Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/4ee7eb22-0e63-30c8-a4f4-64d188b70e78.roa
File:                     4ee7eb22-0e63-30c8-a4f4-64d188b70e78.roa (raw, json)
Hash identifier:          phMs5XiAjS4KsvBre300F5F2BMaYRS72lIVmfXLxa3g=
Subject key identifier:   B2:E0:94:14:B0:D4:1F:0C:54:C1:85:C3:4D:9D:1D:DE:67:97:DA:06
Certificate issuer:       /CN=a32aa006-ef22-4905-8c82-2651c19859b9
Certificate serial:       010D0C9F4328584B2066D847E47D48E61EC85D80
Authority key identifier: 1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/4ee7eb22-0e63-30c8-a4f4-64d188b70e78.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     19350
IP address blocks:        199.212.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d8:47:e4:7d:48:e6:1e:c8:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32aa006-ef22-4905-8c82-2651c19859b9
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=bb8ba2c5-171c-4c5b-ac4b-20cdfc7c515f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4a:6c:8d:e8:b2:0a:da:ea:33:3e:a4:dc:42:
                    3e:5c:2b:2d:41:b7:21:35:b5:ef:73:00:91:87:6b:
                    9d:4b:59:f6:79:b2:72:5f:4a:9c:57:dd:14:08:dd:
                    82:8b:12:13:b0:6e:57:c8:24:7b:eb:fc:22:84:4e:
                    de:bb:3a:1a:52:c5:e9:5f:5e:cb:d7:12:cb:8c:29:
                    a6:64:ee:87:49:84:32:8f:63:99:81:68:51:1b:46:
                    87:cf:3b:7e:c4:7f:14:e7:bf:7e:34:e2:d6:cf:cb:
                    e4:a5:a1:9a:14:f5:dc:a6:3a:93:f6:f0:37:c9:e0:
                    8f:90:f3:86:af:cf:ce:0d:d7:c8:4f:39:a6:ac:df:
                    bf:8b:84:43:55:fd:b8:8d:b2:d5:dc:85:c9:a1:c5:
                    eb:76:b5:96:3d:4e:52:9b:f3:01:7c:30:75:46:79:
                    8b:49:e9:d2:4d:62:40:97:5d:7b:90:a1:3a:43:6c:
                    bc:7c:af:df:3f:9f:d9:e4:68:b0:bb:47:58:a6:fc:
                    75:64:62:f6:97:b2:bf:74:e2:b6:23:6f:39:1c:23:
                    9d:e5:85:7a:01:bc:81:b3:50:41:11:a1:fd:2f:7a:
                    d0:72:7d:4e:36:60:5d:84:5b:0c:0b:50:71:70:51:
                    0b:45:79:39:9c:2d:50:8a:fd:77:8a:d3:67:28:0a:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E0:94:14:B0:D4:1F:0C:54:C1:85:C3:4D:9D:1D:DE:67:97:DA:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/4ee7eb22-0e63-30c8-a4f4-64d188b70e78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.crl

            X509v3 Authority Key Identifier:
                keyid:1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ce:bf:6f:be:52:cb:9f:f1:7a:1d:02:87:b1:57:0d:d4:29:
         ee:9f:4f:ba:7d:9b:8a:e7:09:d6:92:34:1b:b4:af:48:f7:9d:
         18:d9:0f:eb:c3:2a:6c:d0:b8:51:27:ff:97:c7:bf:88:a6:bd:
         ee:59:a6:12:77:c8:2e:55:49:b5:0e:80:43:2a:a9:ae:20:85:
         52:2b:04:fb:c6:08:96:41:85:37:b0:be:d7:ea:c4:ed:b3:a7:
         c4:06:7f:89:6a:27:34:05:e0:7e:2d:6f:42:6d:03:9c:07:9e:
         27:b1:28:70:ce:49:88:c8:48:2e:b9:83:3c:c5:89:ff:3c:aa:
         d9:05:0a:fb:46:85:73:13:13:2e:c3:2f:f1:ba:57:47:83:97:
         c0:ae:13:de:9d:81:ae:c4:4a:29:02:be:d2:fd:65:14:22:92:
         9d:92:d0:cb:c4:87:07:be:1a:7b:f7:10:47:1b:fc:38:52:ff:
         ec:64:14:8c:f6:8b:cc:27:7b:36:46:74:f6:52:b7:e5:a0:2f:
         dd:1a:0a:49:5e:74:5f:58:58:c2:65:f7:b4:c1:3f:93:95:e1:
         ad:04:28:9f:eb:62:f7:88:8b:a8:29:2d:1d:7f:9c:d2:0e:be:
         c7:e5:4b:2c:71:b8:93:19:91:8a:60:2b:1b:5e:2e:36:7a:12:
         8d:32:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:53:11 2025 by rpki-client