Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09ef5976-4770-3a6f-9d03-91dbc38cb8d3.roa
File:                     09ef5976-4770-3a6f-9d03-91dbc38cb8d3.roa (raw, json)
Hash identifier:          fJ9ETK2ATnj+4YfBzD2crzrUxxqI2DyzivhXtEkNRpg=
Subject key identifier:   42:2B:D5:42:83:21:0B:62:C6:70:96:9B:AD:4A:C5:34:88:29:08:63
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F43285849D594E88FBACCEB723D0F3F40
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09ef5976-4770-3a6f-9d03-91dbc38cb8d3.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        198.73.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e8:8f:ba:cc:eb:72:3d:0f:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=fb3a493e-7efb-47c6-be70-05e4df0ebd7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:4f:93:5a:ad:07:5d:96:b7:9e:60:33:9e:
                    41:03:a4:78:60:9d:f4:89:a8:32:be:b0:33:05:46:
                    fe:35:0b:07:88:5b:62:ed:2e:7d:07:f4:ad:a5:d1:
                    26:03:f5:d7:35:7a:1a:28:91:3e:51:06:14:36:38:
                    f0:d3:77:05:34:ac:23:69:1f:91:a0:c7:52:67:28:
                    e1:e4:fc:15:c3:0f:3b:0f:95:75:6e:be:9b:c6:b8:
                    a5:04:73:75:74:e5:ee:d8:a5:1b:48:d8:84:7a:cd:
                    e6:7b:45:39:18:c0:f1:4b:b1:43:85:00:aa:ae:0c:
                    d9:ef:49:1d:17:03:c3:35:65:f8:8c:ef:8a:89:e7:
                    06:03:ef:b1:8c:31:90:39:0f:6f:ed:7d:15:8b:ae:
                    43:d0:8f:9f:3d:80:3f:47:ee:ba:d0:a1:24:d6:95:
                    f2:53:4c:92:a7:c6:e6:80:4b:5c:7a:21:0e:20:92:
                    1d:8d:61:e0:cc:60:63:6f:24:2c:c7:2b:25:1a:c4:
                    5d:52:3e:23:e3:5b:09:63:ff:a7:4c:ae:d5:c8:ff:
                    d3:06:94:93:48:2f:af:5b:bf:c6:9e:bd:07:12:cb:
                    66:42:ed:ca:9e:7d:54:8e:60:26:d1:b7:a9:f6:8b:
                    90:08:2d:ec:aa:78:54:63:ee:2a:13:86:0b:a6:1c:
                    00:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2B:D5:42:83:21:0B:62:C6:70:96:9B:AD:4A:C5:34:88:29:08:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/09ef5976-4770-3a6f-9d03-91dbc38cb8d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c1:b6:fb:17:1d:65:b6:41:e0:51:9a:b6:e0:c1:dc:ea:a9:
         01:cb:88:26:c9:11:5e:dc:54:e9:30:35:02:27:74:b7:28:48:
         88:1d:4c:52:a6:f6:d9:6d:74:ee:da:bc:0b:8a:19:96:52:b5:
         61:6d:fb:84:ed:02:d3:09:04:35:31:6a:ab:da:a6:b9:0b:ae:
         1a:fd:2a:39:ed:ee:c5:49:b9:48:65:65:72:2b:e9:6b:11:4c:
         ee:69:53:a8:7b:4c:cb:ab:f4:e1:58:9b:3c:86:a2:47:84:ca:
         0b:a8:b0:e2:42:c0:bd:db:3f:97:7b:34:b3:09:e4:1b:4a:27:
         12:fe:39:e2:83:13:c6:18:a2:9a:13:ec:03:dd:6a:af:d6:8f:
         67:2e:52:1e:cd:1f:b3:3e:f6:52:ac:2f:f8:ef:49:7e:85:5c:
         1e:7b:86:c1:48:1b:65:bf:b6:61:d4:9b:e7:2c:7a:ce:13:e2:
         27:93:f0:76:0a:10:73:dd:de:8c:0a:a4:75:39:76:bf:fe:6e:
         81:15:5b:da:04:f7:77:ab:f8:75:2b:72:34:88:b0:32:3e:24:
         75:ab:ee:2f:96:6d:1f:3a:77:e5:23:14:cc:38:2f:11:03:9b:
         ce:8a:33:d4:bc:db:a0:31:a8:af:65:eb:8f:97:16:f0:f4:0a:
         70:ab:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:03:10 2025 by rpki-client