Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa
File:                     8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa (raw, json)
Hash identifier:          4zyRUtpmVCJJPA1tSkRQ1Cclh5d8gMxw18hEr/TH3y4=
Subject key identifier:   6A:FC:7A:DE:0D:4D:FD:6B:10:53:E2:33:32:5E:06:03:A4:BD:91:AA
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584AB4EB7B08DD2BFADCA61EB900
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     14618
IP address blocks:        198.44.180.0/24 maxlen: 24
                          198.44.181.0/24 maxlen: 24
                          198.44.182.0/24 maxlen: 24
                          198.44.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:7b:08:dd:2b:fa:dc:a6:1e:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=1388a614-fc7a-4a94-bc83-f793795d1521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:40:d8:93:a7:59:7a:13:e6:be:36:3b:f4:
                    aa:c6:b7:fe:8a:3e:36:67:97:9b:a3:cc:29:42:36:
                    9f:89:f3:ef:4c:2b:d3:30:78:ab:bb:1d:af:b8:ce:
                    3e:83:56:51:9e:ef:5a:0f:64:2d:a4:ac:08:5d:a5:
                    54:7f:fc:32:33:f7:d0:b2:35:e0:14:62:16:dd:1f:
                    41:91:a9:db:db:c1:29:22:1b:37:a2:0f:aa:92:5d:
                    57:51:08:2b:5c:66:58:5c:ca:bb:46:07:3b:fb:97:
                    7e:ca:18:25:35:a5:8b:64:e0:5b:3a:ac:0c:77:21:
                    bd:26:e4:ba:a3:45:b6:85:50:dc:04:0c:8b:ed:11:
                    f1:7d:e5:e3:77:c3:b2:8b:af:f2:85:53:a5:f1:38:
                    70:49:6c:50:09:f7:a7:0d:44:93:e2:ef:d8:64:58:
                    09:c9:c2:82:a3:8e:84:70:17:ec:ce:ac:a1:f3:e0:
                    a3:77:89:c1:f5:f0:c3:76:f7:fb:04:01:ab:68:14:
                    fe:5d:1c:81:48:50:eb:8f:db:49:82:e3:49:4d:18:
                    5c:db:8e:85:8f:2b:7f:d3:fa:49:7a:52:c8:13:2e:
                    6f:89:24:33:1a:7b:4c:d7:8f:50:0d:55:b1:26:41:
                    79:3a:2d:a3:60:2a:0d:62:6f:54:94:00:1f:f1:ba:
                    1b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FC:7A:DE:0D:4D:FD:6B:10:53:E2:33:32:5E:06:03:A4:BD:91:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:cb:d0:62:dc:85:6f:04:d6:90:ab:29:d4:85:b9:ac:85:2b:
         fb:7a:4b:29:8e:96:fe:14:6d:24:50:4c:f0:4b:19:45:38:b4:
         30:90:59:89:eb:d7:54:d4:75:eb:99:9a:f1:dc:44:bf:5f:7a:
         7a:30:3a:ce:32:76:d7:60:f6:5a:cb:10:fb:5f:bd:8c:12:fa:
         18:71:00:b2:e7:ad:d4:c2:1a:64:4a:5e:c0:71:bb:74:c0:b2:
         66:0b:51:e4:e8:1e:69:fb:41:e7:01:dc:3d:c4:e4:06:12:2f:
         c6:26:6d:07:11:e0:cf:21:b9:d4:a1:62:e5:46:1e:5b:8c:c7:
         c5:08:31:3c:58:b4:c8:ad:41:99:02:2a:85:9f:ad:48:d7:56:
         9b:91:8d:a9:08:58:a1:6b:ad:3c:bf:ff:54:42:53:87:db:96:
         28:b4:99:12:d2:a5:d4:09:61:30:de:99:54:7b:25:55:6b:80:
         d6:93:08:09:ab:1d:62:93:64:12:51:b7:fd:96:6d:67:cf:6a:
         53:2b:7a:be:1b:e3:77:29:a8:ee:db:39:5d:63:76:d8:f2:f0:
         6b:dc:1a:e0:84:35:de:4e:5c:21:d8:ed:ab:b5:61:ff:6d:eb:
         cf:b7:b1:00:fb:00:07:e7:15:50:14:82:e5:c3:02:47:3c:a9:
         19:1c:3e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:34:35 2025 by rpki-client