Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa
File:                     29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa (raw, json)
Hash identifier:          V2gSeWAUYj3fhgZlHbEimnnEugiOsQK8pBEtnh89Jm0=
Subject key identifier:   97:25:84:5D:91:45:A8:EC:A8:74:4A:33:71:FE:DB:17:D5:61:61:98
Certificate issuer:       /CN=7496889c-61af-4c61-8157-4b7f2fde690d
Certificate serial:       010D0C9F4328584AC016458C022EFE4874DD2A80
Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     611
IP address blocks:        198.164.104.0/24 maxlen: 24
                          198.164.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:45:8c:02:2e:fe:48:74:dd:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=96c4e24a-b355-426d-9556-cf853d7e27d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1b:8e:26:99:2f:05:eb:14:43:23:72:78:55:
                    a3:db:93:23:c5:8d:2c:34:2e:c0:86:46:4e:ce:92:
                    bd:f6:28:b0:ec:7d:cc:47:a0:d2:35:aa:55:ce:2e:
                    46:6f:46:a5:4e:ab:93:e5:c2:17:2b:7a:8b:ba:81:
                    30:72:e9:9b:50:3b:9b:79:18:08:e6:0a:04:6c:33:
                    43:99:db:da:c8:82:d9:36:b3:e4:25:be:12:35:53:
                    2c:c6:ee:d6:34:c4:c9:41:a2:49:b4:c3:bd:6c:2b:
                    17:eb:57:86:ac:a6:ef:53:2b:e2:38:ff:fb:47:b4:
                    78:c6:0b:7c:db:a5:57:aa:a9:36:41:e9:90:23:78:
                    1d:f5:8a:4b:78:e1:f8:b4:d3:56:d9:e2:9c:3d:9f:
                    7e:09:b6:f2:8e:d3:15:1c:3f:7f:58:dd:f5:6e:bb:
                    64:b5:49:cc:21:ed:66:88:dc:57:68:63:68:07:60:
                    65:90:8a:e6:a0:42:b6:c3:b8:b9:d9:b1:20:96:11:
                    19:5e:bb:7b:b0:13:fc:9e:f8:b0:dd:7a:1c:6b:2d:
                    44:82:3d:9e:8f:21:f3:1c:7b:47:db:ba:69:4f:7f:
                    8d:55:1c:63:a2:43:a6:6b:49:59:3d:09:a3:cc:fe:
                    10:8d:ed:8d:57:dd:55:33:8c:20:0a:c5:e8:db:de:
                    3b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:25:84:5D:91:45:A8:EC:A8:74:4A:33:71:FE:DB:17:D5:61:61:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl

            X509v3 Authority Key Identifier:
                keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.164.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:64:cc:f3:0a:9d:30:4e:d8:3d:8c:dd:18:2a:22:7e:36:0d:
         6d:3f:ca:1a:8a:ec:38:13:30:fd:df:b1:33:b3:63:65:61:c7:
         e7:69:0a:af:37:24:4c:b9:51:85:fa:1b:74:5e:6f:98:40:1a:
         b9:e5:49:46:79:e1:f0:81:ac:53:51:90:ea:29:a5:46:fd:0f:
         c4:5b:1a:20:37:36:b1:72:ec:59:23:30:16:3c:f8:0b:a7:1b:
         11:5d:49:44:6a:2b:6a:c9:f1:28:f0:e4:f8:7c:da:0f:ee:a3:
         98:12:79:b0:79:39:60:64:c1:f0:c7:f0:f9:8f:90:e8:6f:c7:
         03:3b:3d:72:56:aa:fa:5e:12:66:32:65:fa:11:ed:5b:51:b6:
         a1:08:7e:73:e6:cc:cb:21:92:04:d5:9b:e4:87:41:e0:67:0e:
         0a:36:0e:fe:c8:b2:56:a9:c7:d5:7a:0b:55:24:96:62:23:f0:
         72:af:37:4e:df:b1:86:23:36:bc:09:a1:dd:10:63:0c:3c:2f:
         fb:79:7d:67:6d:64:12:9b:86:b6:b7:17:96:a4:6e:b5:44:50:
         72:18:85:ec:a4:05:0e:f2:48:53:49:e2:fa:96:47:f9:86:84:
         34:37:44:7a:9a:aa:d6:d4:dc:09:60:76:de:bc:c4:ff:34:be:
         d6:cf:85:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:56:12 2025 by rpki-client