Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/c119a6a2-05e8-3730-baec-ab434f50d0c6.roa
File:                     c119a6a2-05e8-3730-baec-ab434f50d0c6.roa (raw, json)
Hash identifier:          8HglxkhCOoIfVmDIiG4V8ZbN0lrBb3FtlR4/UkJ3KNA=
Subject key identifier:   2F:60:B9:66:14:27:E5:D5:1E:2A:7D:43:E8:9F:3E:71:CD:15:4B:B9
Certificate issuer:       /CN=9512e4e8-1b19-4250-996e-7d86c6963211
Certificate serial:       010D0C9F4328584A8575F1D9849FFED5F1051880
Authority key identifier: E6:87:4B:4A:F4:E4:FC:EE:A7:7A:68:BE:30:80:4A:8C:8F:03:91:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/c119a6a2-05e8-3730-baec-ab434f50d0c6.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        198.204.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/9512e4e8-1b19-4250-996e-7d86c6963211.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/9512e4e8-1b19-4250-996e-7d86c6963211.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f1:d9:84:9f:fe:d5:f1:05:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9512e4e8-1b19-4250-996e-7d86c6963211
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=2949fecf-b96a-4acc-b0ce-fa3de305d02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:84:10:b5:a5:4c:93:4a:25:b4:bd:69:13:
                    3b:96:15:e7:25:76:47:78:17:a4:26:ce:fc:70:94:
                    e5:19:65:7a:62:96:14:e6:1b:18:31:69:89:07:1d:
                    cc:54:05:43:e9:7f:09:4a:00:b1:32:de:d9:1d:75:
                    eb:41:68:04:9d:c5:a7:e8:74:7c:c7:23:22:8a:ea:
                    af:74:4e:92:b4:38:24:8c:fb:7e:c2:ec:24:fd:de:
                    c5:f5:39:35:ee:8e:fe:73:c4:58:70:cb:5d:67:37:
                    46:7c:79:c7:53:24:73:1d:43:3f:83:73:58:6a:1c:
                    44:a0:6c:3c:ba:51:ee:c5:f5:eb:f3:92:be:24:7e:
                    87:e9:20:79:c2:03:56:d5:6d:43:ed:56:5a:64:79:
                    d2:ed:24:56:68:89:1b:c8:a2:f8:4e:7f:87:15:c2:
                    51:f2:cc:b4:cb:74:26:f3:54:30:b2:13:53:fe:23:
                    cd:e0:9b:6f:c5:01:2a:fc:8b:96:00:7e:6e:6c:89:
                    e3:bb:29:11:8c:ab:31:5a:c0:aa:06:3e:bc:ea:5f:
                    b0:4f:64:08:aa:c1:82:3b:c8:d1:8f:94:3c:72:ad:
                    1f:2e:0f:df:b7:27:b1:42:c1:2c:ce:52:b3:d3:15:
                    43:37:fa:0d:0d:80:15:1f:5b:a8:51:1b:da:eb:4c:
                    aa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:60:B9:66:14:27:E5:D5:1E:2A:7D:43:E8:9F:3E:71:CD:15:4B:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/c119a6a2-05e8-3730-baec-ab434f50d0c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/9512e4e8-1b19-4250-996e-7d86c6963211.crl

            X509v3 Authority Key Identifier:
                keyid:E6:87:4B:4A:F4:E4:FC:EE:A7:7A:68:BE:30:80:4A:8C:8F:03:91:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b4:58:5f:de:b8:98:c0:ae:ca:be:50:ef:e9:90:9d:4e:e8:
         57:4b:17:fc:5a:e4:0f:77:75:0f:8a:21:5c:d8:8d:5a:9c:78:
         c0:67:02:79:82:17:c3:bf:8c:8d:77:b9:51:c9:22:50:c7:04:
         78:22:02:13:c3:33:c8:43:52:97:d6:d0:40:04:f8:0a:2b:c4:
         24:46:a7:2a:32:fc:64:ec:34:0d:d7:5c:67:4e:8e:54:22:88:
         84:83:41:cf:34:f9:ab:22:6f:a9:ab:1e:64:d3:a1:9c:f2:e7:
         eb:b3:8d:ee:50:75:aa:a9:71:7e:a9:0b:20:74:94:2c:ca:6a:
         8b:69:7a:1b:56:89:ef:a8:0c:28:11:54:96:56:54:3e:91:62:
         9c:4b:12:a0:d1:a9:24:f8:8e:cb:1e:38:3a:35:ca:62:c9:b7:
         ed:01:2a:5d:64:60:7e:51:57:8f:a5:0e:66:fc:ca:8f:16:49:
         8d:49:ef:56:3e:b5:35:e0:cf:d4:11:2f:dd:e5:66:45:b1:fc:
         b8:f6:61:fe:28:18:82:52:d2:59:b9:f1:06:4a:eb:b7:78:7e:
         50:13:1d:26:71:0e:67:79:01:4b:f2:90:d5:84:eb:83:67:ae:
         4e:85:26:ef:26:73:3d:ac:02:19:b5:bf:24:80:ee:82:53:3e:
         95:c1:98:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:49 2025 by rpki-client