Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/574a87ca-691f-36a3-ad3b-a8ba74c05f33.roa
File:                     574a87ca-691f-36a3-ad3b-a8ba74c05f33.roa (raw, json)
Hash identifier:          V+SsCAZpJEvP65Gw26T/RaqvFjrqvCVKixYCZIWtlUo=
Subject key identifier:   64:64:A4:A2:9D:15:51:64:2A:3C:1D:E1:F5:2F:41:1E:00:2A:8C:1C
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FFFE87DD967A3C5ECB950
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/574a87ca-691f-36a3-ad3b-a8ba74c05f33.roa
Signing time:             Mon 16 Jun 2025 16:03:22 +0000
ROA not before:           Mon 16 Jun 2025 16:03:22 +0000
ROA not after:            Sun 14 Sep 2025 16:03:22 +0000
asID:                     81
IP address blocks:        198.86.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:ff:e8:7d:d9:67:a3:c5:ec:b9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:22 2025 GMT
            Not After : Sep 14 16:03:22 2025 GMT
        Subject: CN=33b7b956-8eae-470b-8fd6-0f9b9914e8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bb:99:b1:b3:b2:c9:1e:f8:7b:1d:d9:88:0a:
                    0d:86:c5:2e:b7:c0:09:a9:49:d7:5e:f4:a5:a9:08:
                    e4:e7:03:0f:0b:fc:28:0b:df:5f:1d:57:a6:9d:eb:
                    48:b0:ec:73:8b:a0:78:7b:41:e2:fe:c2:60:9c:d7:
                    2b:3b:d3:22:30:09:36:15:1d:1e:71:69:af:a3:87:
                    b1:df:42:5e:e8:7f:a5:a2:17:40:a9:0e:b6:6b:08:
                    1f:a7:2a:fc:56:75:00:aa:8a:b5:33:39:59:4a:9b:
                    ff:db:c2:a6:0d:e4:fb:14:7d:78:90:fb:82:76:7e:
                    0d:c2:4c:cc:9f:2c:25:ee:99:8d:07:00:05:2f:3c:
                    1b:5f:e4:10:6e:b3:1a:1e:94:e9:9b:fe:3d:78:75:
                    2d:d3:23:2d:cf:cf:22:9c:a8:24:b3:17:6f:45:6a:
                    c7:42:0c:59:b1:80:55:14:ae:9b:94:54:8a:b6:56:
                    2b:1c:f3:df:ed:03:18:eb:46:23:08:e7:35:a7:e6:
                    fe:96:4f:23:10:43:12:72:cc:4d:fe:ed:0d:9c:fc:
                    c9:92:86:cf:c0:1d:36:b2:0d:b9:37:7f:c5:a3:85:
                    3e:43:d8:66:99:19:ae:4c:82:ef:79:1d:9e:3d:8d:
                    b1:10:21:29:06:2d:4d:ca:3b:9c:2d:77:84:e0:67:
                    47:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:64:A4:A2:9D:15:51:64:2A:3C:1D:E1:F5:2F:41:1E:00:2A:8C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/574a87ca-691f-36a3-ad3b-a8ba74c05f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:aa:20:f0:83:35:e8:81:99:64:29:a3:95:9f:e4:8f:2c:a8:
         d4:01:9b:e8:55:8c:63:ba:f4:6b:43:2f:ad:33:0c:9c:a4:da:
         64:69:65:76:08:7f:26:47:48:d9:05:48:6d:38:26:b8:c7:7a:
         ad:f0:c9:24:87:28:bd:8b:e3:89:d3:c4:48:e1:2f:58:18:36:
         d8:0e:0b:57:60:bb:cc:ec:a5:27:82:88:ac:91:66:c5:be:ae:
         ff:80:3c:b0:ce:ca:0b:9f:d5:e9:a0:c8:ba:c3:0d:60:30:31:
         ba:73:c3:45:ca:4d:ce:9b:65:9c:f5:63:7c:db:41:c5:c3:67:
         16:2e:3a:f1:ce:f7:73:73:09:ae:71:a2:81:4b:37:3f:5a:a1:
         2f:91:6c:26:6d:9e:27:80:68:30:f2:f2:ca:0a:17:ee:17:b8:
         ed:27:a4:7b:e0:58:2a:10:95:38:0f:ed:3c:b3:4d:de:94:91:
         84:10:5b:cc:98:18:43:76:f8:56:35:39:db:db:c3:f3:6b:cd:
         3e:e1:3e:3b:23:1d:30:84:a1:de:8a:c5:6c:ba:c6:c5:d8:f5:
         11:fc:09:f5:e4:00:99:08:aa:41:33:6a:e5:92:75:2b:f1:51:
         04:d1:6a:37:43:91:37:2a:0f:48:17:47:d8:4c:5c:68:b3:aa:
         a1:47:2e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:25:33 2025 by rpki-client