Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/c4584eab-d322-3113-a0ef-1bd70b1326ba.roa
File:                     c4584eab-d322-3113-a0ef-1bd70b1326ba.roa (raw, json)
Hash identifier:          ovoOh3oKcIbPBX4KVjXeri2tB+PYFSCwTkeAZcd/joI=
Subject key identifier:   7B:03:70:0C:EE:C6:1A:63:BC:C8:F8:33:A4:98:56:EB:BF:AF:D0:01
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584A9FFB97C9A270597078A65600
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/c4584eab-d322-3113-a0ef-1bd70b1326ba.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     20177
IP address blocks:        198.248.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:97:c9:a2:70:59:70:78:a6:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=babcb29f-7d57-4b33-a130-87e30fe5c605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:5a:a5:4f:9c:9e:b7:63:41:f1:54:6a:d3:
                    67:5e:04:ee:8c:4b:4e:dd:42:5f:ea:c4:c4:0f:cb:
                    86:2e:bd:44:46:a4:83:13:3e:3e:82:c8:8a:8e:66:
                    4b:ca:03:53:a8:ea:a4:9b:ae:2c:98:66:30:41:c5:
                    f8:e1:ba:64:88:fb:8f:19:77:31:59:36:99:bb:e8:
                    e9:b6:5d:ca:5b:21:a0:bf:29:55:99:a5:46:d7:a5:
                    b9:a7:1f:fb:30:ab:b0:4a:17:04:89:7c:64:76:09:
                    80:9d:d0:9b:12:a2:55:b4:db:e3:58:2b:cc:69:2b:
                    02:19:b0:60:7b:aa:c3:4d:e5:0e:09:31:c6:3b:8d:
                    36:f9:8f:2f:0e:e0:4d:6d:03:54:91:bb:ec:5a:35:
                    92:33:31:a7:61:1c:3b:84:64:21:0e:1f:f6:a0:c2:
                    70:08:eb:03:de:0b:a0:8b:b1:fe:18:9f:03:8a:f3:
                    83:f3:c0:e8:91:e3:13:a7:69:60:49:7e:1e:88:83:
                    ca:e8:8c:3d:04:13:fc:3c:66:b8:38:1a:18:bb:39:
                    84:36:e8:b7:13:43:d4:c7:0e:c8:ad:ca:da:61:a1:
                    05:e1:4f:dc:f0:c9:28:a9:33:20:e7:b1:0c:df:6d:
                    f0:7e:f5:ed:ee:b4:6f:77:90:e8:78:01:7c:28:b8:
                    96:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:03:70:0C:EE:C6:1A:63:BC:C8:F8:33:A4:98:56:EB:BF:AF:D0:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/c4584eab-d322-3113-a0ef-1bd70b1326ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:4b:31:d7:72:2e:45:1f:29:7b:3d:b7:56:46:34:b0:b5:d9:
         7d:b2:8b:58:ed:d1:9c:a0:c9:25:0f:9e:3a:31:be:13:c0:b6:
         54:23:b3:70:37:c3:a6:69:03:dd:50:d1:f8:02:70:a0:c5:3a:
         c0:bd:b7:a1:2e:5c:02:35:af:7b:6c:72:49:18:9f:9b:db:76:
         be:42:d3:46:37:14:17:c0:86:28:32:f7:47:d7:60:de:cf:df:
         0d:f8:26:d6:89:d6:37:7f:40:38:df:04:34:1f:33:6b:27:77:
         31:1e:a6:ed:6b:91:ed:b4:e4:ca:3b:77:22:8b:10:90:22:c0:
         d7:18:c1:18:12:18:41:bd:cf:56:93:e0:9b:58:6a:61:ff:55:
         11:da:86:6c:d6:1c:7d:32:16:43:45:07:f9:16:02:23:6d:04:
         e5:db:59:f4:96:e3:f4:ba:9a:dd:ce:3c:1f:ea:7d:c3:e5:3c:
         b1:c6:3a:f6:b1:98:61:25:57:23:6f:bc:a7:0d:fc:5a:04:3b:
         9a:ea:e5:81:93:9d:6f:28:6e:09:d2:a0:c2:04:1e:19:d5:8c:
         dd:14:f2:bb:bb:91:54:ae:b6:d6:44:be:d7:9e:83:72:59:e7:
         05:2b:60:d4:f1:21:09:01:2c:49:ce:bf:21:2a:16:bf:d0:92:
         46:db:9a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:23:42 2025 by rpki-client