Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/2ef512bf-2011-3ef3-a834-b8929445ea4a.roa
File:                     2ef512bf-2011-3ef3-a834-b8929445ea4a.roa (raw, json)
Hash identifier:          vNJ9kpnmMRJTlzZR4k5MuxAzjzmlTrFRqUiGlsClidA=
Subject key identifier:   7F:87:92:73:7E:09:75:1B:52:D7:F2:3A:61:28:FE:14:B4:99:3B:FE
Certificate issuer:       /CN=405ae070-e9e9-4d3c-b449-868426ff2303
Certificate serial:       010D0C9F4328584AFFE708AAD8FD9A01E1B5B780
Authority key identifier: F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/2ef512bf-2011-3ef3-a834-b8929445ea4a.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     15296
IP address blocks:        199.116.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ff:e7:08:aa:d8:fd:9a:01:e1:b5:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405ae070-e9e9-4d3c-b449-868426ff2303
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=1193f529-bdb2-4291-b7c9-e69bc2976115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e3:e0:0e:90:e3:1a:c9:5e:83:f4:05:81:f4:
                    d6:76:9a:d9:d7:f7:8a:9f:88:9b:b4:65:41:80:5a:
                    84:90:de:14:6c:6d:5b:42:22:69:4b:30:e2:1d:f1:
                    a4:87:82:0c:87:f9:cb:0e:d8:e0:74:45:21:86:54:
                    8c:9d:0d:0a:3c:26:a4:4e:f7:cc:27:88:9a:f1:b5:
                    45:17:56:44:a0:c3:20:71:65:3e:2e:0d:73:a0:24:
                    7e:e9:41:71:76:7b:81:f3:5a:cd:94:70:09:bc:3d:
                    f4:da:b4:00:ad:93:2b:d8:95:09:4f:50:38:ba:fe:
                    df:90:7c:e5:43:fd:f0:48:af:e1:97:7f:40:ee:a4:
                    4e:9f:5b:9a:46:78:45:95:50:c9:1d:a5:c8:03:84:
                    f1:84:0e:f1:3d:65:88:c9:cf:7f:30:96:95:52:73:
                    9c:98:94:6e:4a:3d:a0:f0:44:db:7f:7f:c7:64:26:
                    ef:4b:fb:c1:33:ab:86:e8:80:76:24:4e:96:e8:be:
                    cb:c0:cf:a4:50:59:d1:ed:c0:6c:28:01:b9:a9:91:
                    6b:6a:42:63:53:5d:86:03:cf:6f:0f:7c:0b:a8:51:
                    23:a1:b7:85:11:b7:1f:24:d2:5e:f0:fe:28:a3:fc:
                    92:7b:ba:e1:d6:94:e8:14:f8:0d:dc:5c:a4:a5:9e:
                    90:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:87:92:73:7E:09:75:1B:52:D7:F2:3A:61:28:FE:14:B4:99:3B:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/2ef512bf-2011-3ef3-a834-b8929445ea4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl

            X509v3 Authority Key Identifier:
                keyid:F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.116.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5f:48:86:17:ee:ec:e2:6b:74:3d:fc:b1:55:62:aa:3a:ce:
         7b:67:b1:ac:73:bd:5d:26:6f:e3:19:03:26:28:c6:4c:de:9a:
         d0:51:57:1b:a8:90:15:c7:ae:02:cf:d2:e4:2b:ed:59:bf:7d:
         0a:69:19:58:e8:b9:5a:62:93:1d:7d:26:66:f0:81:e2:bc:f5:
         94:47:ec:96:f3:41:3a:c4:51:62:86:91:60:ba:79:04:22:af:
         b2:0d:bb:8c:d4:3f:07:6b:e9:f0:5d:c8:a0:da:fb:8c:ce:29:
         29:6d:90:ae:27:2e:b4:c4:4f:cd:d7:2b:1b:e9:f0:4a:2f:40:
         21:61:2c:cb:23:69:1a:a8:5e:e2:ce:ff:56:58:52:25:27:92:
         51:e5:11:a9:3d:68:60:ad:34:6a:ef:06:e2:1d:d7:9a:21:45:
         d5:6a:b3:4a:d1:46:05:e6:8a:97:1f:55:e6:b8:14:75:59:9f:
         b0:cf:88:2d:58:5d:84:79:59:14:4f:b0:da:a4:d9:ad:7d:a4:
         a6:2b:e9:50:65:9d:07:7f:fe:b9:77:de:3c:4e:f4:95:fd:0f:
         fd:01:bd:01:d6:6c:90:85:0d:dc:05:2f:ab:5e:ab:51:11:1c:
         e7:77:b4:21:26:8d:8c:24:de:3a:a5:d7:a6:37:90:6b:16:69:
         90:85:57:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:55:15 2025 by rpki-client