Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/4e77de2b-0e86-3386-854f-ffd592755ed1.roa
File:                     4e77de2b-0e86-3386-854f-ffd592755ed1.roa (raw, json)
Hash identifier:          2VG31jxLghtAXwhkhWGDtI0u8cUabp3TLh5ZWX3mGCE=
Subject key identifier:   DA:C9:F3:20:D0:89:60:23:D9:11:4D:88:F4:59:DF:4B:58:04:F7:B3
Certificate issuer:       /CN=98e20ef9-13a1-40fd-8c8a-1a1b1f404882
Certificate serial:       010D0C9F4328584AADF111029370F1F99D4B2D80
Authority key identifier: 1B:99:2F:71:97:43:F0:DC:5D:48:EF:CF:B8:A8:1C:6F:56:C5:AD:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/4e77de2b-0e86-3386-854f-ffd592755ed1.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        198.169.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:11:02:93:70:f1:f9:9d:4b:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98e20ef9-13a1-40fd-8c8a-1a1b1f404882
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=992b238a-40eb-4658-9725-4ebef89d277e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c3:e4:81:55:13:1b:b0:f6:52:9b:b7:71:61:
                    ba:6c:89:f5:fe:c8:98:97:ad:0a:e0:d1:c5:20:43:
                    c2:a9:64:39:49:60:30:3d:92:a9:46:b7:bd:0f:1f:
                    6d:73:67:63:18:dd:d1:8b:43:fa:c5:87:43:76:7b:
                    8b:9a:d0:a4:df:6d:5f:ec:01:cb:48:96:f4:bb:05:
                    69:86:36:8e:45:17:d0:14:2a:76:33:c1:25:33:bc:
                    36:42:3b:7e:fb:ca:b0:41:ef:45:c7:8e:80:bd:14:
                    08:97:90:6e:c7:60:fa:51:48:01:4a:2d:95:bf:55:
                    5e:aa:66:3e:be:6d:d0:b0:69:12:94:e3:76:71:50:
                    e0:15:ac:52:46:e3:61:c0:5e:71:be:dd:82:4d:a9:
                    ae:cc:fc:f3:8a:83:62:55:c2:37:30:ed:8f:55:53:
                    a4:a0:0c:90:46:5a:0c:6d:89:0f:b9:90:dd:9c:11:
                    40:1d:a1:72:02:32:94:ba:00:9a:e2:80:5b:c7:ff:
                    bd:01:12:03:b9:fc:ba:a8:32:28:a4:4f:b9:38:91:
                    18:8a:90:a8:38:e3:33:d4:81:1c:19:0c:6d:ac:af:
                    5e:36:7a:8f:f9:15:16:e1:c9:07:ad:60:71:9e:01:
                    e0:42:77:d2:14:6c:1e:44:5d:37:4a:cd:33:64:5e:
                    4d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C9:F3:20:D0:89:60:23:D9:11:4D:88:F4:59:DF:4B:58:04:F7:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/4e77de2b-0e86-3386-854f-ffd592755ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.crl

            X509v3 Authority Key Identifier:
                keyid:1B:99:2F:71:97:43:F0:DC:5D:48:EF:CF:B8:A8:1C:6F:56:C5:AD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/98e20ef9-13a1-40fd-8c8a-1a1b1f404882.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:99:37:70:2e:0f:0a:ea:e3:52:97:68:a4:49:5e:71:09:5a:
         1a:91:1d:89:31:1a:8f:92:76:9f:f0:ad:71:15:22:0d:fa:43:
         e0:ce:fe:4a:b8:38:50:69:84:5a:f3:d0:04:0c:81:2d:1e:12:
         cc:0d:22:0a:30:2c:1d:07:b5:ef:7f:b9:6c:f4:9f:b7:08:07:
         8e:ac:46:a0:01:55:c2:b1:b3:9d:96:d8:c7:7d:91:36:82:71:
         e7:2c:37:57:11:0f:db:9e:a4:9c:bd:11:5f:19:dd:76:fe:c7:
         c7:3c:a7:02:42:29:c3:9e:13:b9:51:f9:13:f4:bc:53:21:2c:
         1d:21:e9:4f:8d:fb:c4:9c:2e:b3:e2:c3:82:43:56:8c:c8:67:
         ce:b6:9a:2f:2d:84:69:a0:44:f8:de:8a:bf:7d:99:a1:76:91:
         89:fd:20:55:c8:fc:e7:51:27:56:1b:33:3d:df:10:07:a3:9e:
         5d:39:c6:7e:00:8d:af:d3:f5:32:17:0c:e7:49:49:3d:5f:47:
         87:7d:d8:6d:e8:74:6b:08:72:66:00:cc:00:6a:31:cf:f4:d6:
         17:5f:45:7c:de:a7:6b:8b:74:e8:ea:d1:16:39:c2:3f:76:99:
         96:cc:88:3b:86:f3:40:fc:d5:b7:cd:ec:c2:71:07:50:8d:8a:
         40:bb:c5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:12:12 2025 by rpki-client