Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/6d841518-10f1-382e-a259-3d055e679a2e.roa
File:                     6d841518-10f1-382e-a259-3d055e679a2e.roa (raw, json)
Hash identifier:          i8b4aqUHZr8orRzffwd6xZnMQOk0bkC8bHzJLhq0I9I=
Subject key identifier:   46:97:17:C8:9B:89:50:CD:DE:33:DE:ED:BA:3C:FB:50:95:00:98:98
Certificate issuer:       /CN=08e01c34-608c-4615-9e00-7b09e447bf4c
Certificate serial:       010D0C9F4328584AA85BBA5F68FA6A4CC0801400
Authority key identifier: 4F:D7:EC:EF:A2:E3:3A:75:01:61:29:F9:45:D5:37:CF:54:EE:63:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/6d841518-10f1-382e-a259-3d055e679a2e.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     15116
IP address blocks:        198.49.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:ba:5f:68:fa:6a:4c:c0:80:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e01c34-608c-4615-9e00-7b09e447bf4c
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=43e91c50-d604-45bc-9a7b-c2bb132e80b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:54:a8:af:bf:e6:5f:b8:b8:52:98:3f:8b:69:
                    7d:84:33:c5:e5:6a:e1:4c:17:d7:b1:86:78:aa:f5:
                    c9:92:63:6e:41:cd:3a:75:d7:11:a8:a8:7b:04:11:
                    5a:e4:e4:d2:2f:8f:7d:11:e8:09:4e:01:7b:1a:45:
                    83:a9:d6:20:60:8a:c1:d5:98:76:b9:e3:ec:21:ab:
                    ba:dd:a1:0b:ba:18:eb:fa:36:94:ca:9a:11:85:c0:
                    f3:ff:5e:34:4e:f9:ab:bc:cb:34:b5:f1:8e:90:6b:
                    47:a2:e8:d8:6d:a8:89:1f:ef:3b:82:a6:9d:8a:25:
                    6b:9e:01:7f:03:94:ab:a3:a3:84:46:bd:67:bc:0e:
                    85:75:02:7c:3b:d7:e9:aa:50:4d:be:69:bf:e5:90:
                    40:95:27:ee:07:3d:0c:bd:b8:0a:29:c9:a4:d3:96:
                    fe:b0:fd:bd:83:5c:67:8f:2c:a1:55:60:fa:ab:9a:
                    9d:b5:50:9e:31:dd:61:88:a4:1e:0e:e7:68:4f:ff:
                    f1:a4:3c:16:72:ac:21:c1:97:c6:88:ba:45:19:42:
                    c2:c2:76:3c:04:19:ad:70:83:89:e0:43:6e:0c:66:
                    39:67:30:0b:72:43:d1:9a:8d:8d:3a:5b:bc:e4:b5:
                    c1:12:04:e7:fa:98:20:83:02:ec:20:93:b5:7e:31:
                    be:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:97:17:C8:9B:89:50:CD:DE:33:DE:ED:BA:3C:FB:50:95:00:98:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/6d841518-10f1-382e-a259-3d055e679a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.crl

            X509v3 Authority Key Identifier:
                keyid:4F:D7:EC:EF:A2:E3:3A:75:01:61:29:F9:45:D5:37:CF:54:EE:63:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:98:50:e7:f8:63:5b:f7:d9:b0:7b:74:89:5a:51:c1:d1:61:
         3d:66:27:dc:5d:76:0d:2a:52:a7:7f:30:42:44:56:d1:b4:39:
         c4:dd:e2:09:ef:bc:40:9b:b1:55:bb:d2:b1:fc:4e:c7:69:81:
         3e:96:ae:ee:e5:cc:80:8d:82:a2:18:66:bb:05:17:5e:3d:44:
         97:b7:b1:68:d2:d8:b1:8e:99:45:5e:54:d1:73:3e:d4:c0:55:
         80:7a:52:16:f9:6c:19:e2:4c:fc:52:34:32:75:6b:e6:b2:04:
         aa:30:e3:6d:d1:59:12:e4:72:39:28:e6:a5:be:a3:73:0e:df:
         a3:6f:f3:70:1b:0d:59:2c:2a:c2:24:34:85:3b:7c:70:60:59:
         8d:4a:8e:c6:bc:17:a0:29:ac:6a:5a:62:6e:ec:3c:cc:2c:21:
         26:2a:e0:c6:24:10:d5:4f:3f:2f:f9:42:4c:59:8b:2a:09:49:
         46:7c:4f:ec:ce:28:2f:c9:2e:bf:2a:a1:fa:32:df:d9:de:d7:
         31:a2:27:33:8f:ac:9e:01:94:7e:d4:ca:9d:15:98:48:23:83:
         20:a6:ad:03:58:d0:fa:38:29:44:f8:53:db:26:74:b1:f3:61:
         fa:ac:22:c8:94:f9:fa:35:a1:6f:20:26:02:ea:3c:fa:9e:0e:
         d8:81:9a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:54 2025 by rpki-client