Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa
File:                     a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa (raw, json)
Hash identifier:          /Z4WCVEu47Q/Qw1InFiqw1yk8oeQQbE6PgGeyw+dGbQ=
Subject key identifier:   E6:FD:75:06:BC:53:D0:C3:A6:79:F4:DD:5A:6D:31:22:54:40:1A:78
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584A911E5FDC6F66EB8AE9BDAC80
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa
Signing time:             Sat 19 Jul 2025 05:14:10 +0000
ROA not before:           Sat 19 Jul 2025 05:14:10 +0000
ROA not after:            Fri 17 Oct 2025 05:14:10 +0000
asID:                     13998
IP address blocks:        198.215.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:91:1e:5f:dc:6f:66:eb:8a:e9:bd:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jul 19 05:14:10 2025 GMT
            Not After : Oct 17 05:14:10 2025 GMT
        Subject: CN=8a470ce2-9a20-4847-8171-e7ab23b8a347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9a:c1:a8:8f:d3:12:ca:75:07:ad:23:87:72:
                    01:c7:b1:62:b8:08:a9:0f:af:db:cc:d8:9d:5a:fa:
                    0b:af:0e:8d:0a:aa:81:38:a3:15:1e:c2:8d:20:33:
                    1a:f6:53:7c:80:d9:31:98:42:b9:b5:fc:25:d6:45:
                    43:42:77:10:c9:32:57:cc:bd:ab:64:b6:b2:b3:ba:
                    9d:63:32:f5:46:fa:ee:6a:93:e1:46:fd:87:c2:3e:
                    02:d7:e2:78:73:75:44:b4:bb:ea:03:06:6b:78:af:
                    a2:69:f4:20:aa:b7:96:54:c7:29:ee:b1:c1:ca:f5:
                    27:d6:fd:e4:31:c4:69:18:d7:3c:1e:a7:64:e4:90:
                    1d:3b:76:50:02:ab:55:66:59:09:fe:da:79:7d:77:
                    7f:a0:b4:90:e1:81:1e:84:fe:ce:3d:3e:25:30:a3:
                    cb:58:e1:ed:76:9e:ee:0c:40:53:70:e6:66:ef:cf:
                    2f:6a:35:58:e5:86:2b:bd:94:e1:3e:d1:59:28:dc:
                    01:53:c3:3b:0f:08:8d:5a:07:59:75:c1:d5:bb:f7:
                    19:cb:1e:d9:9c:f0:ae:f6:68:d0:be:38:aa:97:5f:
                    f9:6c:95:1d:bd:7a:08:0e:60:ee:42:32:e4:7a:27:
                    c7:02:b7:97:d4:1d:5b:b9:21:15:8b:95:7e:bb:66:
                    ad:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FD:75:06:BC:53:D0:C3:A6:79:F4:DD:5A:6D:31:22:54:40:1A:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a0a7cd20-4ae3-3248-93cb-1380f81b5088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.215.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:5a:86:04:ee:4a:8d:a7:fb:1c:23:2e:4e:01:ed:ce:37:3a:
         72:e3:32:ed:06:5c:65:55:f0:10:bb:95:18:6b:bc:59:13:6d:
         84:43:5e:12:5e:f6:fe:bd:f2:7f:bd:99:18:bc:96:ec:53:24:
         57:1b:18:e1:d8:8d:b6:81:49:aa:5b:2e:34:99:f7:4b:07:0f:
         50:f1:cb:88:ab:1f:03:b1:d8:ea:0c:1d:58:90:a9:2b:94:b6:
         05:63:ae:de:6b:17:cb:ee:04:5d:60:cb:e1:f5:87:5d:2c:6e:
         08:31:d3:c4:4a:e0:22:b3:fc:ba:0d:26:ee:01:70:bd:26:f8:
         c7:09:45:b3:77:56:5d:c0:d7:c4:e1:4f:d1:e4:80:75:e1:40:
         cc:71:b1:da:4f:2a:fa:ac:0b:37:b5:9d:e1:92:6e:84:1a:86:
         b7:99:d4:91:e2:1f:37:0d:ee:72:78:fc:a9:c5:af:7a:42:b0:
         0b:b5:0d:c9:e4:fd:c6:81:87:f3:5e:8d:99:48:84:e6:7c:6e:
         f0:7d:e5:97:d1:98:b3:ca:1a:ae:37:7f:69:8d:2a:25:0e:dd:
         d3:d5:6a:ed:f8:3c:fc:1c:d2:b8:f6:0f:db:5d:01:f7:51:6a:
         34:52:06:03:ab:27:e0:3d:c9:45:c0:87:71:85:15:94:35:62:
         65:08:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:20:00 2025 by rpki-client