Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dda0d2a6-399f-3e07-a3ec-c3030205e12c.roa
File:                     dda0d2a6-399f-3e07-a3ec-c3030205e12c.roa (raw, json)
Hash identifier:          TbVQOzaagdVoP1ju7jMuRA8X/82JJR68gAH0U2A2wB4=
Subject key identifier:   44:75:EF:FF:51:9E:9F:24:F0:B3:E6:D2:6F:8C:E1:CE:68:D0:F6:C1
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AF951511A190BFA88491B4D80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dda0d2a6-399f-3e07-a3ec-c3030205e12c.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     5650
IP address blocks:        168.93.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:51:1a:19:0b:fa:88:49:1b:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=f95ddc70-9702-420c-9194-dcd31dc41e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7b:14:82:b1:5a:31:3e:5c:59:83:00:ef:f3:
                    83:48:7c:e3:8a:14:f5:b0:7c:76:f6:c9:f3:88:a9:
                    0f:36:24:5f:b6:42:a2:11:d7:62:eb:a6:c2:7f:e3:
                    a2:61:c7:55:c5:8e:93:fa:69:7f:0a:d0:d8:d2:db:
                    0e:a3:06:a7:c6:4e:b8:e5:52:8e:d6:91:1c:21:ca:
                    11:d3:85:66:51:08:f5:a8:ff:c7:62:91:ca:11:e7:
                    a3:5c:a6:d1:3b:b4:8e:2f:77:d2:10:84:a5:16:05:
                    c5:b3:02:6e:08:e8:a1:01:4b:7e:92:1f:3b:2f:46:
                    cb:49:7c:3c:60:bb:81:52:70:00:90:2d:05:44:77:
                    8d:39:32:59:c2:34:c5:dd:11:c0:69:37:39:ca:2e:
                    33:56:43:43:5c:f5:ab:cf:86:cc:51:5e:47:0f:0c:
                    87:58:bc:35:16:62:be:85:db:33:ed:5d:10:6f:d9:
                    cb:0e:4e:04:69:2e:df:c7:a9:04:c0:fa:4f:80:74:
                    a1:24:ef:7a:81:02:45:94:b3:a9:0e:33:39:14:c9:
                    0e:bf:3f:3b:53:bf:75:00:74:63:a6:59:05:37:f2:
                    99:4a:4d:bd:30:4d:ce:b2:c2:06:92:47:4d:36:a8:
                    ce:94:07:5e:94:51:21:2b:5c:3a:c0:c6:61:41:fb:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:75:EF:FF:51:9E:9F:24:F0:B3:E6:D2:6F:8C:E1:CE:68:D0:F6:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dda0d2a6-399f-3e07-a3ec-c3030205e12c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ca:65:d7:a5:c8:74:43:4b:bd:2b:16:35:f5:22:c3:64:65:
         1a:3e:3a:95:98:b3:41:4e:3e:fb:76:94:98:8b:cf:e3:3a:88:
         f0:57:0e:4c:9e:73:75:d4:b3:94:4a:05:c6:d0:40:4a:ff:93:
         b3:27:09:66:89:4b:5e:36:24:9c:d7:84:13:15:87:47:b6:de:
         d7:16:a1:06:4b:b4:8b:f8:63:a5:7c:4a:5f:83:75:88:a0:25:
         75:2a:26:6e:74:08:7c:23:f4:44:1f:f0:76:1d:37:17:7d:91:
         ef:f0:3d:20:58:55:9b:bb:be:ac:3c:e6:1e:f1:47:f4:7f:e8:
         ae:2d:50:39:ff:78:04:28:2a:c3:5e:32:75:d9:67:9c:aa:4c:
         63:de:00:50:50:ca:fc:2c:f5:2a:b0:da:ac:e9:d4:69:c2:ae:
         bb:1c:08:a4:a5:49:6d:df:f2:c7:4a:94:56:b6:c2:7b:2b:8b:
         62:39:b8:35:c3:07:83:05:3c:15:09:57:92:fd:56:97:23:c5:
         c5:ef:79:49:d0:b1:7f:7a:33:e9:ac:1d:70:35:48:1c:ae:62:
         66:d6:a5:16:a7:0f:49:f4:9a:83:c2:43:3e:3b:81:12:8d:28:
         36:1a:51:79:80:00:69:4f:8d:26:8e:fd:4a:25:aa:0b:2f:2d:
         04:f8:39:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 20:19:19 2025 by rpki-client