Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/62ecfafa-a6a1-351f-a6a9-75cdd61b1e0a.roa
File:                     62ecfafa-a6a1-351f-a6a9-75cdd61b1e0a.roa (raw, json)
Hash identifier:          u1TxEAqDNnNsZkTOZehlNQPIqVr0V/w5fSxN00nwJ+o=
Subject key identifier:   44:B0:F8:CE:AB:8B:12:DB:35:BA:A1:B8:9E:5C:C0:B4:2F:7E:9D:17
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F4328584AA12BD4300B95DFF3FFF24DC0
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/62ecfafa-a6a1-351f-a6a9-75cdd61b1e0a.roa
Signing time:             Thu 24 Jul 2025 23:14:13 +0000
ROA not before:           Thu 24 Jul 2025 23:14:13 +0000
ROA not after:            Wed 22 Oct 2025 23:14:13 +0000
asID:                     6589
IP address blocks:        140.235.157.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:2b:d4:30:0b:95:df:f3:ff:f2:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Jul 24 23:14:13 2025 GMT
            Not After : Oct 22 23:14:13 2025 GMT
        Subject: CN=9e96273e-f7c9-40de-839f-33d19716d464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d0:6a:49:5f:69:84:bd:5a:78:d5:00:79:ff:
                    01:91:7e:20:10:6c:1c:85:8e:e2:29:6b:45:1e:5b:
                    9e:04:0e:6b:0b:7c:23:89:42:d3:da:fe:4d:b6:ac:
                    3c:ea:2f:6a:14:5e:c4:0a:7d:8b:2c:c8:67:97:89:
                    ec:3d:e6:8d:29:39:00:93:1c:73:06:45:ae:f6:0f:
                    76:ea:61:97:d8:8d:cb:b9:83:70:b9:de:fc:50:f6:
                    ec:e6:72:52:46:0c:5a:37:15:55:54:bb:5d:ec:01:
                    49:4d:74:fc:5b:07:cd:d3:96:25:75:81:c5:93:c6:
                    1d:17:a6:be:b1:8b:b1:10:62:1f:9c:00:50:83:e3:
                    b7:74:1a:89:39:b5:a7:f5:ec:3e:76:01:cc:6f:cd:
                    c3:d4:78:54:a2:a9:e4:5d:15:81:e1:a8:80:19:d5:
                    3f:96:60:90:cf:c1:32:2d:55:46:12:63:19:8d:86:
                    95:05:b4:2b:a7:a2:c3:00:5f:68:26:3d:65:07:b1:
                    55:ae:af:aa:56:f2:cf:36:ea:c3:18:48:c7:30:b6:
                    72:93:bf:cb:25:e8:1e:43:01:8e:30:eb:7f:8a:a9:
                    73:ed:0f:7e:33:ca:cd:4e:5c:62:03:aa:6a:4d:bf:
                    61:43:da:36:7e:5e:81:8f:a7:4c:68:3e:93:95:ee:
                    ff:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B0:F8:CE:AB:8B:12:DB:35:BA:A1:B8:9E:5C:C0:B4:2F:7E:9D:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/62ecfafa-a6a1-351f-a6a9-75cdd61b1e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b8:d2:bd:35:ec:b5:4b:20:4f:70:95:ad:66:63:23:c0:60:
         00:10:6b:9e:50:14:44:fc:1d:17:43:d2:0f:15:29:59:82:4e:
         4f:53:49:39:4e:4f:5e:9e:55:ab:a6:0e:4e:10:27:e8:a5:16:
         89:01:3e:07:b8:6a:ab:de:09:e5:d1:53:cb:9d:1c:1a:12:f5:
         9b:b8:79:5c:a2:ae:33:ed:23:78:1e:50:f7:5f:18:6a:25:a2:
         6c:50:96:ad:1a:d4:11:a3:d8:e8:fb:54:fb:3d:dc:72:3a:09:
         b1:9a:65:26:29:8b:40:62:8a:9a:d2:52:4c:1f:42:dd:dc:01:
         ba:c6:9d:f7:4a:42:99:45:09:30:e7:8e:89:5c:06:fe:d0:fb:
         81:ef:ea:4c:18:8f:c3:6a:60:62:33:0a:66:32:2a:a7:f6:17:
         bb:df:cc:0b:47:d8:bf:b5:c3:1c:ce:eb:f9:6e:5f:c9:84:67:
         43:bd:bd:e1:ae:70:1e:d0:2f:b2:49:2f:5c:0a:fa:50:d5:55:
         d4:25:14:7e:d1:59:1a:58:dd:82:29:38:61:de:5a:e9:67:fd:
         4c:a9:26:e5:bd:68:96:d7:66:ff:3d:19:e6:bf:f1:f0:79:80:
         89:41:cf:26:62:15:0e:31:30:d1:00:20:11:db:11:d4:c8:30:
         05:f8:df:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:14 2025 by rpki-client