Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa
File:                     4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa (raw, json)
Hash identifier:          biIK9FSMigXKyIEf99eu8CbSvOM7JJEWbAt9x9/7cs0=
Subject key identifier:   4C:75:04:83:0C:D6:F7:9E:04:5C:97:2E:81:4C:AB:5A:E7:BA:3B:A2
Certificate issuer:       /CN=98ba8361-2ba5-4f99-8d20-428c3755f1ca
Certificate serial:       010D0C9F4328584BAD62542658CD03F0E0BF8400
Authority key identifier: 33:D1:19:34:A5:EC:21:4F:88:CD:4C:02:55:98:5E:76:A5:1E:92:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     30001
IP address blocks:        208.64.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:54:26:58:cd:03:f0:e0:bf:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98ba8361-2ba5-4f99-8d20-428c3755f1ca
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=8ca24f7f-7de3-441d-8d25-a5c216698fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:57:7e:97:00:99:59:da:80:7b:7e:ea:eb:
                    de:03:5f:85:dd:06:55:ce:79:d9:3f:0d:b7:12:95:
                    bf:07:a8:ac:a0:b6:6c:23:16:81:08:91:84:94:37:
                    bb:06:e2:7e:d0:56:f0:59:cb:bc:2b:d8:a7:2b:32:
                    d5:ce:83:5f:c5:c7:14:c7:87:e9:1e:ee:42:fb:b4:
                    59:b5:d5:e6:df:56:64:f5:e7:a5:31:d8:be:fe:d3:
                    d5:ba:ec:2d:35:2e:eb:72:3e:73:94:05:f5:c8:24:
                    df:27:f7:f4:ea:cd:84:3c:7a:84:49:36:17:7e:7f:
                    3c:05:6d:e1:68:af:b7:82:b7:10:0b:bf:c2:11:51:
                    90:22:35:73:ba:e3:42:6f:e3:73:9e:87:fe:e5:1e:
                    95:81:55:70:a8:58:2d:1f:8c:c3:f8:df:2a:c1:3d:
                    db:ea:ed:c8:11:6e:eb:86:a0:45:a2:f7:6f:16:e9:
                    e3:e0:d1:c7:59:e6:ea:62:4c:f2:3c:c7:72:24:bc:
                    60:31:0f:56:d1:d4:ab:40:6a:8b:c4:8c:18:4d:5d:
                    15:4a:77:93:d8:a2:3b:f4:0a:c2:c8:86:cb:70:c6:
                    cc:6e:5a:ee:12:4a:7e:da:31:7c:e4:78:fc:2f:e8:
                    ad:b3:cb:7b:5d:9a:8c:ce:55:53:be:52:0b:dc:2f:
                    9f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:75:04:83:0C:D6:F7:9E:04:5C:97:2E:81:4C:AB:5A:E7:BA:3B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.crl

            X509v3 Authority Key Identifier:
                keyid:33:D1:19:34:A5:EC:21:4F:88:CD:4C:02:55:98:5E:76:A5:1E:92:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:aa:17:39:0c:05:bc:6c:e6:a6:ae:95:e7:e0:e5:1e:1c:59:
         83:e3:be:38:e3:01:02:77:46:8a:63:14:76:d4:a4:a7:e4:b5:
         a5:e5:07:95:f3:d1:8a:f7:78:db:78:7c:8a:e5:58:f2:87:15:
         8a:35:b1:f6:b2:9c:a5:3b:cb:19:76:f5:97:01:e4:c2:85:04:
         31:ad:e1:7e:b1:32:5e:89:84:e6:58:b9:58:eb:f8:88:c4:f3:
         95:c8:0c:91:d6:0e:d6:09:a2:7f:7e:1a:66:52:44:3a:1c:1c:
         29:c7:d1:5d:65:e2:70:c0:7b:28:ec:92:15:a5:64:45:b3:75:
         9f:3c:9f:c6:29:99:e8:6f:aa:f5:a7:ac:90:4b:b8:54:91:c7:
         66:87:27:81:39:78:b6:71:08:b5:42:d0:9e:2f:e1:77:74:7f:
         bf:4d:84:cc:d6:a2:59:a2:d4:ac:6e:7b:4a:8e:ce:25:a3:ca:
         65:ed:a1:b0:c7:85:b6:16:5e:71:a7:aa:aa:31:45:91:af:51:
         12:e1:1f:8f:bc:3b:e1:b9:c5:67:5b:29:e7:37:36:11:d3:f8:
         fb:9c:b0:62:f5:07:39:3c:5f:9f:cc:a9:15:6f:33:bd:a1:a0:
         c0:48:b1:0f:68:09:7c:76:11:15:2e:27:82:f3:74:0e:2b:f9:
         0b:05:77:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:17:45 2025 by rpki-client