Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/18d57279-9cce-36bc-b8e1-741147e33233.roa
File:                     18d57279-9cce-36bc-b8e1-741147e33233.roa (raw, json)
Hash identifier:          fS2G48vjXCX+3sIFjyhQZ6rpMiav76X0ZnTPxcca244=
Subject key identifier:   85:17:D8:F3:DB:D8:51:40:E9:A4:0A:77:2B:EF:20:3A:80:1B:DE:CD
Certificate issuer:       /CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
Certificate serial:       010D0C9F4328584AFC1C06312FFC4BCE2D66CB40
Authority key identifier: E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/18d57279-9cce-36bc-b8e1-741147e33233.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     393444
IP address blocks:        205.207.186.0/24 maxlen: 24
                          2602:fa4d::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:06:31:2f:fc:4b:ce:2d:66:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=52da0b40-0cc8-40ae-9d53-6424cd877871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:32:cc:18:c0:fd:f6:f0:e6:eb:57:17:53:de:
                    3c:35:fa:cf:40:25:a5:f4:0c:d3:4f:70:24:27:c3:
                    67:d1:e4:6e:cf:51:d9:43:9a:a2:e9:6d:ea:d9:54:
                    ec:f3:f8:c8:25:88:aa:6b:59:c1:2c:10:34:1d:d2:
                    18:af:62:4b:6e:9b:3a:fc:16:57:19:a7:f6:dc:b4:
                    c8:cb:0d:6e:47:f4:77:89:ad:07:3e:68:97:04:73:
                    df:c2:b7:4b:d2:dd:94:be:55:ee:f0:cd:4a:13:83:
                    19:2c:40:65:75:66:a8:c4:50:ac:e0:0d:d0:c6:4a:
                    8f:a8:36:84:f7:1d:88:e0:5b:23:c8:d3:f6:02:91:
                    21:61:47:81:23:05:af:80:35:da:50:4d:23:03:bc:
                    6a:f6:1b:3e:f0:88:f9:74:76:00:93:18:fd:03:ab:
                    24:fa:43:e6:52:8c:1d:e1:20:fd:5a:65:29:7c:89:
                    61:b0:30:32:5d:a2:ad:7e:ad:e2:1b:80:ea:e0:4e:
                    5b:77:1d:23:09:a0:78:9a:22:9c:04:14:22:64:f1:
                    fd:aa:e4:0a:53:22:bc:1f:2d:1d:bd:b1:29:b1:f1:
                    cb:4c:e6:bc:e7:98:b6:e5:c8:99:ec:f1:a6:52:28:
                    91:10:66:ef:c0:e3:d4:1a:99:ac:0c:04:f3:05:e5:
                    38:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:17:D8:F3:DB:D8:51:40:E9:A4:0A:77:2B:EF:20:3A:80:1B:DE:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/18d57279-9cce-36bc-b8e1-741147e33233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl

            X509v3 Authority Key Identifier:
                keyid:E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.186.0/24
                IPv6:
                  2602:fa4d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c7:f0:b3:64:6a:0d:3a:3d:6b:ff:a2:f2:47:5e:60:fc:95:
         60:e5:d1:d7:da:08:72:3a:eb:3f:c4:8e:6c:dc:8b:e2:29:63:
         ad:1c:7b:92:13:81:8c:cb:4e:43:a0:a6:eb:b1:59:06:6e:d2:
         db:86:20:16:50:b0:2b:b8:2f:2b:06:7b:77:52:71:08:4f:87:
         ac:9e:65:2c:ab:55:6c:e1:f9:59:84:72:c5:c3:08:82:44:ca:
         f0:49:54:df:4f:41:b0:b5:d9:4d:1c:6e:da:7d:c3:0f:0e:09:
         bd:15:5a:7d:45:ca:d1:08:06:e7:78:29:94:eb:9a:f8:f1:f6:
         8e:eb:f1:78:c3:bb:fa:c3:8b:9f:2c:05:50:b9:f8:ee:0f:28:
         25:e7:1a:2c:76:64:a4:d7:56:5c:fe:73:56:74:b8:32:64:1d:
         56:18:70:73:46:1a:00:d3:08:07:88:26:3b:82:1c:89:84:8d:
         6d:67:1d:7c:f3:f1:29:20:c3:5a:3a:fe:be:38:35:ad:1c:29:
         cc:8c:37:1d:da:93:db:0c:c2:9f:25:84:16:5e:46:d3:6e:58:
         04:4f:7f:12:40:fd:dc:49:7c:4e:c1:4c:d4:8e:76:0e:77:79:
         c2:af:52:ca:d2:9a:ca:73:4f:3a:f5:ce:e6:c1:cd:88:19:20:
         99:82:53:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 18:16:04 2025 by rpki-client