Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa
File:                     4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa (raw, json)
Hash identifier:          I9jFwJXH0+9ek4E+nfYg8nfDqjfW3KbxzFpjckzGEss=
Subject key identifier:   6F:20:E3:75:83:D7:84:28:A2:A7:5F:2B:4B:1D:8E:8C:9F:BF:8A:FA
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584AA6F62931EBDB24D22F74C400
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     137443
IP address blocks:        198.44.172.0/23 maxlen: 23
                          198.44.172.0/24 maxlen: 24
                          198.44.173.0/24 maxlen: 24
                          198.44.174.0/23 maxlen: 23
                          198.44.174.0/24 maxlen: 24
                          198.44.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:29:31:eb:db:24:d2:2f:74:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=953e8834-c767-4543-bba2-f2b9a5f38e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:a1:88:62:83:a3:cf:6c:25:a8:b9:df:df:
                    63:30:29:e4:d5:5e:0e:e9:e5:b5:a5:d0:f5:96:4d:
                    b5:42:d7:ec:1b:18:3a:4d:68:2a:1a:de:3c:3d:de:
                    06:d0:5e:7d:bb:0d:65:8a:03:d2:f3:42:b6:7d:20:
                    6b:84:cd:58:fe:83:a1:84:30:f3:3a:d9:96:1b:12:
                    b8:f4:5e:04:e1:25:d2:8c:a6:0c:e8:91:60:6a:73:
                    b7:53:82:5b:90:1f:10:6d:8c:47:38:ef:be:82:2f:
                    54:f1:07:a0:d1:c3:27:49:98:29:10:a8:d8:74:20:
                    f4:75:39:e5:f3:6f:3b:b1:bd:9a:56:a1:71:a7:ab:
                    0b:a3:a2:37:b9:c5:65:d3:25:20:64:5a:34:92:49:
                    f6:f6:f7:34:e9:4e:fd:50:ae:b7:f4:37:c2:7f:ac:
                    81:76:3a:f7:3b:1b:c6:75:e4:c7:7d:bf:b6:2b:46:
                    a4:79:57:cd:df:a1:88:1f:59:a1:3c:73:c8:bf:7c:
                    1a:21:78:5d:fe:0a:1e:aa:98:42:d7:06:5f:02:f1:
                    a7:c9:38:a2:24:33:78:6e:0e:b9:7f:72:60:fb:19:
                    3c:b8:58:e4:8d:f1:a7:93:f5:f1:7b:0c:62:d4:15:
                    00:6c:b6:2a:76:5b:d6:19:21:0e:ef:28:46:03:17:
                    fd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:20:E3:75:83:D7:84:28:A2:A7:5F:2B:4B:1D:8E:8C:9F:BF:8A:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:95:d9:6f:57:2b:f0:59:b9:8a:cb:af:3d:40:21:04:7b:75:
         cd:3d:f9:a9:49:3a:07:7e:cb:e9:31:1f:84:b6:47:f8:15:b4:
         1f:bd:ca:ea:87:4a:d4:fd:05:3b:7f:89:fd:8e:c6:de:57:28:
         7c:21:75:a4:a2:0d:5c:c1:56:73:3b:8d:7c:7f:23:c8:62:4e:
         10:a2:31:b4:28:cf:63:ab:56:40:14:0e:69:60:d6:18:f6:b7:
         55:3d:d4:93:12:53:af:2a:dc:6b:29:fd:7d:61:b7:9c:1a:02:
         a1:28:11:6f:8e:8a:09:82:06:5c:ba:40:b2:13:84:af:b8:13:
         83:6c:17:21:18:8c:81:b4:bf:99:d6:ac:d0:36:86:f3:b5:2e:
         a8:e3:ef:72:99:7a:ee:42:af:d7:8b:e8:02:9d:1a:6b:6a:36:
         d4:42:bb:ab:73:d8:09:b9:47:67:76:ad:36:fc:aa:99:76:8d:
         77:b7:d6:6e:3c:88:94:c0:af:e8:13:ff:57:03:ee:1a:3d:1f:
         f0:1f:50:41:1d:0d:47:a7:d0:9f:93:46:23:54:d7:1a:00:41:
         15:da:91:51:4d:03:57:2f:11:19:04:41:06:a2:7d:d9:0b:3b:
         87:36:69:25:46:9e:15:00:f2:d7:cc:32:c4:21:64:3b:76:db:
         0f:b7:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:09:28 2025 by rpki-client