Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/9fb0e461-b76c-3855-80c1-e2c736d9d409.roa
File:                     9fb0e461-b76c-3855-80c1-e2c736d9d409.roa (raw, json)
Hash identifier:          LyeivYzR6Q4kgfo2kyORHtB4yeh6WslmdPMuGG8b2FU=
Subject key identifier:   0A:1F:E1:8D:E0:D3:A2:35:42:BF:36:02:47:F6:A2:6F:60:D1:EA:53
Certificate issuer:       /CN=17e20fae-392b-4b22-b475-c6dff7142fa6
Certificate serial:       010D0C9F4328584AAB264A79A9120D425EAB0B80
Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/9fb0e461-b76c-3855-80c1-e2c736d9d409.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     42
IP address blocks:        198.182.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4a:79:a9:12:0d:42:5e:ab:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=6c6347ca-1fdb-4901-8495-bcfd2edd719c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:91:5c:0c:47:fd:75:c9:18:b2:9e:69:71:
                    72:75:51:de:cc:c4:fc:ff:6e:dc:87:a1:d7:37:ab:
                    38:8a:52:f7:83:39:7d:85:71:9c:46:bf:60:c3:82:
                    2f:13:9e:a1:f9:c2:1e:81:14:b1:84:43:0a:fd:de:
                    f7:f9:5b:b8:df:a9:7b:47:1b:f4:92:f7:42:0a:20:
                    71:a6:9f:b6:c9:2d:67:bd:ab:e3:dc:81:c4:37:1d:
                    bf:85:fe:05:ed:3b:70:f0:71:06:bd:80:32:74:99:
                    fb:9a:b2:2a:80:b2:6b:9a:c5:45:9c:a6:ea:c8:09:
                    6e:7c:33:7a:f0:6e:c5:06:3f:c1:31:5d:d1:1d:82:
                    66:c4:7c:f5:17:cf:de:98:c9:0a:c0:2c:0a:e8:48:
                    fc:43:90:62:0a:5c:0b:d5:44:d4:a3:5b:55:b1:ff:
                    ad:79:ba:25:17:a8:b1:3c:f0:5d:2b:8f:35:e7:c1:
                    08:1b:4e:3d:b6:83:fe:e1:a6:a0:8f:0c:f5:25:9d:
                    10:30:f8:00:93:b9:c4:f0:3f:fb:c7:dd:3e:d5:e2:
                    1a:5e:28:c5:05:b2:96:74:4d:fa:5c:f6:26:6e:59:
                    19:04:3e:7c:75:28:da:42:0b:97:15:d7:b3:45:ab:
                    0f:f7:0e:6d:e1:fd:c1:cf:eb:66:da:1a:2b:d2:ad:
                    b0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1F:E1:8D:E0:D3:A2:35:42:BF:36:02:47:F6:A2:6F:60:D1:EA:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/9fb0e461-b76c-3855-80c1-e2c736d9d409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl

            X509v3 Authority Key Identifier:
                keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.182.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9f:af:fa:a1:56:e8:07:fd:ec:d4:62:62:5e:82:0c:21:8f:
         22:1e:de:91:ff:27:94:d5:66:8c:86:9f:76:80:12:22:f2:f7:
         7d:38:6b:da:2f:ea:28:8a:98:af:3a:bf:f2:67:86:e6:d4:a9:
         5b:72:8b:61:1b:d9:cf:44:cd:4a:60:a1:fd:99:76:0e:a5:31:
         a1:97:68:d5:d3:a1:69:b9:cd:ba:ad:4a:5c:72:d8:a9:98:43:
         e9:bb:c9:61:a2:29:3d:9c:04:09:56:02:4a:b6:47:bd:46:4b:
         52:21:59:b4:5e:27:74:a2:9e:b4:d3:c2:09:10:79:99:40:cf:
         a9:f3:73:12:7f:70:3d:6e:0e:f6:30:26:89:7f:cb:fd:a0:c7:
         46:c4:6e:4b:3c:f1:a9:76:b1:d8:08:43:cd:5f:7d:bb:b2:63:
         21:f4:4e:21:cb:58:73:c5:dc:2e:4a:a2:19:77:05:43:dc:d0:
         00:16:2f:d5:6c:b6:4b:f6:f3:de:00:40:d7:31:21:00:5b:a8:
         7d:11:38:6e:48:fe:d9:30:9b:b7:71:c2:ea:21:cf:1b:13:a4:
         e0:0d:72:ac:80:c6:90:60:0c:46:75:1f:01:f1:7d:ff:80:2e:
         46:47:d8:92:b9:92:b1:89:0d:33:04:f8:27:4a:b1:e6:fb:25:
         5d:20:a8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:55:20 2025 by rpki-client