Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/20b12159-fae1-324b-856e-4ffaaa0299f4.roa
File:                     20b12159-fae1-324b-856e-4ffaaa0299f4.roa (raw, json)
Hash identifier:          +zpUQ84/T4WcYeVvR8sR2R+HVzagVGRBTVI09njHkdI=
Subject key identifier:   3C:FD:10:B7:8D:12:6A:91:2E:30:92:D1:73:55:EA:44:A7:33:B3:90
Certificate issuer:       /CN=12a9b198-d23d-4f41-8397-cc467b398bc3
Certificate serial:       010D0C9F43285849EDE0A15BB5B079A9AAE42B80
Authority key identifier: 72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/20b12159-fae1-324b-856e-4ffaaa0299f4.roa
Signing time:             Wed 21 May 2025 17:53:00 +0000
ROA not before:           Wed 21 May 2025 17:53:00 +0000
ROA not after:            Tue 19 Aug 2025 17:53:00 +0000
asID:                     16796
IP address blocks:        198.163.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:e0:a1:5b:b5:b0:79:a9:aa:e4:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12a9b198-d23d-4f41-8397-cc467b398bc3
        Validity
            Not Before: May 21 17:53:00 2025 GMT
            Not After : Aug 19 17:53:00 2025 GMT
        Subject: CN=70899a42-da66-4f0e-8d88-0a9b2639731b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:1b:5c:54:f3:d7:9b:57:a4:9c:31:f9:b3:
                    83:a6:67:28:0e:e8:c9:3b:91:79:e5:79:0d:61:3e:
                    0a:af:03:f3:f5:c1:7e:f8:09:c3:c5:49:c9:90:a7:
                    82:a8:8d:dc:e9:bd:a7:da:42:98:8f:ad:3b:58:6d:
                    c7:f5:c6:28:a8:c6:c7:af:ff:d0:9f:2e:e4:5b:a7:
                    87:ba:74:a6:78:af:c2:5b:c3:c6:bb:70:4e:00:82:
                    0a:fc:dd:ec:cc:16:f9:54:ac:be:a9:56:80:3c:68:
                    70:fa:5f:33:60:b0:25:1e:f6:12:63:40:87:52:36:
                    95:00:5a:71:df:4f:73:a4:bf:23:5d:6a:ec:d7:40:
                    95:07:58:b5:41:e7:18:46:2b:09:db:98:4d:7d:c3:
                    df:f5:20:c0:fb:c6:df:b2:da:5f:5f:76:70:f6:11:
                    07:7a:2e:09:32:21:26:af:2d:6a:47:3c:0e:46:1f:
                    8c:90:e4:97:d0:16:8b:6e:2b:86:0f:e6:69:91:9e:
                    dd:47:32:9e:0b:7a:a7:0a:63:66:5c:5e:3d:e6:f7:
                    ef:fe:fb:93:d7:17:f8:b3:b5:29:e1:fd:2b:2a:e8:
                    68:b4:11:9b:9f:07:95:a4:ee:70:6f:69:d0:45:2b:
                    41:fb:a4:bd:63:97:f4:c9:37:db:67:70:69:73:35:
                    3f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FD:10:B7:8D:12:6A:91:2E:30:92:D1:73:55:EA:44:A7:33:B3:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/20b12159-fae1-324b-856e-4ffaaa0299f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl

            X509v3 Authority Key Identifier:
                keyid:72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.163.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:96:cc:0b:a5:70:33:85:d7:4f:62:b7:0f:51:a8:6b:86:6d:
         40:cb:ec:b7:ce:90:00:f8:0c:51:39:d3:b9:8e:48:30:1d:ce:
         5a:66:af:30:8d:b7:68:3e:3e:78:bd:01:2f:9e:f9:17:2f:66:
         3a:1f:19:4c:f7:bd:c3:7d:bb:01:9f:fa:30:d8:8b:aa:a7:b2:
         c2:ba:05:43:5d:e7:cb:2f:8e:16:cc:e0:49:21:d7:a9:f4:16:
         c0:de:0f:79:01:d7:ce:d3:0f:6c:79:96:d5:10:3d:c8:13:3c:
         b4:04:f4:f9:04:8c:e0:2d:e8:29:20:36:49:10:f5:41:a2:88:
         ac:af:86:47:e5:67:6a:e2:62:01:a1:01:af:e6:7f:c3:b1:46:
         33:8d:40:3a:5d:9d:17:af:96:fd:0f:ca:42:b8:54:94:ab:b3:
         84:79:74:58:b7:49:8a:21:78:58:f3:37:ce:73:ea:70:32:7a:
         6a:1b:81:2d:31:35:79:69:72:a6:9c:87:8b:b3:c3:c0:76:62:
         ff:96:c4:ea:4c:8f:41:c7:e1:18:83:17:04:46:ec:5b:c7:85:
         62:44:0f:f8:ca:47:b8:28:bb:6c:2f:c9:79:2e:57:fe:75:05:
         68:c4:66:13:98:de:3c:e9:58:0b:17:d6:43:a8:65:21:29:03:
         f2:10:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:12:39 2025 by rpki-client