Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/c8d20943-c459-32dc-bb1b-21a6aaa29f13.roa
File:                     c8d20943-c459-32dc-bb1b-21a6aaa29f13.roa (raw, json)
Hash identifier:          Wv3/sf1GHDNyAQhN9nEIAk3T66LGAj6FirwA5RH2Z9M=
Subject key identifier:   2C:FB:7F:41:F7:9B:F3:09:64:2B:D2:88:7F:F3:34:E4:06:75:19:CC
Certificate issuer:       /CN=01430e13-506f-444b-8727-f36154b32c07
Certificate serial:       010D0C9F4328584A90A0C57586B8298D8A2651C0
Authority key identifier: 49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/c8d20943-c459-32dc-bb1b-21a6aaa29f13.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     46256
IP address blocks:        198.217.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c5:75:86:b8:29:8d:8a:26:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01430e13-506f-444b-8727-f36154b32c07
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=b5d6e518-772a-4733-9d5a-184a561c4ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:95:f6:89:e0:6d:fe:fe:f2:a5:6e:c4:80:
                    13:e5:55:ad:19:72:aa:47:c7:8a:d8:95:68:1e:5d:
                    63:1a:b4:92:83:53:76:6d:09:29:85:72:d6:49:54:
                    41:1e:fa:c5:19:22:d9:0b:32:af:c8:04:35:43:62:
                    a9:e6:cf:51:0d:b9:f6:70:02:e2:15:2c:db:9d:9a:
                    3a:0b:8a:d0:99:4f:03:00:7a:33:7b:1a:31:05:f8:
                    25:59:79:2c:73:a1:b5:f9:6f:d4:d5:1c:f9:dd:f0:
                    71:95:be:c7:52:6f:d5:0a:90:90:73:44:5d:85:4a:
                    2d:8f:17:31:8c:36:f2:71:40:db:95:f8:1a:67:d7:
                    58:7c:72:f1:b4:36:65:d3:3d:9f:6b:04:07:17:61:
                    8a:e6:43:e9:73:28:69:8d:9b:8a:cf:85:20:84:66:
                    24:9c:41:85:7d:83:48:a7:03:9a:e1:d5:cd:fe:ee:
                    c4:db:8f:4e:d1:bf:48:c5:55:b3:13:be:21:b5:49:
                    17:7b:f9:ef:d1:7d:5f:94:01:82:fa:a8:cf:07:d6:
                    7e:76:73:00:90:b1:4d:72:f8:01:9d:79:a6:33:a3:
                    1e:4b:90:6b:3e:35:36:b7:ce:7a:93:49:e4:81:ca:
                    7b:34:a4:47:8e:c0:19:26:41:3b:d0:e0:58:b6:fe:
                    7a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FB:7F:41:F7:9B:F3:09:64:2B:D2:88:7F:F3:34:E4:06:75:19:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/c8d20943-c459-32dc-bb1b-21a6aaa29f13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.crl

            X509v3 Authority Key Identifier:
                keyid:49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:1c:07:a8:ee:c1:0a:7d:dd:bf:27:88:fb:d8:3a:ca:0b:ab:
         8a:ff:0b:f7:59:91:0b:b3:aa:ae:db:5e:60:ed:2a:2e:ef:c6:
         47:e3:4f:c2:72:17:55:61:b5:d5:84:8f:6c:2d:09:a4:65:60:
         dc:c8:f9:68:0b:11:af:ef:a7:53:0d:a5:7f:51:d3:38:a1:16:
         46:f0:fa:d3:f6:6a:52:2a:71:57:41:b4:18:a1:26:e8:14:8f:
         89:f9:a4:66:e5:10:25:22:cd:92:fa:73:d1:7d:b9:43:22:c6:
         63:eb:6f:2d:ad:e2:6f:9a:e4:72:fa:57:88:c2:bc:55:43:9e:
         bc:37:1a:e0:82:5f:01:8e:12:3b:7e:c5:e2:1a:f4:f8:5f:3e:
         72:6e:5f:76:2e:0b:56:22:49:c5:f7:4c:48:82:f0:aa:6c:59:
         ad:da:e9:49:91:45:95:16:e8:6c:fa:e2:9f:af:f7:ed:ee:a6:
         07:bd:d9:55:b4:27:c4:9e:ad:8c:80:64:f7:3b:d7:83:88:3a:
         f9:eb:5c:64:aa:a3:75:71:fc:88:65:e7:54:19:dc:41:0d:2e:
         87:fe:a3:52:01:b7:5a:48:30:fe:e0:ae:ac:ee:ae:7b:fa:dc:
         a2:39:2c:fe:f5:56:22:dd:da:ae:2e:f8:74:a8:31:15:69:ee:
         92:c7:a4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:52 2025 by rpki-client