Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b5d3b2e6-7741-36a2-979d-f06aff30efbd.roa
File:                     b5d3b2e6-7741-36a2-979d-f06aff30efbd.roa (raw, json)
Hash identifier:          BY3EUInHhdirQMnv5E9s9gHcG8+37usWBWzmhNL6eJ0=
Subject key identifier:   AA:10:37:F9:91:44:2B:FC:50:ED:80:00:C3:46:7E:8E:8B:6E:6B:9C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A331AFD72492FE0883A8911E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b5d3b2e6-7741-36a2-979d-f06aff30efbd.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     7029
IP address blocks:        198.20.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:fd:72:49:2f:e0:88:3a:89:11:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=d941bb57-242a-4be5-b43e-7e88a537a87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:46:dc:01:3b:94:37:10:b3:84:01:73:38:
                    ed:8c:e0:15:52:b2:dc:62:e9:e6:b2:a6:a2:47:46:
                    01:05:01:d6:40:42:77:72:3d:77:98:73:8f:e8:6e:
                    64:19:de:c5:e1:a7:5e:73:1d:5b:53:0d:56:65:7e:
                    c8:48:da:7c:7e:5d:24:b9:9c:20:1d:e8:bd:91:02:
                    7a:ec:1c:0c:ee:f7:bc:67:87:11:bc:30:03:3c:04:
                    c6:fe:4f:c9:99:41:28:c7:c7:79:03:d2:e3:3a:62:
                    bc:0d:87:2a:72:b5:0f:58:16:8f:ce:95:ef:cb:06:
                    bc:2e:c5:41:0d:40:0f:43:79:a8:34:c8:43:17:86:
                    84:69:85:d0:24:50:5d:1a:48:3f:1d:6e:79:b6:b7:
                    fc:29:55:61:07:b8:32:ff:bb:7c:0f:2f:03:79:50:
                    f3:c9:4a:44:46:95:57:bf:94:f4:ed:59:77:42:5f:
                    ee:1a:1a:4f:94:80:fa:1f:7c:7a:ee:bb:59:bb:17:
                    aa:1e:1f:10:67:74:36:bf:a6:b1:a7:13:75:b8:58:
                    e5:e2:f9:15:49:2c:52:cb:8c:00:c9:68:57:48:c8:
                    0c:62:70:8c:f7:73:5d:25:ff:62:2b:0d:ae:70:c7:
                    96:fa:19:35:b7:60:34:04:1e:e4:65:52:5c:6b:1b:
                    e2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:10:37:F9:91:44:2B:FC:50:ED:80:00:C3:46:7E:8E:8B:6E:6B:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b5d3b2e6-7741-36a2-979d-f06aff30efbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:05:fe:ad:00:d3:55:d8:6f:ca:09:c9:ca:16:d9:c3:44:f0:
         c4:d8:8f:86:d6:02:2a:7a:24:46:5f:72:e1:4e:11:ea:d0:f0:
         5c:d9:2d:47:f8:5c:78:04:81:bf:23:db:e2:c5:6b:5c:66:6b:
         9e:2e:64:99:ca:94:b2:03:50:c5:28:fc:50:f2:6a:f1:58:a8:
         2f:5d:1b:1f:e4:9d:e9:37:ed:0f:58:8b:4e:35:b1:de:be:51:
         21:c6:98:0e:54:e3:ea:67:1b:5e:bb:44:2a:b6:e3:fd:b5:3c:
         d1:e8:a3:16:d6:f9:1d:24:4d:32:de:72:5a:84:13:1c:cc:3f:
         1e:6b:dd:63:1e:71:6f:ea:86:9e:04:2e:95:35:60:1f:b0:c4:
         91:95:38:60:7b:b6:67:66:5e:81:94:1b:f1:2e:13:21:8a:f6:
         df:fb:08:37:72:7b:12:38:51:5d:2f:bd:4e:b6:17:73:b3:7e:
         54:3f:37:16:d8:0c:24:b6:5b:09:e8:68:3e:4a:fb:01:a8:45:
         ef:9f:c8:da:da:ad:3b:4c:23:41:6c:bc:24:12:d0:33:53:c6:
         2f:64:a2:e0:28:bc:ab:d1:c9:a9:53:c5:ff:b2:85:75:c6:7c:
         7e:e7:42:f7:74:61:30:2b:20:64:eb:88:5b:f9:d8:88:ed:cb:
         28:0e:07:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:15:59 2025 by rpki-client