Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/6859a32c-5d1b-3184-bb6e-6d4b8f5669a0.roa
File:                     6859a32c-5d1b-3184-bb6e-6d4b8f5669a0.roa (raw, json)
Hash identifier:          M+YdbzhtfAXpctU2OhtMySw0M4quPV9zB+9faMf3QdY=
Subject key identifier:   80:FE:E6:5D:3D:06:B5:7D:00:B3:DF:2F:71:C8:37:D2:79:B6:67:DD
Certificate issuer:       /CN=e474b0b1-1dc5-4e07-8410-8f20008da0a3
Certificate serial:       010D0C9F4328584AADF10DE4961AF2D4B89DA484
Authority key identifier: 0C:FB:19:AC:FD:6D:21:D7:1E:6F:22:FD:03:36:21:DF:E7:F4:C3:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/6859a32c-5d1b-3184-bb6e-6d4b8f5669a0.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     14697
IP address blocks:        198.168.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/e474b0b1-1dc5-4e07-8410-8f20008da0a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/e474b0b1-1dc5-4e07-8410-8f20008da0a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:0d:e4:96:1a:f2:d4:b8:9d:a4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e474b0b1-1dc5-4e07-8410-8f20008da0a3
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=0af99ff7-3108-45c6-81b9-d1da8d7724a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:45:fa:46:74:4d:49:48:60:28:ad:ab:d7:
                    7e:be:3c:8b:ef:54:e1:a0:9e:2a:8d:9e:a9:07:d0:
                    95:a5:13:43:9b:b9:d7:b3:7b:80:1f:94:72:48:55:
                    a6:45:f6:cb:bf:10:73:e5:a5:15:ad:b5:c7:82:7d:
                    00:83:cf:4b:35:bc:66:4f:82:78:e8:f8:ff:31:4d:
                    6c:16:72:e9:92:04:47:6a:37:30:97:25:09:2b:6e:
                    8f:33:6c:fe:a4:7b:50:8b:6b:35:d4:86:18:df:09:
                    8c:71:f8:16:65:1a:3a:2a:7e:34:68:bf:49:51:58:
                    65:9b:80:fc:5e:6d:5b:68:41:21:f5:58:2e:d7:b1:
                    22:14:79:02:ec:dc:2a:c3:4a:5a:37:10:5e:08:5d:
                    2c:6a:77:6a:89:c9:a8:d4:90:12:87:8e:17:a4:76:
                    6f:b1:d1:f0:f1:cf:57:65:9d:b9:cc:65:1c:84:37:
                    a2:82:51:97:b1:8b:ef:a4:44:63:a3:d5:83:98:61:
                    e8:87:3d:45:93:37:44:3a:1e:78:05:0a:ab:e0:ed:
                    f3:b5:4d:49:c5:fd:45:81:8d:a3:eb:2b:29:dd:ec:
                    e6:b2:4c:7c:ae:67:f9:f9:d5:30:8b:dc:df:0a:3d:
                    84:c7:a2:eb:7a:76:be:28:2a:1e:01:0a:50:a7:91:
                    40:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FE:E6:5D:3D:06:B5:7D:00:B3:DF:2F:71:C8:37:D2:79:B6:67:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/6859a32c-5d1b-3184-bb6e-6d4b8f5669a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3/e474b0b1-1dc5-4e07-8410-8f20008da0a3.crl

            X509v3 Authority Key Identifier:
                keyid:0C:FB:19:AC:FD:6D:21:D7:1E:6F:22:FD:03:36:21:DF:E7:F4:C3:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e474b0b1-1dc5-4e07-8410-8f20008da0a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e6:75:66:5e:b9:27:f5:d1:5d:48:fe:ae:d8:7c:57:55:3a:
         bf:4c:98:67:43:0a:d5:2a:32:1e:42:41:16:49:2c:73:6a:95:
         44:8f:82:cf:6d:4d:bf:18:fc:b2:f7:10:0a:4c:da:ff:fe:66:
         15:4e:e5:fa:88:2c:b4:c3:b9:ce:57:a1:b0:c5:3c:0b:41:be:
         b6:fa:6b:3d:c7:f6:b1:fb:3c:37:56:5a:d2:fb:98:45:a6:cf:
         0a:32:48:2c:81:d0:b7:01:f0:9d:54:8d:48:9f:87:30:cc:df:
         fc:9e:ba:64:e4:ce:e3:85:32:e6:e8:c0:ad:2d:4b:87:a6:b7:
         d4:a6:ec:e1:e8:e9:7a:ee:ee:04:46:1c:7a:b4:98:3d:de:e4:
         47:58:42:1d:9a:2a:84:41:1d:ce:3d:76:7a:b5:cc:af:96:3b:
         de:87:cf:68:2d:77:92:59:78:64:ef:ff:36:17:98:a7:c0:3e:
         b8:52:ff:75:7b:78:0b:6a:90:ca:c4:66:cf:07:0e:a5:36:45:
         8c:cb:5e:21:f0:00:b9:2a:26:cf:f2:96:03:34:38:e0:47:25:
         8f:0a:1a:c1:0e:86:99:1e:e4:d2:43:fe:32:13:69:bf:e8:26:
         bd:5a:22:56:db:1c:34:aa:cc:cc:e7:24:65:62:cd:a4:1d:c2:
         3c:97:98:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:09:56 2025 by rpki-client