Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/55bd8aff-d2c2-3b68-b525-d83bd41f229a.roa
File:                     55bd8aff-d2c2-3b68-b525-d83bd41f229a.roa (raw, json)
Hash identifier:          pS5mpgmeaND3SotdhJTkecX35fe1ZD5Q9XIiPMQoH5M=
Subject key identifier:   12:B3:8F:02:D9:46:99:2C:91:B2:DF:96:60:51:68:AA:54:3A:F4:96
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584A2C201203BDEED78B24FC7A80
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/55bd8aff-d2c2-3b68-b525-d83bd41f229a.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     397747
IP address blocks:        205.157.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:12:03:bd:ee:d7:8b:24:fc:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=0a9590a1-0b28-4408-b60d-7dcdb25ef0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:33:7a:be:05:94:cd:ba:12:34:b1:8b:41:
                    51:05:65:d8:4e:b5:a1:0b:15:cd:51:56:ba:5e:ec:
                    99:32:bd:4f:ae:18:89:e7:97:09:9c:30:5a:f1:8a:
                    81:49:1d:c4:9b:cc:94:cf:23:29:00:38:cf:b3:5b:
                    8e:de:fa:81:39:67:89:73:92:ae:94:1b:05:c9:86:
                    02:9c:43:85:cd:ba:95:19:20:25:8f:91:1b:34:2e:
                    d5:d3:2c:cb:c6:c8:b2:74:3f:3d:f7:cf:ab:2f:8d:
                    0e:d3:46:cb:61:93:95:9b:a9:91:8b:c8:06:f5:f0:
                    f4:92:21:34:37:8d:df:29:4d:e9:9f:e6:3e:bf:48:
                    49:3b:74:07:4a:bd:35:57:ca:c7:2c:1f:8f:3a:fd:
                    67:74:01:b7:92:bc:55:67:91:3e:68:8e:f9:49:39:
                    24:f5:93:8c:f8:3f:84:93:3e:65:ee:67:bf:78:ac:
                    8d:e3:9e:ca:60:35:92:b2:4b:24:25:c9:56:6c:03:
                    ef:f3:6e:9a:c0:8c:46:81:3e:11:b4:05:d8:43:b8:
                    35:48:b4:ec:1a:f1:4e:d1:49:07:ca:54:e0:f5:7f:
                    f5:67:e5:47:5c:2d:bd:5e:a9:9e:80:25:38:a1:0b:
                    f3:9d:0d:93:11:16:8a:15:f4:a0:2d:18:7f:84:1c:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B3:8F:02:D9:46:99:2C:91:B2:DF:96:60:51:68:AA:54:3A:F4:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/55bd8aff-d2c2-3b68-b525-d83bd41f229a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:75:77:da:44:b8:d3:cb:49:32:0a:a0:c4:25:7e:dd:f4:ff:
         86:78:4f:a9:52:58:b4:97:c3:5c:ce:09:43:2a:30:04:75:17:
         fc:57:12:d2:20:0d:d4:33:f4:0d:6d:19:79:93:ce:b3:04:62:
         7c:d8:7b:87:a5:d5:2e:c8:31:c6:bb:38:89:61:e6:f0:67:ad:
         2f:97:51:34:63:cf:a4:ec:55:66:fc:c8:b8:e7:56:03:85:7a:
         d1:90:23:b5:f8:c5:31:dd:98:65:2e:84:fd:46:ff:cc:30:fd:
         2e:6e:f5:c5:0e:1e:f1:93:ef:45:87:c1:05:10:9a:e0:db:89:
         bb:de:31:a5:f1:f4:64:51:f1:f1:c6:70:28:a6:58:a4:1c:df:
         88:6a:b8:a0:77:d5:0a:b3:0e:71:f3:00:16:78:a2:7e:9c:44:
         da:fd:88:a8:be:bc:6a:d8:ea:d4:c9:f1:cb:7f:c6:5f:f0:8d:
         1a:ad:3b:14:3a:d6:64:7e:d6:80:7a:c8:54:bd:91:bb:5f:0a:
         b9:ad:59:44:fe:cd:a4:9f:f3:f7:78:3d:d0:61:ad:46:ab:2d:
         87:0b:58:49:9d:51:44:ac:64:a0:9c:e2:10:0c:47:9c:47:e6:
         b8:6d:d4:dc:5a:e3:59:84:60:c0:fc:3e:2e:a3:5d:98:fa:ac:
         d2:84:3c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:43:13 2025 by rpki-client