Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/8b5c0ec8-8c8b-3741-98d8-330f50643492.roa
File:                     8b5c0ec8-8c8b-3741-98d8-330f50643492.roa (raw, json)
Hash identifier:          i6pBunnxmT/GLejaVg4E/z3yKhcLy1YVV6+xZd5zArA=
Subject key identifier:   8C:2D:CA:EF:97:D1:8C:DC:BC:67:B5:18:FC:A8:48:CE:91:83:A8:99
Certificate issuer:       /CN=79d92048-3cb0-4207-95ca-ebf1f6f4bc7f
Certificate serial:       010D0C9F4328584ABEB0D60B9019A81401528E00
Authority key identifier: 63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/8b5c0ec8-8c8b-3741-98d8-330f50643492.roa
Signing time:             Mon 04 Aug 2025 13:00:36 +0000
ROA not before:           Mon 04 Aug 2025 13:00:36 +0000
ROA not after:            Sun 02 Nov 2025 14:00:36 +0000
asID:                     46261
IP address blocks:        172.98.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:b0:d6:0b:90:19:a8:14:01:52:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d92048-3cb0-4207-95ca-ebf1f6f4bc7f
        Validity
            Not Before: Aug  4 13:00:36 2025 GMT
            Not After : Nov  2 14:00:36 2025 GMT
        Subject: CN=abfbbfa8-fd84-47f6-89b1-ca3fee49c65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:e2:d9:40:54:50:03:af:48:c2:ea:89:45:
                    2d:04:cd:8d:d4:28:14:4a:37:fe:7c:76:e9:9b:b7:
                    30:b1:b3:e8:71:35:76:d1:97:74:80:36:21:2b:58:
                    44:ce:20:20:07:94:df:b2:7a:f2:20:dd:98:46:86:
                    db:16:e3:1a:3e:f7:40:c5:6d:a5:b9:89:45:e5:63:
                    10:5a:61:f0:2b:20:0d:68:e1:c0:c0:06:4a:9a:17:
                    1d:18:e5:18:03:ee:79:8e:81:1d:2f:18:53:90:a2:
                    f5:cc:bd:c5:ef:7e:9c:0e:bf:d5:8e:13:34:2d:59:
                    3a:78:6a:09:bd:97:5c:5c:ca:5c:90:93:87:b5:44:
                    37:e0:2c:f0:de:2f:2c:5e:26:ad:5d:06:37:db:76:
                    48:1e:a2:67:0e:70:8e:6e:69:a7:98:e5:6b:39:e6:
                    29:9c:d0:ae:ce:bf:a5:7e:0e:7a:87:70:a6:12:76:
                    d4:3c:ba:13:41:02:aa:60:19:79:c0:39:6c:68:f3:
                    16:23:09:5f:1b:cc:f1:b3:a1:3b:92:cc:30:70:20:
                    23:4b:83:f0:81:27:d9:6a:59:9c:09:a6:ac:de:de:
                    56:be:12:15:26:9c:7c:51:b4:bb:6f:70:29:87:35:
                    ec:d4:16:d5:23:3e:af:9c:78:a0:e2:34:f5:8d:74:
                    5c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2D:CA:EF:97:D1:8C:DC:BC:67:B5:18:FC:A8:48:CE:91:83:A8:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/8b5c0ec8-8c8b-3741-98d8-330f50643492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.crl

            X509v3 Authority Key Identifier:
                keyid:63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f4:0c:dc:b5:cd:e8:64:0c:db:bc:8f:2a:9c:7f:8b:40:69:
         1a:88:71:69:f9:da:92:e7:ec:26:90:8f:1e:ad:77:a6:8c:9b:
         27:bd:d8:77:f5:15:ab:05:ed:85:95:35:89:38:81:0d:78:af:
         a7:e7:76:30:60:7a:a5:9c:43:fc:06:f3:32:0c:6a:c8:a2:0c:
         b8:fb:82:56:41:18:86:28:a9:77:a5:c6:f2:06:d3:50:34:53:
         f8:39:48:13:17:4c:55:12:47:1e:d9:c8:d9:4d:f7:72:74:c5:
         b1:c4:c2:97:4b:41:08:40:4c:cd:8e:bd:33:9f:b9:96:25:50:
         0e:3b:e2:4b:06:4e:5d:d3:af:f4:62:89:73:b8:5a:21:e7:76:
         d4:db:e6:72:c9:36:ca:26:d5:5a:38:30:7b:df:8b:9e:da:a4:
         aa:45:25:42:c0:e2:80:3a:0b:0a:fd:86:7f:f1:5b:a5:dd:92:
         c9:a0:05:7d:53:a0:0a:75:a8:f6:64:10:8f:45:e5:06:b5:8a:
         d6:75:3a:20:01:59:16:68:d1:17:01:99:cd:bd:86:6a:6a:0c:
         97:24:32:7c:2a:79:76:ea:a7:12:7e:cd:33:5d:4e:e1:64:6e:
         63:44:ec:08:a1:ea:d8:28:5e:5a:44:d1:86:78:c3:7d:4e:23:
         d9:71:96:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:07:58 2025 by rpki-client