Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/432ad950-a6e1-3e92-aa85-d8c6be6d7adc.roa
File:                     432ad950-a6e1-3e92-aa85-d8c6be6d7adc.roa (raw, json)
Hash identifier:          HAlHLy0Tli7QKseSduYiXL6lXrz17qZrSBaPTAoxIUw=
Subject key identifier:   AF:11:89:C0:33:BD:08:AF:1B:2A:26:95:80:DD:68:74:FC:AA:03:A3
Certificate issuer:       /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
Certificate serial:       010D0C9F4328584BAD6251F064A6AAEE8AB74E00
Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/432ad950-a6e1-3e92-aa85-d8c6be6d7adc.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     13462
IP address blocks:        140.98.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:51:f0:64:a6:aa:ee:8a:b7:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=0d46d967-fe7c-47fa-835e-0d27cc028f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:c9:40:95:03:ed:b5:9a:a7:44:1e:0e:78:
                    e7:98:de:35:76:80:fa:44:1a:13:32:76:4b:89:82:
                    5b:90:76:e7:d3:fe:3b:ed:fb:32:9f:9c:e6:66:41:
                    ca:83:8c:10:96:59:ef:47:3a:f7:50:5f:4c:c9:24:
                    b7:5d:b9:32:81:c5:0f:4a:2e:b9:7a:a5:e4:ca:f2:
                    47:ab:5e:c1:8d:9e:5a:c1:3e:5e:38:5b:04:41:7f:
                    5a:53:25:10:90:ca:8d:86:c3:d3:4c:18:54:87:a4:
                    5c:db:f8:0a:44:e8:87:c3:38:1c:ae:b6:9b:08:fc:
                    e3:b6:e5:1d:bf:4e:e6:8a:81:09:15:c5:83:cd:84:
                    87:b7:97:ff:69:99:2f:54:bc:b0:3d:55:d3:fa:19:
                    44:dc:79:ba:9e:94:93:ea:61:d8:10:c1:21:f4:44:
                    73:29:ff:16:26:2e:46:c5:19:52:ab:7d:89:cc:66:
                    54:3a:15:e9:12:5b:a9:33:a0:ca:48:65:55:e4:af:
                    d5:70:65:ad:a1:d6:e4:26:8d:ed:6b:42:89:29:cf:
                    e1:e0:cf:b8:ad:d4:ef:0d:7a:9e:69:29:81:51:bc:
                    3c:fc:ff:0f:d5:d3:cd:af:af:e1:91:60:dc:a0:f2:
                    2e:c9:42:14:60:1f:88:21:6a:8c:b7:22:8a:81:9a:
                    0b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:11:89:C0:33:BD:08:AF:1B:2A:26:95:80:DD:68:74:FC:AA:03:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/432ad950-a6e1-3e92-aa85-d8c6be6d7adc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.98.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:be:52:e0:50:bd:b3:e8:fd:2c:3b:38:62:96:ea:cb:b6:9e:
         eb:c3:e9:1b:08:9a:77:4e:be:ec:f4:2f:1c:fe:be:4e:bf:ae:
         35:1d:ba:aa:0b:7c:3a:cc:b3:ba:a1:a5:7c:51:89:7a:96:0e:
         e7:ab:5c:7c:1e:42:1f:2d:9a:8e:e2:bc:79:2f:2c:8a:41:09:
         76:59:55:74:a9:ea:31:b7:93:de:57:d1:85:0d:35:f6:ae:1e:
         32:99:95:ab:c2:41:22:19:87:7e:18:6c:c9:3e:02:7b:ae:e9:
         70:30:49:36:62:56:b4:c2:d9:2b:a2:69:b7:3c:28:4d:08:c2:
         e1:a2:22:a4:6a:e4:c7:e1:b7:fc:15:0d:46:d5:90:45:a8:96:
         33:f6:0b:8e:13:fc:e0:1f:5f:42:47:13:a3:10:ab:03:91:43:
         3c:e1:e0:dc:86:f8:0f:6e:41:f7:bf:13:2a:e7:53:c0:16:d1:
         46:7d:c6:58:79:ce:6b:6f:9e:9c:5b:86:06:24:3a:1e:73:9d:
         22:08:1c:ef:b1:2c:0a:fb:da:12:4e:e5:b4:af:11:0f:8f:4b:
         a5:2b:b6:e8:d7:0b:b8:38:93:b1:4c:6b:0c:ba:7a:b4:9b:cd:
         5c:16:c8:0b:53:c1:3a:71:f0:6d:c1:7a:35:9a:fd:b3:f0:4a:
         fa:da:c8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:54:42 2025 by rpki-client