Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ade61511-8398-3e2e-b0df-4582caf49fa7.roa
File:                     ade61511-8398-3e2e-b0df-4582caf49fa7.roa (raw, json)
Hash identifier:          7+NbmZ6UuMbN0yVgkbw7xJt8Pc8kIVVG/kYGvxaRqZM=
Subject key identifier:   EC:47:00:68:32:5E:3E:93:F5:7A:8A:56:28:16:6C:CF:B6:92:57:EF
Certificate issuer:       /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Certificate serial:       010D0C9F4328584A68260C572E3A2F61D8D24920
Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ade61511-8398-3e2e-b0df-4582caf49fa7.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     395567
IP address blocks:        198.73.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:0c:57:2e:3a:2f:61:d8:d2:49:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=fbe7dcd1-b0ff-4aa2-9ec6-3a7db3707f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f8:a3:e6:64:08:4f:c6:b5:48:0b:80:64:fd:
                    55:f2:48:3c:94:7c:97:33:34:34:c2:27:21:4a:aa:
                    be:d9:24:8a:b9:b8:da:d8:a7:9e:8a:a2:21:f5:da:
                    9e:63:3e:c8:07:7a:92:73:ce:6d:da:9a:04:c0:a6:
                    f7:7a:95:8d:78:93:29:7f:3d:f5:ab:f8:0a:00:01:
                    9d:a1:db:2d:94:46:3c:80:7b:00:9d:e7:e5:ff:e1:
                    df:63:85:bf:6b:0c:35:40:88:8a:bb:9c:c8:22:e9:
                    3d:f0:03:98:e2:c5:8d:86:ba:f3:c1:e3:4f:24:90:
                    77:00:1d:0b:38:48:09:8d:57:ad:a2:d5:a5:39:71:
                    10:b8:3c:78:87:2a:2f:65:81:3c:7d:ef:ef:b7:11:
                    e2:bd:2d:84:a7:66:dd:02:f5:80:8d:00:87:73:ec:
                    96:96:f2:6b:b3:2f:b2:98:c6:f5:2f:d7:06:84:a7:
                    b0:d8:13:78:8f:7c:f6:0b:7b:22:c4:50:97:c6:11:
                    ac:76:6d:43:f8:bf:85:64:73:ca:61:f7:86:b3:95:
                    c1:ca:eb:ec:c7:31:38:53:c8:b0:c1:88:f2:fc:7b:
                    8d:c1:38:79:8d:05:68:c0:26:c1:cd:bb:7c:d6:f5:
                    3b:cf:c5:ef:c1:d1:4c:61:e7:8e:43:d2:d2:96:ab:
                    73:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:47:00:68:32:5E:3E:93:F5:7A:8A:56:28:16:6C:CF:B6:92:57:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ade61511-8398-3e2e-b0df-4582caf49fa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f1:19:be:bd:b4:ac:13:8a:05:48:37:ae:a9:71:78:5b:69:
         9e:e9:26:ea:b8:51:7e:eb:b0:6f:31:b2:c0:2b:d2:8d:da:8e:
         40:01:53:88:2d:e0:a2:fe:d6:f5:6c:e5:c8:9d:b7:9a:ce:e4:
         68:3d:a3:5c:4c:df:f9:60:77:af:18:9c:ad:3e:e2:85:8d:37:
         04:49:28:4e:ae:5c:ec:02:95:fa:12:f1:68:f2:32:bd:33:ae:
         e5:24:f0:a2:95:41:59:d0:42:8b:04:e6:ac:3a:6e:48:11:d0:
         fc:a2:5c:0e:06:b7:2a:f1:4a:9f:b6:ba:41:7e:1a:ee:02:56:
         ff:57:bf:8d:00:bd:ed:bc:f1:06:cd:3f:4d:c5:1f:a1:9d:5d:
         9a:60:05:29:f8:a6:98:1b:64:1c:98:b2:34:0b:1b:d8:00:ea:
         0f:69:a0:57:82:6d:49:f8:f5:1f:45:a9:1e:b7:89:45:9a:22:
         b4:11:4a:71:82:cb:35:f5:65:36:05:eb:29:68:d7:55:9e:37:
         07:fe:a1:03:c9:80:e5:96:7c:33:1b:79:6c:32:58:ce:81:bd:
         e6:6e:a8:8c:c0:e1:6d:8e:69:6f:80:14:3d:a0:0a:75:2d:ce:
         d1:89:04:f1:ac:7e:43:52:ff:cb:8d:96:39:8a:c4:21:5c:cc:
         8b:35:a4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:42:34 2025 by rpki-client