Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/334d46ab-80d4-3872-9774-d912ac2872f7.roa
File:                     334d46ab-80d4-3872-9774-d912ac2872f7.roa (raw, json)
Hash identifier:          7aulcIJ/XOKaQ++0Y6vlq+XVYEc5eN15yiY/pTTVRik=
Subject key identifier:   3E:EA:C9:AB:6F:F2:56:2F:9D:9D:60:15:4F:8D:DD:F4:EA:DF:4C:F4
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6FD2DCD0299F024A19D80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/334d46ab-80d4-3872-9774-d912ac2872f7.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        199.232.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:fd:2d:cd:02:99:f0:24:a1:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=e1437b5b-90cf-486e-a4c7-f44357cae831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:0f:8f:d9:cc:8b:79:bb:22:78:1d:c1:48:
                    bd:03:be:1b:4f:fc:57:68:6c:7f:b7:b1:84:bc:2f:
                    ed:7c:fb:86:67:80:dd:1a:e4:e3:ab:d4:38:d9:32:
                    dd:da:79:8f:01:fb:0f:ee:78:ec:73:9f:45:b0:60:
                    48:42:b8:3a:9f:ae:05:03:15:42:bd:9c:77:0f:7d:
                    c6:b0:20:72:2d:8b:ea:08:f1:bf:3e:2b:11:ea:09:
                    0a:cb:f3:3c:c4:8c:68:4b:8d:2c:e4:29:45:b2:64:
                    2e:69:87:68:3d:8e:12:92:a2:50:17:fc:e5:8d:47:
                    7b:42:2c:df:8e:03:3a:74:9d:0c:3e:46:25:09:65:
                    21:c6:9b:88:1d:29:49:a3:a8:d4:2c:46:e7:ee:34:
                    15:5b:13:b6:75:c3:eb:d2:26:39:4f:e7:07:b3:65:
                    f6:dc:c2:13:6c:ac:40:eb:4b:7a:75:4d:52:16:c4:
                    9a:9e:89:e7:8a:58:86:21:93:6c:d4:90:a0:a4:5b:
                    16:db:ba:c5:b8:a5:cb:13:64:56:8e:12:49:5a:e5:
                    c0:14:9d:5f:f7:d9:81:07:b4:fb:4a:d2:96:2e:df:
                    ea:f6:f3:bb:05:e0:55:02:c7:0e:29:df:59:3a:9d:
                    53:66:78:fc:9e:ba:b5:1a:6f:1f:e6:e0:ed:a6:2d:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EA:C9:AB:6F:F2:56:2F:9D:9D:60:15:4F:8D:DD:F4:EA:DF:4C:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/334d46ab-80d4-3872-9774-d912ac2872f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:71:46:91:3d:31:ad:43:07:0c:fd:38:b1:9e:2c:8a:81:b3:
         05:5c:1d:88:76:e0:39:32:c6:1d:f1:7d:3c:b7:fc:38:a5:04:
         61:4c:c5:64:ce:a5:b1:bc:3a:30:8e:59:04:fc:54:f0:35:3a:
         81:76:80:37:97:46:d1:a2:8a:a9:fb:99:d5:25:15:7d:d5:ce:
         ca:16:63:c1:c9:d9:93:c1:30:d6:7c:9f:c3:8b:29:ce:9c:0f:
         e2:dc:6e:3f:c9:3d:f4:33:8a:85:2f:31:de:39:57:78:1f:80:
         08:b8:07:29:ed:48:fc:a0:92:39:69:34:87:be:fe:6c:ff:ef:
         68:3f:18:9b:2a:69:41:ad:ec:70:08:3d:54:f3:e6:2b:85:ac:
         9e:24:c6:2b:10:7a:2d:bc:d1:87:be:c1:de:40:38:93:0d:a6:
         b0:0c:7d:19:26:da:d5:9d:40:1a:2b:d9:36:5f:3f:c2:f7:1c:
         c8:8b:51:91:df:b7:d9:c6:c7:2e:15:24:c2:72:ef:af:a1:01:
         47:80:9b:a4:1b:10:95:fc:8e:2c:f3:81:ce:09:03:7d:44:25:
         f3:dd:de:2a:e4:f9:66:04:8b:97:c1:4b:95:69:c6:1c:bc:69:
         92:9e:48:47:84:25:ed:94:48:95:61:c3:4f:bc:83:d6:be:75:
         f6:d8:8d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:47:32 2025 by rpki-client