Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa
File:                     98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa (raw, json)
Hash identifier:          KsXOoiq8IodGPFZZ+oeHAR/1gNMeq+gdHdK2F87D58A=
Subject key identifier:   C0:60:89:ED:FD:41:9E:5C:CC:65:67:3D:1C:1C:3A:65:52:C6:EB:DC
Certificate issuer:       /CN=7fd18149-017f-4551-ae16-4dcabee6b650
Certificate serial:       010D0C9F4328584A6C55E0ED1888462248FE8B00
Authority key identifier: 42:97:62:7C:36:C4:D6:8E:A6:7A:7D:FB:DE:DB:18:78:60:49:80:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     394791
IP address blocks:        204.10.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/7fd18149-017f-4551-ae16-4dcabee6b650.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/7fd18149-017f-4551-ae16-4dcabee6b650.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:e0:ed:18:88:46:22:48:fe:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd18149-017f-4551-ae16-4dcabee6b650
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=a2245c9d-fac5-4066-973c-967af67ead92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:78:f8:2e:39:26:eb:b7:a4:0a:bf:ca:99:0e:
                    64:23:58:48:e3:3f:71:44:91:9c:31:a4:25:e3:c9:
                    06:97:b6:56:5e:a9:e6:1a:42:ae:b4:58:4a:06:49:
                    09:9c:27:b4:89:e5:70:79:cd:51:f3:73:06:a2:7e:
                    19:9c:33:ce:04:eb:76:65:93:1d:19:33:75:ee:a0:
                    a0:30:07:18:c4:36:a8:ca:e9:70:1f:32:b7:e4:29:
                    20:06:7c:0d:00:49:78:da:42:ef:00:b3:92:82:e0:
                    7c:db:8b:b3:73:be:dd:4b:d3:34:a9:05:6f:bf:ef:
                    f4:7a:0f:45:ff:b0:fb:f1:bc:23:b9:fa:9f:f8:0d:
                    6a:82:96:21:43:b8:4c:e0:ca:ea:ce:de:55:5f:b6:
                    94:4a:7f:da:7d:77:07:d6:a0:c1:f7:bf:9e:cd:8e:
                    f6:a7:b4:63:1e:88:c7:cd:43:d1:64:97:56:45:64:
                    05:69:50:16:c8:ab:42:aa:53:b3:98:55:41:00:06:
                    fa:bb:45:47:df:0c:ee:d3:c7:ad:44:f0:4e:dd:cb:
                    6d:41:b0:ea:8b:ff:23:39:5d:af:2e:ee:e5:3c:df:
                    ad:ae:b5:10:f2:17:f1:54:77:9a:f0:3e:e5:90:e0:
                    c4:99:2f:94:95:f9:58:92:30:ff:f5:ff:d9:c1:3f:
                    7a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:60:89:ED:FD:41:9E:5C:CC:65:67:3D:1C:1C:3A:65:52:C6:EB:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/7fd18149-017f-4551-ae16-4dcabee6b650.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:62:7C:36:C4:D6:8E:A6:7A:7D:FB:DE:DB:18:78:60:49:80:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:cb:4b:48:f9:08:8e:18:28:bb:33:a1:7c:58:d2:aa:63:26:
         21:d0:98:1d:06:fb:6d:ef:ec:73:8d:35:83:7f:d4:ca:8c:bb:
         a0:61:a0:48:0c:b8:ff:87:f2:43:38:cd:82:c6:42:3c:cc:42:
         77:67:5e:2c:ee:9e:63:79:80:7a:f8:07:3f:64:39:95:af:c4:
         4e:2b:16:76:82:a3:41:9a:b0:ce:96:b2:e7:94:59:e0:a2:b6:
         d3:7f:e6:d2:47:82:23:2d:a2:14:93:16:4e:ca:84:61:d4:29:
         a3:04:37:b5:fb:8f:6a:f0:05:6d:ec:13:12:ed:88:d7:92:d4:
         62:8d:88:54:7c:86:ec:f3:2e:70:f5:eb:13:69:c5:86:8f:48:
         ae:2d:42:04:69:b2:9b:29:8c:93:0a:44:70:76:90:33:80:6b:
         7d:26:7e:c4:a8:01:2b:e1:c8:22:99:bc:35:02:2c:e1:fe:6f:
         36:c1:f9:7a:ff:89:04:6f:d9:0a:6f:40:01:65:ae:f8:b3:8b:
         8d:ff:ff:22:e7:fe:b4:79:9c:15:74:5a:c6:be:d9:e9:54:32:
         49:09:80:98:fc:98:66:56:a8:41:7b:b7:6a:2c:3d:31:00:c4:
         b6:41:1a:61:19:f7:0e:da:28:67:fb:01:8b:94:b5:5e:51:d5:
         97:a1:45:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:45:10 2025 by rpki-client