Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/e7b232a9-af0c-3d2a-b23b-63139953717c.roa
File:                     e7b232a9-af0c-3d2a-b23b-63139953717c.roa (raw, json)
Hash identifier:          ohkcUlhNJkjMKkGTO8LOyj4Jdbj8eNzieSz6qrz2Kf8=
Subject key identifier:   B7:19:6C:07:58:05:3E:21:EE:4E:B9:1D:FB:AC:28:AC:EC:81:F1:F5
Certificate issuer:       /CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf
Certificate serial:       010D0C9F4328584AFC1BFED707403022AE67BC80
Authority key identifier: 08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/e7b232a9-af0c-3d2a-b23b-63139953717c.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     11775
IP address blocks:        162.211.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:fe:d7:07:40:30:22:ae:67:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=1aed281f-8b2b-40f4-bd16-6f7962a937f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:bd:a5:fc:41:ea:6f:6f:46:9a:5d:0b:95:
                    83:0a:52:3f:34:7b:55:e9:41:54:ab:21:5c:16:35:
                    2c:25:e7:8f:6e:bf:c8:2c:ba:46:de:f6:38:d4:e5:
                    57:91:3f:27:62:70:66:7f:a8:d4:87:c8:04:6b:f8:
                    3d:48:38:2d:c1:7e:85:df:02:a5:2c:f8:2d:7e:b4:
                    cc:d3:50:fa:d9:f4:be:bd:dc:25:32:b9:91:e2:3b:
                    e1:86:0d:11:f9:15:d5:35:47:2e:0c:a9:8f:a7:c8:
                    0d:27:e5:1a:ce:d4:6b:55:64:b0:41:e0:96:df:21:
                    97:34:24:d3:25:5d:17:a2:7d:a0:a1:62:59:46:ea:
                    92:ec:8f:ef:4f:fa:94:88:ca:93:c2:6f:7a:c9:9b:
                    02:04:88:33:90:a4:b7:2b:2f:d2:e9:58:61:f0:b9:
                    0c:f6:53:be:06:7a:82:97:09:36:62:c8:51:cd:22:
                    0d:e1:7b:b9:cf:f0:ef:ef:53:09:2e:34:bd:1b:1b:
                    9b:1b:4a:68:56:32:87:5d:d5:bf:0f:39:97:31:df:
                    ca:23:c1:6d:cf:69:eb:a5:7f:91:77:4a:f1:44:50:
                    27:4c:49:e8:85:5a:55:69:6c:90:88:d1:f3:b9:48:
                    cd:7a:77:c7:40:7f:51:d6:56:98:aa:38:1a:bc:24:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:19:6C:07:58:05:3E:21:EE:4E:B9:1D:FB:AC:28:AC:EC:81:F1:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/e7b232a9-af0c-3d2a-b23b-63139953717c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl

            X509v3 Authority Key Identifier:
                keyid:08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:52:dd:8b:36:0b:07:18:7c:56:ac:3d:d5:1d:23:da:db:b1:
         c1:78:f1:b5:db:ea:ac:85:e8:c1:31:20:bb:df:f7:d5:9f:18:
         ec:b7:8d:11:2b:32:5b:5a:78:8f:02:a7:33:e5:95:4e:99:c7:
         94:3f:0f:ec:ff:42:7f:0a:17:0a:0b:c8:1c:34:be:a1:c1:44:
         42:e6:fc:4e:47:a2:74:91:b1:d9:5f:d3:27:ff:0d:e1:cc:11:
         d1:85:0b:df:2c:34:88:71:f7:4c:e7:e4:14:92:4f:52:96:82:
         2a:aa:e3:47:d1:67:89:e3:9e:3d:91:c4:e2:f1:be:24:d6:4a:
         fa:67:9b:da:5b:f7:47:72:54:32:31:95:0a:1f:ed:51:ae:86:
         4d:56:94:05:c8:81:0d:19:4d:97:ca:ce:3b:05:d0:db:c3:9f:
         20:d8:80:01:68:24:97:35:10:fe:8b:b2:78:a7:99:4e:b3:a5:
         22:19:88:91:5a:13:28:0e:af:36:be:28:91:f6:51:97:df:20:
         21:df:e8:b3:be:bb:d1:b3:38:1f:58:b1:8b:1a:a1:83:5b:68:
         0c:c5:0e:92:75:c9:cd:1f:ac:d6:22:01:24:91:7a:91:45:95:
         27:bd:49:8a:d2:ed:25:53:c1:bf:75:01:1b:80:75:d8:10:22:
         7a:a0:1b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 09:48:30 2025 by rpki-client