Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/1f11ed0d-4047-3ec2-9a2d-aaae67adbbd1.roa
File:                     1f11ed0d-4047-3ec2-9a2d-aaae67adbbd1.roa (raw, json)
Hash identifier:          8o23m9M4FpBM5bCnBh3O7/CDp6xfSuLW0IQ9IjCdLPo=
Subject key identifier:   F5:7B:31:E4:11:E5:89:6C:C3:A8:0A:D6:43:A4:A4:E9:53:5F:6D:56
Certificate issuer:       /CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
Certificate serial:       010D0C9F4328584A8410DD65C4580D88DF308680
Authority key identifier: 13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/1f11ed0d-4047-3ec2-9a2d-aaae67adbbd1.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14464
IP address blocks:        198.7.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:dd:65:c4:58:0d:88:df:30:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3119a466-19fb-446a-bd4c-f3266c7f3f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:57:66:c4:28:ce:64:7e:1f:e9:ef:48:5d:
                    6b:60:fa:d6:e8:86:68:6c:d5:40:62:06:d9:4c:c8:
                    fc:42:d5:a4:75:93:2c:bb:ed:16:07:5c:13:37:f6:
                    f2:0f:ef:ee:cc:60:9e:60:a7:5f:7b:43:64:30:4f:
                    6a:bd:ad:53:41:41:c8:0e:05:f2:fb:1e:b1:11:f0:
                    a5:9b:9a:63:8c:3b:74:44:0e:d1:10:e1:26:05:3c:
                    37:e6:a9:b2:6c:f0:84:b6:96:fe:c0:70:79:44:36:
                    fb:e2:b5:d1:77:9f:08:11:ac:dd:0d:97:34:0c:9a:
                    0c:92:86:0c:ca:f5:cc:35:b2:98:f7:de:d9:b3:75:
                    9e:8a:8b:14:33:81:ac:8b:f3:11:f1:38:97:f1:94:
                    56:f7:8f:e7:e2:74:5a:69:10:4b:31:f2:9b:78:42:
                    84:dd:42:4a:3e:cd:d9:58:8c:cc:9c:77:34:dd:fc:
                    33:a6:7c:26:8e:5d:39:9e:51:18:62:22:41:79:12:
                    53:52:47:2d:01:d9:c1:46:7f:21:6d:d1:7a:fb:47:
                    c0:78:80:c2:1c:72:be:19:18:23:83:14:db:ce:df:
                    de:0e:be:90:d4:76:b1:b9:7e:6e:ce:3d:ef:a4:f9:
                    9a:9c:40:f5:c1:d3:15:2f:66:bb:60:59:b2:37:e1:
                    89:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7B:31:E4:11:E5:89:6C:C3:A8:0A:D6:43:A4:A4:E9:53:5F:6D:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/1f11ed0d-4047-3ec2-9a2d-aaae67adbbd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl

            X509v3 Authority Key Identifier:
                keyid:13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.7.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b7:a3:67:b0:d0:33:09:45:96:b4:5a:79:b0:b8:27:e1:29:
         e3:d8:06:4a:af:8e:c5:71:78:dc:91:7a:47:0f:8c:9d:c7:98:
         14:b4:4c:46:8a:8b:2f:63:a7:8d:eb:1e:97:69:a2:4e:1b:4b:
         fa:74:ce:df:f5:d6:8c:ef:47:3a:18:d7:2d:44:13:84:da:96:
         5c:ba:2a:6b:67:61:48:a4:e3:20:c4:78:2e:16:b6:41:cc:5f:
         35:58:4a:50:59:ab:ff:8d:6d:63:7e:8f:22:be:a1:f0:5a:ab:
         32:a6:2b:a5:13:ae:8e:86:7b:38:41:0e:b6:84:70:c6:7b:6c:
         bc:f8:53:c5:18:35:4a:fe:ba:ad:ef:9c:b1:ea:29:fd:a0:01:
         a9:bc:06:d1:ac:b8:a3:73:02:93:84:c4:0c:41:e4:ff:12:da:
         ec:2a:9d:91:dc:50:26:34:02:e3:63:1a:d2:33:ac:cf:f5:16:
         c6:51:a0:84:59:b0:59:a1:cc:9f:3f:42:cc:5a:04:8a:40:8a:
         68:86:a7:5a:c6:0a:ff:91:55:94:2a:c1:ce:26:7c:ef:28:7b:
         27:13:6c:26:cd:3c:32:61:73:9a:ba:6c:c8:7f:0d:80:52:d3:
         a3:47:98:1e:3c:96:6d:7a:4d:bd:c7:21:51:fc:21:26:12:f7:
         d3:6f:6c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:58:36 2025 by rpki-client