Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/e17bd202-be79-3815-9fd1-b952c78144fc.roa
File:                     e17bd202-be79-3815-9fd1-b952c78144fc.roa (raw, json)
Hash identifier:          tT27dofJkk93o+z+YLBXvSZ9VY6c4ZTe/5R6XqM2TNU=
Subject key identifier:   CA:82:F6:68:27:19:2D:A5:95:32:CE:C1:A7:0C:89:B6:06:1F:92:D0
Certificate issuer:       /CN=989afb89-021f-486a-9386-ea5ad2a85eb3
Certificate serial:       010D0C9F4328584AB3D4BBC5149F14474F590100
Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/e17bd202-be79-3815-9fd1-b952c78144fc.roa
Signing time:             Thu 31 Jul 2025 15:39:05 +0000
ROA not before:           Thu 31 Jul 2025 15:39:05 +0000
ROA not after:            Wed 29 Oct 2025 15:39:05 +0000
asID:                     3359
IP address blocks:        198.161.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:d4:bb:c5:14:9f:14:47:4f:59:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3
        Validity
            Not Before: Jul 31 15:39:05 2025 GMT
            Not After : Oct 29 15:39:05 2025 GMT
        Subject: CN=e1cb83b3-9d09-4fba-9c27-7803f0bfe7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:e2:a2:90:fd:b8:59:fd:d8:20:31:7d:b2:
                    df:c5:92:d0:84:e5:74:b8:ca:bb:c1:59:0b:06:86:
                    33:59:44:d8:df:ae:c6:d5:f4:42:6e:1c:53:b8:42:
                    d8:07:e7:cf:9e:f1:cc:c6:86:1c:d4:70:2e:2a:4f:
                    d9:22:2e:2f:58:f7:45:1b:35:33:ce:0b:30:51:31:
                    c1:44:57:a2:ad:7d:d5:84:6c:0f:e4:bd:85:ce:7a:
                    fb:c2:30:b4:2a:96:e6:1f:b4:bc:6a:16:7b:f0:51:
                    28:ef:48:31:4c:38:8d:a5:89:1c:36:67:72:b7:a3:
                    8e:35:97:54:79:5c:77:f9:1f:9c:58:62:f6:a2:94:
                    e1:0f:17:f2:5e:47:95:0f:e0:38:5e:e4:7a:ec:26:
                    a4:fc:cb:f2:0e:82:0e:25:b9:ea:c1:b6:c0:70:bf:
                    2f:ec:fb:4f:53:ef:f5:95:b6:bf:f6:4f:1c:8f:40:
                    b5:4e:fc:86:fe:34:13:a5:0c:58:dd:42:12:1f:7b:
                    09:a5:59:16:a6:d9:aa:fd:6a:ee:9a:de:3e:9d:3b:
                    6d:75:75:4f:69:6b:5b:d7:31:44:24:b9:6d:01:be:
                    ad:47:1c:3d:4e:65:1e:d5:1f:17:2d:78:04:4e:09:
                    af:b3:ad:1f:79:5a:86:20:63:fa:bd:0a:1e:c2:73:
                    93:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:82:F6:68:27:19:2D:A5:95:32:CE:C1:A7:0C:89:B6:06:1F:92:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/e17bd202-be79-3815-9fd1-b952c78144fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl

            X509v3 Authority Key Identifier:
                keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.161.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c4:1c:fa:2b:d7:d1:29:a8:6a:6e:c3:cc:c6:00:06:f5:59:
         6c:74:4b:bd:24:87:7c:81:87:ea:5d:36:cb:ab:65:20:c9:df:
         46:f0:58:ef:dd:ad:66:98:72:f2:9f:aa:4d:b0:c5:c8:2a:a7:
         93:a9:58:ea:cb:d2:33:fc:e8:1e:3c:6f:3f:df:91:e8:e1:a7:
         15:c1:13:49:cc:67:8b:56:ee:d9:d2:c4:ca:24:e3:ae:6f:5a:
         d9:7b:9d:84:6a:14:e6:5a:fe:f0:78:91:74:a9:bd:fa:b1:65:
         30:05:3e:ad:a5:7e:86:4a:c4:99:23:e8:31:01:11:eb:58:6d:
         ad:00:20:29:98:86:0b:72:24:af:16:34:57:e9:6f:5b:dc:ab:
         be:c5:92:0c:76:e5:93:65:5b:68:3c:91:5f:5d:97:62:53:32:
         cf:87:29:3d:d3:b2:24:ce:75:4a:e9:93:bf:b9:b2:cc:41:2c:
         7e:5a:cd:cc:2a:3d:49:1c:1d:33:13:ab:76:99:e6:c8:e8:b3:
         77:1c:77:27:1a:b5:4c:bc:31:9f:89:e0:99:61:4f:fc:72:69:
         16:c2:fc:aa:fb:67:7b:04:e9:37:e1:30:5d:19:77:16:fa:8d:
         b5:e6:04:77:a2:b9:22:10:b6:ad:8e:1e:51:18:01:08:41:ca:
         d2:17:ec:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 14 06:42:58 2025 by rpki-client