Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/35a79ebf-4eb2-383e-9290-9d804567c62e.roa
File:                     35a79ebf-4eb2-383e-9290-9d804567c62e.roa (raw, json)
Hash identifier:          czc5MTV/mtbvx5ohB2oSmrCWXo1bcstdqqe3iJTzq/4=
Subject key identifier:   02:3A:33:81:79:F6:6B:2B:5A:14:42:0F:5F:50:A2:52:B6:54:FA:0F
Certificate issuer:       /CN=83588ae3-b763-413d-9823-3d3c20081120
Certificate serial:       010D0C9F4328584A92063350C16878DBE4F69FE0
Authority key identifier: 3A:49:26:96:EF:02:4B:DB:23:E4:53:05:7B:77:A5:A8:B1:78:19:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/35a79ebf-4eb2-383e-9290-9d804567c62e.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     13866
IP address blocks:        198.251.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/83588ae3-b763-413d-9823-3d3c20081120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/83588ae3-b763-413d-9823-3d3c20081120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:33:50:c1:68:78:db:e4:f6:9f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83588ae3-b763-413d-9823-3d3c20081120
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=c6d55791-66d1-4533-a403-bb7f728a76dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:8a:cc:08:3e:2c:49:5d:a1:a2:00:25:e3:
                    05:e7:00:7f:ac:ca:d4:7c:ba:34:7c:1a:37:b7:47:
                    70:de:a7:ca:92:a2:b8:3b:9d:07:1b:7e:a8:9d:c7:
                    71:20:a0:fd:4b:f6:97:74:3c:e6:ae:20:f4:8f:8a:
                    09:a0:2a:22:dd:88:1e:17:7e:d7:b0:5a:8c:66:95:
                    ce:2d:d2:2a:66:63:02:03:9a:08:4a:50:df:bf:d0:
                    6e:b0:bc:30:52:39:66:c0:49:57:60:e4:38:07:87:
                    b7:02:74:2a:d0:25:81:f4:87:16:3d:b7:d5:14:42:
                    28:0e:a7:5e:43:e0:e0:2e:08:df:2c:8f:31:d4:f4:
                    da:17:f2:76:cd:55:36:7a:16:23:9a:f5:b2:f6:c1:
                    e7:bc:67:e0:35:53:d3:93:8e:ad:07:58:16:51:dd:
                    16:77:c2:77:ca:bb:75:e1:ff:cb:be:a6:4f:e2:11:
                    dc:43:32:2f:14:5c:39:40:62:04:7a:9f:db:21:52:
                    dd:e5:37:5c:25:c1:44:8c:e5:e6:f6:82:96:b3:20:
                    5c:4b:ac:61:7e:7b:ac:95:62:3b:c5:12:2a:6c:11:
                    18:6e:58:d9:e9:77:28:0f:cd:b4:c6:54:7e:f4:06:
                    5c:78:c8:e8:09:2b:37:9c:fd:f2:69:c0:48:7e:14:
                    c0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3A:33:81:79:F6:6B:2B:5A:14:42:0F:5F:50:A2:52:B6:54:FA:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/35a79ebf-4eb2-383e-9290-9d804567c62e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/83588ae3-b763-413d-9823-3d3c20081120.crl

            X509v3 Authority Key Identifier:
                keyid:3A:49:26:96:EF:02:4B:DB:23:E4:53:05:7B:77:A5:A8:B1:78:19:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.251.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:1b:79:38:13:06:db:78:db:ed:62:13:44:1d:f1:d3:02:cf:
         61:1d:3b:5c:d7:83:92:ee:90:1a:8d:7b:49:81:5a:a9:c5:57:
         07:6e:39:b1:ff:a3:22:c8:3d:41:3d:d4:1a:53:b4:2d:a8:b9:
         29:dc:30:47:28:ac:54:d5:cd:13:fd:73:42:9a:76:2d:b4:32:
         47:0f:3f:90:19:52:65:ea:b3:0a:28:96:5a:b3:eb:14:f3:e5:
         01:6b:ad:78:7b:f4:53:01:83:15:45:6f:79:3c:2b:ed:65:72:
         a6:e6:d5:10:0e:4d:45:c7:73:40:31:40:3e:2c:5c:4a:61:9f:
         ed:ef:7d:56:d8:49:c4:67:55:65:76:ab:79:24:2a:6d:af:a9:
         d9:94:ce:85:c5:60:ad:f8:c9:fb:fa:ee:99:fb:26:30:b6:51:
         4c:ee:a3:7c:15:11:d6:9c:83:68:58:f7:18:aa:71:d6:2a:8b:
         82:41:1f:e0:b9:20:78:11:47:83:c8:76:e2:d7:a5:a0:2d:e8:
         91:73:bb:0f:e8:1d:80:33:12:cd:91:e1:a1:57:e9:d3:66:08:
         9d:73:63:4e:e4:ca:f8:cf:05:bc:e1:83:09:e5:28:3b:1d:cc:
         9e:a1:b9:0a:76:cb:46:1a:ea:25:db:36:3e:13:3e:fe:5d:09:
         38:38:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:16 2025 by rpki-client