Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/32e3b7cb-38c9-3dea-a808-16a20cc17a8c.roa
File:                     32e3b7cb-38c9-3dea-a808-16a20cc17a8c.roa (raw, json)
Hash identifier:          FMZoQKmmmgJJRDHaSc9k/tZmPFrD1WZ0sBs9ldEoNpM=
Subject key identifier:   22:C6:44:56:BC:BC:D8:64:F8:27:1A:07:3A:6C:37:9F:1F:EB:69:F8
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584A9118F785FB5453F59D27AF80
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/32e3b7cb-38c9-3dea-a808-16a20cc17a8c.roa
Signing time:             Sat 19 Jul 2025 05:03:17 +0000
ROA not before:           Sat 19 Jul 2025 05:03:17 +0000
ROA not after:            Fri 17 Oct 2025 05:03:17 +0000
asID:                     6922
IP address blocks:        198.215.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:91:18:f7:85:fb:54:53:f5:9d:27:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jul 19 05:03:17 2025 GMT
            Not After : Oct 17 05:03:17 2025 GMT
        Subject: CN=3a96651c-7ceb-4110-a1cf-ac1902885115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5b:64:c1:db:85:89:a3:54:17:cb:96:cf:36:
                    bc:03:24:42:55:d7:5a:0a:01:b0:6a:42:6a:32:00:
                    eb:d9:89:71:68:eb:6f:f5:bd:e9:58:b0:19:54:fd:
                    d7:6b:78:bd:3d:67:fd:cd:49:68:80:79:df:95:f1:
                    ea:43:29:ea:8a:4f:7c:fd:71:65:56:55:80:af:7b:
                    72:1a:98:42:04:bd:cd:49:c4:39:27:7f:da:fa:6e:
                    59:c6:f6:96:71:c4:7a:1c:3f:2b:98:b6:fe:93:d0:
                    14:05:b3:b7:04:f8:04:bb:b6:1a:e6:f4:97:35:1b:
                    38:05:98:5d:2b:15:58:96:06:cd:37:cb:19:2b:bb:
                    fc:ea:f4:36:ae:47:0d:46:da:7d:e4:f7:1d:15:4f:
                    ac:2d:bb:e9:ad:c9:a4:7f:cc:9b:f3:c1:e6:84:0a:
                    da:4a:83:ed:19:56:2a:52:d8:e3:0c:df:bc:c2:71:
                    67:fe:31:b4:46:76:80:1c:c2:0f:01:72:49:df:4f:
                    2d:61:9c:b7:72:a0:9a:cb:13:9a:5a:e7:25:e6:43:
                    c1:ae:38:d0:df:32:63:b2:5c:c3:95:63:16:a8:9d:
                    a9:8e:d2:a7:c9:30:80:36:09:6c:4a:40:1c:cd:d0:
                    47:c8:db:5c:bb:e2:a3:35:e0:43:2d:29:9d:a7:4a:
                    1e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C6:44:56:BC:BC:D8:64:F8:27:1A:07:3A:6C:37:9F:1F:EB:69:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/32e3b7cb-38c9-3dea-a808-16a20cc17a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.215.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:91:cf:fa:97:70:64:43:d8:bb:13:9d:a6:f5:26:f1:50:64:
         f3:80:c9:b5:c4:a8:5f:2c:d9:df:6d:17:2f:e4:8f:9b:c2:9e:
         bd:74:2d:f2:e5:e8:cf:fa:ec:75:5e:a1:ff:9c:d6:98:62:7c:
         a1:f4:60:40:6f:af:87:84:c4:c5:1a:6a:df:2f:10:c1:7f:0a:
         1e:a9:ca:e5:18:a5:4a:a3:78:d9:31:a8:a2:29:22:eb:f0:b4:
         33:1e:41:0a:df:21:98:ed:19:e9:86:02:3e:86:cf:1f:77:95:
         d5:84:41:86:ae:5a:28:2b:39:23:2b:d8:c3:f2:95:42:38:5a:
         a4:a5:fe:b8:d7:71:87:ef:c9:59:c2:84:1d:af:6f:c0:53:6b:
         44:d0:09:9a:fe:72:9d:e4:d9:bd:22:c5:2b:48:7e:b2:73:55:
         e4:13:55:ea:9f:65:a3:15:1e:a5:65:6f:96:c5:f9:67:fc:fc:
         94:b9:b1:85:f3:07:40:fd:d5:a2:99:c1:fa:e2:14:5c:fa:af:
         77:13:f0:6a:af:ad:b2:ae:ed:6a:38:ad:69:85:5b:59:a2:7a:
         a3:23:29:7f:d8:35:3f:c7:53:d5:d7:52:fd:67:11:f4:1f:08:
         87:cd:21:42:30:bf:e1:94:c5:38:21:56:6d:93:57:bf:b7:b9:
         13:68:a3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:09:49 2025 by rpki-client