Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/a4756c13-23c2-3a47-9843-b60611ab1d12.roa
File:                     a4756c13-23c2-3a47-9843-b60611ab1d12.roa (raw, json)
Hash identifier:          ZYywuRWbNaIcnt9jNShCazuqD52KVqal6Ew3Iuch99M=
Subject key identifier:   42:0E:DA:0C:B2:04:9E:15:51:7C:99:81:2D:59:44:30:FE:49:AD:93
Certificate issuer:       /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Certificate serial:       010D0C9F4328584A90A0BE6B94911CA290F037C0
Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/a4756c13-23c2-3a47-9843-b60611ab1d12.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     26356
IP address blocks:        216.147.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:be:6b:94:91:1c:a2:90:f0:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=c79e5f9a-9831-4593-858d-54d2888a2599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9b:4f:9c:53:6a:46:ee:cf:27:8c:c7:8a:7e:
                    b0:22:1b:cc:05:35:e2:bb:e3:29:e0:94:b3:84:77:
                    3b:75:ab:c0:ab:98:d5:87:be:8e:9b:69:cc:82:c7:
                    85:f1:d4:c9:dc:48:ed:b7:4f:44:16:8d:da:cf:b0:
                    e0:36:4b:7c:12:04:c0:e5:42:8c:31:88:a8:0d:f5:
                    bc:25:e7:0a:5f:7a:c4:93:e9:a9:a5:6b:06:a3:80:
                    17:ad:97:d9:b8:4c:fa:49:05:fd:f6:2e:5d:41:8a:
                    a8:a7:d8:60:27:98:9d:1a:07:c7:5f:82:37:48:07:
                    38:51:38:85:8c:d6:43:5b:e4:e7:21:8b:d3:22:9a:
                    b0:ab:64:bc:f2:0c:d3:0d:12:b7:39:fa:ea:50:df:
                    31:b5:2f:53:cf:2f:d8:ad:0a:5d:d4:7e:46:e7:3e:
                    90:5d:f4:bf:8c:36:d9:36:14:3c:9d:a9:25:d2:44:
                    41:9e:e8:89:a8:0c:97:b6:3d:c0:bb:fa:0d:b0:06:
                    df:db:f1:e5:3e:2d:7e:4b:ac:46:24:c6:32:6e:cc:
                    d4:d7:81:35:eb:29:f3:9d:fd:05:49:ef:46:a0:73:
                    8e:44:9d:0a:80:fe:56:14:48:c6:9b:c2:c1:d3:58:
                    79:0b:77:f3:1e:5e:b3:7a:c9:a6:8f:35:69:11:d1:
                    80:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0E:DA:0C:B2:04:9E:15:51:7C:99:81:2D:59:44:30:FE:49:AD:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/a4756c13-23c2-3a47-9843-b60611ab1d12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl

            X509v3 Authority Key Identifier:
                keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:84:2f:8e:c4:49:00:09:24:3f:4b:60:0f:1b:a7:9f:43:9c:
         39:4e:f0:90:a3:94:7e:72:12:24:3e:b5:ac:02:42:05:25:d5:
         56:f5:d3:cd:b2:af:ec:79:ae:1c:49:1d:63:b6:ad:f5:c7:fd:
         d2:00:ca:f9:a2:be:fd:d9:19:73:68:c9:38:f5:98:22:e1:d8:
         c9:9d:c1:c3:f3:6e:d7:39:01:75:9e:09:33:3b:9b:16:c3:6b:
         b4:2c:8e:94:6b:ca:a6:6a:10:65:2c:da:fa:90:2d:fe:d4:5c:
         fc:23:2c:66:ff:bd:b4:52:7f:88:81:78:59:84:38:91:0c:12:
         ed:ba:c4:a0:5c:e1:29:a8:d1:09:8e:f1:f6:75:8a:a3:c0:31:
         a1:11:bf:54:84:59:9a:a2:8b:94:89:dd:2f:d9:b6:36:66:b2:
         87:a6:37:35:f6:4b:88:b3:eb:05:64:91:d3:bc:6c:64:59:51:
         70:3e:bf:85:92:f4:49:13:30:b8:93:a9:9c:e3:e5:e5:31:b6:
         d4:b0:a4:8f:d8:0d:55:22:d7:84:90:be:b4:9d:4b:92:f0:4b:
         7d:ba:9f:d3:28:b3:35:b7:a8:39:b8:64:77:54:89:ea:77:a6:
         cd:ac:02:63:60:38:1f:26:bd:06:9d:c0:d7:a5:f0:1d:10:d7:
         be:fa:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:42 2025 by rpki-client