Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ad3be9fe-fad1-38cd-b7fd-ca9b83fb6f2e.roa
File:                     ad3be9fe-fad1-38cd-b7fd-ca9b83fb6f2e.roa (raw, json)
Hash identifier:          JSPlbcis888tVjmJiOevBNpaRT0Bf/oo8RzbiMn/7mU=
Subject key identifier:   D3:BD:E5:3F:16:28:CD:1B:E2:0E:3D:B2:84:59:12:31:34:07:89:83
Certificate issuer:       /CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Certificate serial:       010D0C9F4328584A8B0B51B9DBAF2D61C1C58780
Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ad3be9fe-fad1-38cd-b7fd-ca9b83fb6f2e.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     16509
IP address blocks:        98.142.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:51:b9:db:af:2d:61:c1:c5:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=05b2b3e4-3295-4161-b19d-fe04c80ff5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:84:c3:0f:35:a5:dc:e5:41:86:12:e9:63:
                    c9:b3:c5:51:30:50:c3:4a:6b:cb:25:42:9c:59:75:
                    43:7a:ca:d7:1e:a4:47:4e:9d:02:3d:d2:b5:60:dd:
                    c8:27:26:a6:e3:ef:aa:32:80:be:e8:78:44:c5:c5:
                    ce:45:b6:97:27:f2:12:3e:1d:27:9b:e4:63:3a:7b:
                    ac:f4:8a:ee:d7:82:f5:9f:df:40:23:e5:a2:60:6c:
                    68:f0:2f:16:c1:ea:02:4a:74:b5:5d:a6:03:0c:e4:
                    e9:f2:39:a3:09:33:bd:b1:6a:c9:7f:7f:4a:91:97:
                    c7:9b:91:94:71:5e:04:a4:d5:2e:40:e4:b1:1e:44:
                    5e:14:fa:9c:bd:8b:de:e8:e9:96:ec:db:2d:61:06:
                    d3:5d:a3:ab:32:89:06:0b:78:58:de:50:67:ac:6e:
                    7a:af:f0:c6:ad:b8:9b:d2:34:14:12:3b:bd:9c:5b:
                    f8:96:c6:24:5c:5b:73:19:80:ed:18:75:8f:2f:10:
                    83:cf:6f:72:b2:2e:f8:6b:90:64:26:cf:4c:bb:ff:
                    60:12:ed:61:f2:b1:c8:03:a8:e1:bf:65:65:72:b0:
                    73:0d:2f:ab:33:32:c5:af:5d:87:74:f3:ad:71:8d:
                    84:a2:0f:ec:e6:b4:fe:c7:28:99:65:df:97:5e:5e:
                    ea:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BD:E5:3F:16:28:CD:1B:E2:0E:3D:B2:84:59:12:31:34:07:89:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ad3be9fe-fad1-38cd-b7fd-ca9b83fb6f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl

            X509v3 Authority Key Identifier:
                keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:79:78:b4:b1:5d:a1:5b:3f:9a:4b:a0:c2:b9:2f:ae:b5:f4:
         58:ef:de:a2:37:4f:5e:28:c6:af:f2:bf:fd:a2:54:76:16:63:
         f9:20:13:9c:7f:b4:89:c4:58:62:bb:0e:1e:35:df:16:86:d6:
         27:5d:a5:ec:9f:4a:28:be:e7:19:50:5b:66:7a:0a:88:d2:d8:
         8d:01:b9:c1:70:75:c3:44:24:df:4a:34:b5:c0:7a:44:4c:01:
         61:2c:03:73:c1:ea:7c:54:b3:91:1f:07:59:c7:d7:2a:77:b1:
         bd:84:37:8b:93:e1:a3:f5:91:22:88:d2:d7:4f:31:04:4a:98:
         4c:10:69:a3:fa:0f:54:56:64:6c:8a:3d:8d:2d:20:51:1c:ce:
         37:19:27:16:a5:e1:c4:0b:6d:78:52:9e:db:84:2e:98:06:7d:
         e7:b9:79:2b:79:98:a3:02:d2:b8:32:e7:9b:49:b9:77:30:15:
         b7:b0:02:22:84:6d:b3:91:a0:3a:b3:f9:f6:c0:b5:fc:65:d3:
         ff:b3:b4:b5:2e:2a:6c:d6:e5:79:1a:90:a3:0a:2d:3d:75:b8:
         f7:ff:2f:36:d0:7d:29:fd:39:37:d7:49:33:75:a1:af:ed:e1:
         26:1a:9a:14:e0:ab:d3:4d:42:cb:87:6d:79:cf:91:1b:b9:58:
         a5:62:8b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:12:38 2025 by rpki-client