Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e490c157-7668-37e4-8bb5-f656ce640471.roa
File:                     e490c157-7668-37e4-8bb5-f656ce640471.roa (raw, json)
Hash identifier:          kQsWQEXjuiumFK6uGsvNrdupmjhb9Ajxp7Fu74R21Dg=
Subject key identifier:   50:84:82:84:9A:D6:40:19:79:28:81:02:03:DD:59:4A:64:6A:22:BB
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584A8B0B656938D36AFAE0D8E500
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e490c157-7668-37e4-8bb5-f656ce640471.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     3257
IP address blocks:        198.66.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:65:69:38:d3:6a:fa:e0:d8:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=187627c8-2b76-4fde-8067-65bbf033f064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:d9:ad:bc:f5:8e:16:a9:44:45:43:05:f9:
                    36:d8:f6:a2:6b:2d:e1:0a:e2:0c:f6:12:3e:58:96:
                    45:0f:87:f6:28:30:06:c9:c8:f4:64:79:38:b3:0e:
                    6c:02:e5:94:21:51:bc:87:b8:95:19:b5:49:c5:d2:
                    ac:fa:99:56:8f:5b:da:9b:31:d9:15:d8:85:1e:3d:
                    c7:40:83:e8:f9:36:d8:bb:95:ff:5c:7c:4d:c8:11:
                    0f:c1:8a:c9:2b:1d:2c:d7:af:b1:1c:6c:85:e7:23:
                    e6:6b:05:4d:c7:a0:89:29:6b:ed:e4:07:fc:c5:77:
                    54:c4:c8:41:8e:07:7d:2a:ba:d0:b7:2e:d6:52:df:
                    06:4c:49:31:6f:6a:49:a1:6d:ed:b9:87:a1:5e:b4:
                    34:d9:f7:34:58:8a:e9:f3:89:7e:9e:b0:17:6a:70:
                    a4:68:a0:05:47:6e:d7:81:7d:63:5c:9d:34:41:fc:
                    e5:3f:a9:48:fc:64:33:6a:bb:dc:ec:9b:20:53:9f:
                    a0:4b:b8:3f:c5:1f:98:26:ea:d8:c9:37:79:76:54:
                    9f:ae:29:d2:ca:fb:5e:65:92:fe:6a:41:12:e4:95:
                    69:be:68:52:65:67:01:99:b5:ae:8e:41:d2:70:41:
                    87:56:75:0c:89:53:ae:c3:ad:5b:16:35:c9:7c:86:
                    28:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:84:82:84:9A:D6:40:19:79:28:81:02:03:DD:59:4A:64:6A:22:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e490c157-7668-37e4-8bb5-f656ce640471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:17:5d:63:34:e1:62:36:1d:f9:3a:9c:62:d2:76:88:54:b8:
         bf:b1:5d:27:d7:96:af:93:76:ab:64:7d:8b:9c:c1:34:c4:db:
         9e:68:39:99:42:4e:39:39:80:cf:a8:b1:42:04:09:7d:1f:f8:
         38:24:51:48:03:19:00:dd:46:3e:02:f3:d0:6f:8d:7a:e3:78:
         4c:ce:50:24:2e:20:c7:fd:0d:1a:6d:3c:d8:f4:2b:e6:31:e7:
         84:2e:49:a0:68:f4:04:76:f7:ff:f7:9c:86:c9:40:71:d2:47:
         9b:81:12:0a:e9:d8:fb:87:c4:dd:88:a0:9c:5f:66:d7:38:d1:
         6e:a4:a3:2c:37:a0:ed:16:94:42:74:54:5e:4c:58:1e:d3:84:
         ba:c2:fc:fd:e2:92:4f:04:b1:15:8d:c5:bd:aa:2b:a7:a1:7b:
         8c:2c:7f:a8:fa:2c:ec:f4:cc:ac:44:69:96:2a:1a:24:50:97:
         0d:e7:53:5d:7a:4f:ee:a3:38:b8:33:ed:01:29:fb:eb:9b:1a:
         63:85:d9:0d:24:64:63:18:1c:5c:41:14:4d:c5:79:87:be:2e:
         4f:f6:77:0d:97:12:1d:02:65:ee:5f:7d:6c:dc:40:30:64:44:
         13:7b:8b:a3:83:af:54:40:45:2e:96:44:50:12:f5:5a:08:84:
         e5:a7:2d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 02:04:58 2025 by rpki-client