Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fcda9ef9-6053-3b58-bc84-073fdb508253.roa
File:                     fcda9ef9-6053-3b58-bc84-073fdb508253.roa (raw, json)
Hash identifier:          ++UcRkj4iqf0wi5CeBVGJTfEboIOf4rrE9Fv+uVTGXM=
Subject key identifier:   DC:2D:5E:E4:62:AB:93:BD:E6:A5:30:A8:F1:E7:CD:E7:16:B3:51:14
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B2FC1A22312BD6759542F9840
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fcda9ef9-6053-3b58-bc84-073fdb508253.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     397220
IP address blocks:        198.133.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:a2:23:12:bd:67:59:54:2f:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=a3ce7413-eda3-4914-8266-9e9ef6931ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:6c:48:0e:1f:79:bb:c0:14:de:45:b0:c5:9e:
                    e2:ff:d8:4c:d7:15:1f:c8:f6:96:4a:cc:64:47:90:
                    39:3d:45:ec:a7:12:33:23:33:8e:e5:2e:c7:33:85:
                    c8:9b:3e:c1:fb:3c:27:d4:8f:3b:8e:49:c1:ae:e9:
                    cc:c5:2f:ef:02:71:ee:72:40:4e:29:86:1b:7b:1b:
                    ce:c5:b3:63:a1:a5:6b:56:95:1d:ee:6b:b4:0a:68:
                    06:a4:dc:08:d4:15:e5:42:0f:f7:25:f4:24:62:91:
                    f2:8a:8f:ae:7d:1a:d4:02:18:bb:be:6a:5a:ef:46:
                    af:98:17:57:35:5e:13:4e:b5:b6:55:73:e1:50:fb:
                    5f:30:aa:9a:98:3d:99:06:98:1e:21:5b:a3:25:5e:
                    33:f3:6a:62:ee:c3:fc:ef:ac:c9:78:2b:1f:19:b5:
                    fd:b0:0d:32:94:ff:ff:5e:94:8f:fe:63:45:f1:c9:
                    b3:c8:60:4f:d9:78:cc:7e:9b:32:32:0f:d0:08:dc:
                    9c:af:a5:15:e5:05:03:eb:3e:22:50:59:fd:54:1e:
                    50:a6:eb:04:0e:73:1c:24:22:11:33:ce:54:c8:8f:
                    a4:f3:42:81:32:03:33:8b:1d:43:21:fb:5f:f9:de:
                    05:4c:77:a7:66:2d:14:98:6c:f3:33:b4:35:e5:28:
                    1c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2D:5E:E4:62:AB:93:BD:E6:A5:30:A8:F1:E7:CD:E7:16:B3:51:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fcda9ef9-6053-3b58-bc84-073fdb508253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:99:48:e5:ad:3f:58:e2:0d:f3:fd:30:14:1e:dc:67:5b:57:
         e1:52:5d:a5:f2:06:d9:4b:c2:ad:27:47:3b:5b:84:5c:e8:3d:
         e9:e9:d4:ee:86:6a:e0:e8:6d:3e:12:43:57:b0:e9:d6:15:f4:
         fa:f8:a8:eb:cd:fd:4a:1a:04:77:85:d5:62:2d:dd:ba:d0:c2:
         de:76:78:60:65:32:3a:24:8d:b4:72:40:c1:50:22:89:5f:1e:
         d3:95:f4:5e:ed:45:c0:56:43:5c:c5:a9:1f:91:25:48:16:8b:
         10:da:e2:f1:84:7d:7a:09:e9:29:e4:7b:51:a6:8c:d6:31:0e:
         93:2a:31:46:62:e2:41:68:72:39:02:cd:6a:1a:b5:5e:1f:77:
         08:db:39:93:10:0d:ec:e7:c5:97:d9:f6:30:28:4a:4b:74:96:
         21:5a:06:87:a2:09:7b:cc:e4:d7:f0:12:e3:15:57:75:10:59:
         88:84:d9:cf:24:02:fe:58:d9:e4:3e:d5:7c:07:37:c3:53:1f:
         cc:76:f4:eb:07:fd:92:25:0a:1a:82:07:71:ff:60:cc:74:98:
         3a:75:1e:87:72:65:55:b2:db:af:5d:96:c1:a8:1e:ea:cf:67:
         12:c3:51:16:8f:9a:a8:82:f7:9b:09:cf:45:ea:d3:cd:f6:14:
         87:12:5a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 13:54:14 2025 by rpki-client