7e:3a:24:c4:73:fa:ea:5c:fc:33:9e:20:af:12:
                    31:17:c1:d9:8b:b2:14:3c:77:95:1a:15:8d:13:a6:
                    32:a9:5d:32:b0:b6:52:10:07:6a:53:2b:77:d4:42:
                    8d:a9:d9:70:22:71:0d:80:ba:fb:44:cb:e1:04:63:
                    a1:bd:13:b0:e8:b0:c3:3f:ee:28:0c:fa:b5:a9:a8:
                    55:ef:9e:82:85:dc:b3:7f:db:09:d0:1d:2e:17:33:
                    af:29:68:59:d9:9d:a8:12:43:3d:39:d7:97:da:3f:
                    b6:4d:15:d0:c9:a9:8c:4a:cd:15:ff:7a:fa:d4:d8:
                    3b:19:4d:ba:b5:53:d3:53:5b:9a:27:f3:ba:54:10:
                    b8:c1:0e:76:8e:15:7e:d0:10:0f:29:cd:78:9a:40:
                    91:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:14:2D:C9:3D:2E:06:D2:56:1B:60:AF:CF:91:09:3E:54:C8:2A:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1988590f-aafa-3f41-b2ea-8df5d93e3730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c9:89:32:3b:09:46:2a:b8:7e:00:90:28:4c:0c:d8:a5:2f:
         71:c1:ae:60:56:09:26:5f:e0:93:50:e3:88:6d:89:ce:cc:86:
         de:45:60:53:59:31:61:89:4c:fd:0d:e3:ef:8c:6b:3c:30:a5:
         e9:00:ab:f5:b0:67:17:40:c6:35:c6:9a:d6:5f:b8:80:f1:8e:
         f3:83:9e:4e:11:a5:dc:e4:9c:ab:e2:ba:7f:fd:7a:29:dd:f7:
         8f:7b:e1:4c:7f:34:4c:a9:17:d8:91:e7:f2:aa:2a:6f:33:ec:
         c1:55:37:a6:0e:a4:41:b5:62:47:a5:fa:f6:e4:5c:ce:12:83:
         d7:d5:3b:32:67:ac:e9:93:0e:52:6a:f2:36:54:7a:82:13:24:
         13:b2:29:3f:96:c4:72:b8:52:e9:18:cd:3c:6d:c0:6d:c0:07:
         d5:68:82:fa:d4:39:10:f2:5a:89:4e:88:39:53:30:ce:d1:50:
         e8:f9:38:be:c6:e6:ab:6b:a4:35:d3:eb:6e:82:2c:e8:9f:20:
         18:84:53:1a:e4:64:9a:5e:8e:11:bc:7f:74:72:22:a8:f0:e8:
         f4:c8:d8:81:bd:9f:ea:57:b9:a6:68:9a:72:ba:2f:2f:58:58:
         24:68:9f:fd:28:ce:de:1d:67:1e:ae:3e:3a:70:06:ff:42:04:
         09:6a:be:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:50:29 2025 by rpki-client