Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/d1691aa9-20b3-37f9-9963-81c845f7e50d.roa
File:                     d1691aa9-20b3-37f9-9963-81c845f7e50d.roa (raw, json)
Hash identifier:          pKP+E0WZwLElPz0fYIDNXoEVd6Q5BKsDy54Nn3nclCE=
Subject key identifier:   F7:6B:4A:E7:9E:0E:65:80:8C:96:24:58:51:20:B8:BA:8B:53:5A:C4
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584BBE40376D4C78BAEEA8CE0D90
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/d1691aa9-20b3-37f9-9963-81c845f7e50d.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     3300
IP address blocks:        198.207.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:37:6d:4c:78:ba:ee:a8:ce:0d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=72d9c352-498c-402a-98e6-e7eadb96321b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:73:43:3e:d8:fb:7b:21:9c:f9:c5:d1:b2:3d:
                    3a:c2:c6:01:5c:39:f6:f2:0e:eb:06:7d:df:97:f9:
                    e7:8e:e1:66:ac:f7:29:0e:0f:5a:42:ca:ba:3f:19:
                    0e:0d:5a:a6:8c:a6:81:06:d1:e0:63:69:d4:a4:18:
                    97:b8:e5:28:a1:1f:8d:3e:4b:af:67:8f:10:40:fb:
                    7c:a3:e4:ed:4e:bd:f7:80:57:5c:ef:e2:8d:1c:16:
                    ce:76:78:9a:99:0e:54:5b:4e:49:f5:09:c3:b9:79:
                    14:06:b3:04:ba:3c:e2:c6:71:c0:47:65:81:1c:51:
                    b9:c2:f5:99:41:d9:19:1b:ae:f1:eb:ae:a9:67:3d:
                    4d:b7:eb:b0:4f:1e:9c:02:f2:ed:ed:6e:f9:a8:84:
                    3a:ba:a3:f6:bf:4b:51:58:f1:92:53:0d:c4:1b:b8:
                    f1:8d:65:ca:0c:c7:dc:2f:80:d5:c6:22:a3:9b:c4:
                    ec:5e:ec:8e:ef:11:a1:0f:e3:69:5b:1b:f7:85:19:
                    8a:d1:8f:1b:e8:c6:29:f8:6a:a4:66:f9:7d:f3:00:
                    ba:08:8d:8b:76:76:43:3b:79:2f:d2:7b:12:55:b4:
                    94:28:a2:25:97:a5:ef:28:2c:58:98:d1:35:3a:db:
                    36:f9:9e:69:c8:49:9c:25:6a:74:66:78:22:93:49:
                    17:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6B:4A:E7:9E:0E:65:80:8C:96:24:58:51:20:B8:BA:8B:53:5A:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/d1691aa9-20b3-37f9-9963-81c845f7e50d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:3c:65:c2:42:a1:b9:d1:65:87:5c:0d:a5:45:f5:70:f0:55:
         e2:43:69:9f:4a:2c:4c:96:c2:b1:27:7a:7b:61:03:fd:36:c0:
         06:9f:7d:a9:cd:3a:08:10:0a:f3:b2:3a:12:de:1b:72:a4:a6:
         fd:3a:89:40:b2:e0:9e:fc:fd:3c:07:23:31:6c:8a:5a:74:32:
         16:57:40:09:0e:16:5d:3a:b6:47:b8:a1:ef:9d:e3:06:e8:81:
         fa:83:c9:d1:52:b7:b1:15:e6:7c:62:b9:44:be:2d:f3:69:cc:
         fd:b5:37:74:a9:23:6f:0f:ef:4f:cc:8e:c8:72:0a:c3:ef:d9:
         4d:d6:fc:35:5a:31:ad:e0:ab:2a:23:bb:1f:a9:78:d8:17:4e:
         8f:01:c9:77:73:55:a1:93:46:4f:5c:ec:5e:8d:fa:ab:38:1a:
         c7:b0:08:8f:17:09:78:0e:34:bb:9e:ac:b3:73:ab:db:d8:fe:
         b4:0d:c8:4b:74:1f:82:00:e6:b8:9a:72:e7:a9:3c:66:39:08:
         f1:b0:3d:ef:b1:8f:41:b6:ef:4e:a1:d9:48:d6:f8:b1:ec:fd:
         6a:b9:55:c3:36:67:64:24:82:c3:a2:59:52:01:60:37:46:68:
         01:c3:4e:2f:05:eb:d1:2d:ef:8e:c1:e1:9e:1d:17:d8:de:e4:
         b8:8a:84:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:18:37 2025 by rpki-client