Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/5e3423c5-72cc-39a6-839a-0790366aef24.roa
File:                     5e3423c5-72cc-39a6-839a-0790366aef24.roa (raw, json)
Hash identifier:          R4iWI/HD88lS7Amb4skkjtbsdjXnkRU2lxZtmDjcJr8=
Subject key identifier:   7F:9F:4F:2A:BE:DB:A9:6C:4B:E7:EF:C3:5E:05:50:8D:82:45:D6:EE
Certificate issuer:       /CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
Certificate serial:       010D0C9F4328584B1AD184AFB546ABDD35F63000
Authority key identifier: AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/5e3423c5-72cc-39a6-839a-0790366aef24.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     53620
IP address blocks:        198.187.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:84:af:b5:46:ab:dd:35:f6:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=e5e13dc1-2e94-4049-839c-873cfbde6a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:06:c2:2f:a6:7d:74:33:6e:d1:aa:a0:16:
                    9b:8c:e1:71:5e:92:a9:9a:94:86:64:e0:c3:49:3f:
                    d9:25:a6:a9:9a:85:b9:7a:8b:1a:d4:07:85:8a:83:
                    15:6a:e2:62:9f:f7:56:5a:89:0f:72:0e:65:a7:ae:
                    17:3c:65:d0:64:36:e7:a7:02:9a:30:8c:21:22:90:
                    3e:f4:b5:40:81:fd:3d:ce:a4:92:a6:cb:e1:77:dd:
                    75:fb:4e:09:a0:e9:55:22:1b:17:ed:ba:85:cb:a9:
                    76:52:9f:8c:4a:f9:c2:2b:74:b4:61:d0:6e:10:9b:
                    af:b1:cc:1c:4e:0f:70:97:73:6b:fb:38:8b:95:13:
                    ce:09:8e:af:3e:80:c6:58:3d:be:14:ad:85:2f:c9:
                    27:21:60:2a:81:eb:8f:44:5f:25:2e:fd:dc:11:79:
                    cc:9e:14:31:fb:e3:0b:9d:29:75:b5:b9:50:8b:c7:
                    f5:50:ba:42:c6:87:2b:67:de:cc:99:6e:44:75:12:
                    5f:66:05:4c:32:f0:df:7a:81:4e:04:b4:c9:83:27:
                    3e:e4:e7:36:f5:b8:c8:35:1d:6c:a2:7d:e0:0a:b9:
                    24:5b:58:d6:3d:8b:a1:a1:a2:1d:b7:cf:02:61:e3:
                    be:f2:e8:1a:58:1b:a0:e6:af:ce:7c:48:46:e6:a7:
                    be:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9F:4F:2A:BE:DB:A9:6C:4B:E7:EF:C3:5E:05:50:8D:82:45:D6:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/5e3423c5-72cc-39a6-839a-0790366aef24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:cd:0f:5e:14:d7:3e:6b:f1:a6:be:ee:46:4e:ae:e2:ae:11:
         04:d5:83:07:e8:45:b0:59:7e:10:40:1a:97:35:79:48:77:56:
         6f:97:01:1c:19:cc:af:41:38:51:f0:ff:cb:13:02:ed:bc:02:
         21:e9:01:e3:52:3a:db:45:0a:ff:18:4e:48:3c:92:ba:a7:08:
         97:f5:59:28:d6:09:25:8f:dc:9c:f1:01:fa:c5:98:ce:c9:82:
         51:dc:b9:d2:c9:f0:9c:f4:a6:5d:76:93:8a:d1:24:49:6a:b0:
         e7:76:b7:5c:61:59:f1:d3:7f:e4:bb:18:04:81:81:e6:b3:53:
         6b:a8:4c:2a:b4:a3:39:6a:ca:69:db:19:7a:e1:28:c6:48:3b:
         9e:72:b6:3e:71:c6:cd:ee:b0:9f:88:7f:d0:80:6b:02:a8:0c:
         44:79:39:f9:61:6f:9a:60:15:b3:67:90:a5:f8:cb:fa:eb:92:
         e3:b6:d3:12:7c:63:4e:28:4d:0a:28:e9:ba:84:d9:06:c9:3a:
         f9:9c:ca:c5:f7:4d:61:08:e9:dc:1d:28:6d:07:07:67:5b:c0:
         e7:da:94:f0:96:1b:23:c5:0a:a6:04:c2:bc:6d:d8:53:2c:dc:
         89:59:a9:d4:c6:21:e4:51:a4:72:98:a3:34:ce:6b:59:e8:a2:
         50:6e:a7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:29:53 2025 by rpki-client