Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/042c0543-f894-3817-81f6-0864e24dd6a1.roa
File:                     042c0543-f894-3817-81f6-0864e24dd6a1.roa (raw, json)
Hash identifier:          Ace40Swsgt3963FzMlDHk2NpW4KDA3LE5Vych3RSGRY=
Subject key identifier:   B7:3F:97:B4:63:4F:F6:53:56:95:B8:7F:B5:A7:76:FE:FD:A7:BC:CD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E964AD501A5C4A8A9434018
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/042c0543-f894-3817-81f6-0864e24dd6a1.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     17359
IP address blocks:        199.200.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:4a:d5:01:a5:c4:a8:a9:43:40:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=d65222fe-f46f-48cf-9fac-0f47cd518e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:16:2a:f4:00:69:57:e4:53:b8:64:0b:8a:
                    17:c2:a8:93:1e:4e:1c:5e:e5:53:5d:aa:a2:96:5d:
                    ca:24:b4:63:4f:27:29:05:c1:44:52:99:cd:ae:15:
                    9e:c8:1b:87:4e:d5:5a:40:28:ba:ad:21:91:16:22:
                    ea:26:94:f6:43:00:ae:5c:69:4d:e7:a0:ad:47:00:
                    6d:68:20:6f:69:83:d8:3c:ba:d5:b6:7b:95:2f:ef:
                    94:98:93:3a:27:ac:be:2d:27:a8:03:a8:e6:eb:4a:
                    48:e6:49:d7:82:f4:1b:2c:c1:4b:13:2c:e2:6b:30:
                    5f:c7:fd:ed:6b:17:1e:b8:96:f1:6f:a9:38:28:be:
                    5e:a1:d1:a4:fb:2c:82:0f:21:4d:15:eb:82:9f:c0:
                    1f:fc:2d:bc:28:e8:26:4a:2e:6d:76:a6:cf:bb:2c:
                    4f:a8:fd:4e:33:31:d0:32:75:f9:ea:47:1a:f8:cc:
                    c0:db:2f:ad:aa:e5:17:6b:14:e8:02:4e:34:c3:8e:
                    e5:fa:03:91:fa:a9:80:14:d8:78:12:81:05:47:2a:
                    a2:bf:52:ee:da:9b:5e:2b:e5:75:95:47:ae:aa:64:
                    41:d3:51:2e:05:75:36:14:f8:e6:07:0b:f4:27:72:
                    30:d2:e3:c5:05:52:88:ac:2b:26:91:a4:a8:88:8a:
                    3f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3F:97:B4:63:4F:F6:53:56:95:B8:7F:B5:A7:76:FE:FD:A7:BC:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/042c0543-f894-3817-81f6-0864e24dd6a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:fa:55:01:91:4e:a1:e3:87:58:c8:25:b9:4b:84:f3:2a:74:
         01:4c:ed:a1:14:dd:84:bc:79:cd:be:ee:3f:bf:56:32:f7:4f:
         81:05:e0:62:13:0e:03:88:03:cc:31:6a:60:27:58:d1:ad:f7:
         74:d7:ef:55:8c:d2:73:a9:48:c6:d6:2f:bb:13:5d:97:f7:b5:
         91:49:8a:80:c2:be:34:31:10:54:ed:6d:b2:43:73:88:a1:0b:
         62:db:f1:1f:63:79:51:cc:bc:aa:3a:ad:59:c3:68:06:02:60:
         15:f4:97:91:a9:bd:bb:b7:05:03:16:4b:c7:66:19:b0:85:78:
         f5:90:aa:b5:b4:1b:16:53:d9:a0:d5:cd:21:34:5e:d2:81:99:
         68:52:e5:27:0d:cf:f2:3f:a9:a0:74:56:f6:5e:60:11:18:73:
         2d:d9:5d:f9:6c:9f:db:5b:32:15:82:a9:a4:2c:66:dd:e6:7f:
         e3:c3:2d:78:b9:4a:12:32:75:57:cf:d1:4e:6f:47:d0:fa:7c:
         15:ce:e9:c5:25:9b:34:e9:c6:a3:66:c0:8e:11:30:15:8a:b1:
         b4:f6:60:98:f8:97:e1:ee:50:22:7f:60:87:c3:15:b5:5a:10:
         98:6e:f4:41:74:bf:d1:bd:67:60:18:a7:79:cb:22:0a:e8:2e:
         37:c5:44:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:06:30 2025 by rpki-client