Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/974078e3-6a3f-388b-922f-ef1b1f23cef4.roa
File:                     974078e3-6a3f-388b-922f-ef1b1f23cef4.roa (raw, json)
Hash identifier:          UMThUObm35nqKsr6uO9q8LU6dEcrSEePFapEUrlI7bY=
Subject key identifier:   CC:D0:4E:DE:A4:E8:CC:07:FC:D3:79:79:56:B5:44:44:80:25:A2:3C
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584A8840A00F54108A6BC63FF7C0
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/974078e3-6a3f-388b-922f-ef1b1f23cef4.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     2559
IP address blocks:        198.241.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:a0:0f:54:10:8a:6b:c6:3f:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=560f4518-e58a-4113-b90c-988abcd4c2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:45:2e:41:e2:6c:69:91:79:e5:8c:d9:dd:
                    05:6e:56:98:8d:8f:48:f0:eb:ac:f8:90:e3:8d:e8:
                    ce:01:03:bc:ef:15:5c:8d:f2:d7:93:23:4b:9f:00:
                    e4:24:73:5d:b0:8c:5a:d6:3c:65:a3:35:51:ca:f2:
                    e3:14:84:36:09:9c:61:84:28:84:2c:89:86:b9:dc:
                    f3:ec:2d:98:04:98:ea:8e:5b:ee:fe:43:92:18:e6:
                    c9:de:d0:25:0b:73:c1:4d:58:3b:af:84:83:3c:5b:
                    88:56:84:19:dc:27:ab:80:c3:b1:63:78:a1:11:b3:
                    60:0f:2f:6a:56:f0:58:56:52:69:26:f0:7f:cd:78:
                    66:da:00:02:43:12:12:fe:f2:4b:51:28:58:d4:ad:
                    39:9f:9d:cb:30:9e:b9:c9:56:32:50:cc:95:5d:64:
                    f3:6d:2e:90:9b:77:85:09:6f:7e:bb:b1:6b:88:10:
                    69:6b:55:3e:cf:f9:06:ec:18:98:d6:40:9e:1c:28:
                    53:da:af:89:aa:5c:79:f7:69:a6:b9:3b:97:37:62:
                    ee:41:b6:e0:24:5f:08:9f:3d:52:98:c4:a5:4a:00:
                    0a:4d:17:2c:b8:99:ab:ce:30:14:fe:dd:04:f2:27:
                    20:4f:50:cb:3e:ee:10:55:de:68:9f:f6:66:46:4e:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D0:4E:DE:A4:E8:CC:07:FC:D3:79:79:56:B5:44:44:80:25:A2:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/974078e3-6a3f-388b-922f-ef1b1f23cef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e6:03:8d:f9:5b:c8:40:93:77:c9:a9:32:6c:7f:39:01:fa:
         7b:c0:d4:d1:02:83:32:95:24:64:a4:ef:61:04:18:d2:62:85:
         b2:b6:22:23:08:d8:18:19:b9:2c:a1:b6:f0:5d:85:e6:c3:d1:
         0a:cf:4e:35:3d:e1:63:29:5b:2b:9a:a8:7d:6d:cf:5e:cb:ab:
         c0:2a:13:44:75:0a:5d:f4:31:8a:ee:9f:29:10:a8:14:de:ca:
         78:15:8d:9d:eb:1d:bb:3e:40:ac:02:33:8d:13:0d:fa:9c:75:
         b5:eb:3c:d9:b0:43:03:39:f4:d9:72:a2:91:4d:e6:80:6c:a2:
         cc:23:40:ab:77:d2:03:07:b2:04:c2:99:c9:06:6d:90:34:d0:
         96:c0:57:59:1c:92:a9:48:95:d9:da:96:25:b1:84:34:58:10:
         62:be:2e:6c:f1:e6:44:b8:79:c8:f4:3a:bf:25:47:60:f6:9a:
         fe:58:cf:62:f4:63:75:63:83:de:26:32:7c:5b:30:3c:11:6d:
         32:7d:cc:60:1e:bc:5c:bc:f1:59:54:c1:3e:f4:8d:2d:39:99:
         83:00:24:aa:dc:8f:e1:55:8f:b0:70:3c:ba:97:aa:67:31:d7:
         f4:be:4e:5a:6c:4d:f1:40:a2:e7:b2:d7:97:f5:18:9b:e4:d3:
         59:f6:3b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:34:48 2025 by rpki-client