Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09ef5976-4770-3a6f-9d03-91dbc38cb8d3.roa
File:                     09ef5976-4770-3a6f-9d03-91dbc38cb8d3.roa (raw, json)
Hash identifier:          9cjuh4V/pyUiRYULUXog8FdXFp8gZabNUzBxMEJqNhA=
Subject key identifier:   E7:B1:91:3D:16:40:F8:0F:00:36:6D:83:BD:67:19:B1:01:31:AD:C3
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584AB650EC78CAE59B011330B680
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09ef5976-4770-3a6f-9d03-91dbc38cb8d3.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        198.73.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:ec:78:ca:e5:9b:01:13:30:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=174bd37b-1c67-4b41-9ca8-6248bb13572d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:cd:79:bc:e6:c3:f1:56:6f:49:a4:98:b9:
                    43:de:fa:41:01:e1:02:78:f4:4a:ba:55:b7:9f:45:
                    56:14:df:f4:63:96:d8:5f:ec:f4:48:d2:98:de:de:
                    90:a3:db:1b:14:ee:94:0a:54:10:69:b2:78:1b:7e:
                    2f:4e:b5:b1:f2:08:3f:60:49:b3:72:bb:74:87:b2:
                    05:b6:1f:d6:f9:87:ca:8a:8a:c2:35:74:ab:0b:35:
                    db:68:e7:11:12:2d:42:c2:db:b9:13:37:67:b2:f2:
                    f6:a8:db:1b:af:bf:db:1a:df:84:d2:b0:c3:8e:8e:
                    7e:3c:17:32:59:b8:57:0d:e7:b0:d6:71:a1:4b:3f:
                    79:db:39:c9:1b:36:77:67:52:5f:c3:31:80:9c:a6:
                    fc:ad:3d:8d:e6:8d:15:d7:36:55:27:43:49:47:ae:
                    d5:45:59:ba:39:49:b1:b2:dd:3f:50:2b:9a:75:ff:
                    df:e9:71:75:ad:65:17:d6:b3:12:4e:6f:0e:34:75:
                    2e:08:39:1e:e8:ab:fd:a4:85:fc:12:52:ba:ec:11:
                    b4:ca:c1:b2:60:e4:12:a5:90:e8:dd:31:f1:c0:00:
                    9d:f8:ba:6b:52:dc:43:7d:13:b8:14:4a:0b:c1:b7:
                    65:34:0e:68:00:7b:30:2e:da:db:15:ba:e9:0b:7c:
                    d8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B1:91:3D:16:40:F8:0F:00:36:6D:83:BD:67:19:B1:01:31:AD:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09ef5976-4770-3a6f-9d03-91dbc38cb8d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:10:b6:a7:44:ff:63:d5:10:72:ed:fc:01:62:c7:65:58:19:
         2f:38:a8:bc:1c:57:d0:63:aa:d2:6a:0c:42:a0:bb:47:05:50:
         cc:18:6b:40:96:3e:b9:b1:31:28:76:97:31:45:8d:81:32:e7:
         fb:b8:cd:0b:c3:3f:e8:3e:15:94:e9:6c:7f:2d:8a:b2:55:95:
         63:bd:ce:0b:ee:ea:b9:9f:6a:b5:ca:70:98:f4:0d:e5:0f:49:
         d7:bf:e4:10:1c:69:c8:c6:7d:f2:44:7e:18:6b:79:40:49:c9:
         32:40:f3:97:ea:0f:72:b9:ed:fb:df:cc:1c:05:f2:ac:be:14:
         de:2c:f2:f2:93:86:fd:4f:53:40:b4:da:19:90:ea:24:f9:96:
         f2:28:27:56:59:74:53:6d:3d:37:a9:c1:8d:22:b2:c9:53:e8:
         a5:2c:bf:43:84:49:1c:31:c2:bf:f6:ff:21:5f:e7:3b:d9:90:
         8e:f6:db:9a:ec:c9:51:ca:69:9f:6b:b2:9c:45:84:3c:64:92:
         cf:64:62:91:c7:33:dd:e5:14:e0:02:d0:14:9d:bb:22:d5:fc:
         ab:dd:bb:8f:90:c9:70:53:cd:41:24:13:cd:70:f2:71:f6:7a:
         1b:54:18:fc:22:7b:e0:34:18:bf:7f:50:da:86:2d:6b:3f:62:
         f7:53:6d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:07:02 2025 by rpki-client