Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/b01df18e-0d7c-33e0-adb0-0f0e87be8b72.roa
File:                     b01df18e-0d7c-33e0-adb0-0f0e87be8b72.roa (raw, json)
Hash identifier:          GJVIGymAaG+Z5uS9FlqqfTp9Gs1foTqeUpRkl0tWu+8=
Subject key identifier:   6F:AE:AA:E3:12:8E:45:A5:65:4B:6B:4A:93:34:3C:F2:AF:2C:FA:B3
Certificate issuer:       /CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
Certificate serial:       010D0C9F4328584B0FA6BCFE1684083167AE5480
Authority key identifier: 40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/b01df18e-0d7c-33e0-adb0-0f0e87be8b72.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     13329
IP address blocks:        199.180.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:bc:fe:16:84:08:31:67:ae:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=54819807-56ba-450b-885f-77ff1fa83c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:40:4f:34:c0:a9:fc:2e:c9:77:7b:0f:ae:ff:
                    7c:d8:68:49:ab:91:a2:1e:a5:2e:8c:36:1d:db:27:
                    42:06:ec:44:e9:2f:80:3d:af:fe:b5:7d:fb:95:7c:
                    69:07:98:f0:b1:2d:bc:f4:03:b4:a3:d4:a7:1c:d8:
                    f8:5a:b3:1b:bb:f1:31:c2:ad:50:ab:58:6e:14:93:
                    37:1b:8e:0b:dc:91:8e:28:a6:96:fa:08:b3:c9:75:
                    29:37:15:bd:a9:e0:bf:30:c6:d7:4f:f7:bc:e3:9a:
                    25:dc:d2:3a:0f:11:60:f8:d7:54:3e:fd:1d:b8:6b:
                    72:80:ae:fc:7f:9d:8a:b9:17:23:66:19:eb:7f:1b:
                    11:76:79:88:3b:a5:88:8d:e6:2b:a1:34:3e:67:f7:
                    3f:dc:68:c5:31:7b:c3:5b:69:7b:94:eb:53:f6:82:
                    a0:99:94:4f:1c:6d:b5:cd:54:dd:38:9e:04:31:02:
                    f0:3c:c8:4c:1a:55:b3:1c:b6:6e:1c:0e:f3:eb:86:
                    4d:db:88:c2:3b:24:fd:78:1f:57:75:b5:1f:26:50:
                    08:df:55:8f:8f:6e:68:96:9f:96:e5:bb:ce:25:75:
                    52:49:e2:99:76:48:b2:24:df:7a:ba:0a:ee:5f:7d:
                    f8:21:26:c6:67:95:0c:4b:e9:21:22:90:ed:1d:11:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AE:AA:E3:12:8E:45:A5:65:4B:6B:4A:93:34:3C:F2:AF:2C:FA:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/b01df18e-0d7c-33e0-adb0-0f0e87be8b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl

            X509v3 Authority Key Identifier:
                keyid:40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f7:71:1b:10:07:34:95:7b:cc:7f:03:9f:c6:a3:17:4d:40:
         91:66:4c:95:ac:be:95:ac:f8:50:aa:34:3a:48:90:1e:b0:4e:
         76:d9:d9:61:a2:ba:39:f7:25:a5:d4:e4:6c:10:39:bc:2d:e8:
         78:e9:d2:5a:53:e8:02:39:64:ab:b5:0a:13:8f:5d:6a:5a:6a:
         9b:61:07:fb:8a:60:c2:df:8d:60:0e:cc:b2:df:f3:97:8c:f8:
         5b:60:42:fe:e1:91:79:48:ef:82:be:68:b4:ff:dd:8e:7d:9a:
         47:0e:65:c0:d4:c0:13:90:d2:9f:af:32:1b:21:ee:2b:a3:08:
         5b:4d:17:5d:7d:9f:10:11:0b:9d:c7:2b:a2:b7:a7:5c:fb:0b:
         ba:1b:9f:a9:b5:bb:ba:18:1c:75:ab:4c:07:6a:ee:17:59:5e:
         78:8a:01:aa:36:ef:da:90:e3:8c:1b:3d:73:48:7e:9b:d3:95:
         42:e5:54:b8:63:f8:e6:49:4c:b1:7d:5a:3b:95:df:f2:2b:70:
         c8:98:a9:f3:54:74:d9:61:e8:4b:aa:b8:85:85:d7:fa:6c:ee:
         22:05:95:14:13:46:0b:b0:c4:27:ff:2f:6f:e3:e1:f8:cd:f4:
         82:f6:65:44:b8:dc:02:bd:c7:9a:ba:f6:e3:e7:96:4e:87:af:
         77:10:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:23:08 2025 by rpki-client