Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/03400bd5-2782-35aa-a69a-f1860f40b530.roa
File:                     03400bd5-2782-35aa-a69a-f1860f40b530.roa (raw, json)
Hash identifier:          g3tnKu8rjfcYMTaeq1ngEY5Ki2QEI8wf0VtEUrRokjs=
Subject key identifier:   BC:DD:72:3A:31:32:89:58:FC:3F:C5:94:0C:00:F0:B9:5F:58:CC:E0
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584A9B3EC1B36B24A0455207ABC0
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/03400bd5-2782-35aa-a69a-f1860f40b530.roa
Signing time:             Tue 22 Jul 2025 20:17:30 +0000
ROA not before:           Tue 22 Jul 2025 20:17:30 +0000
ROA not after:            Mon 20 Oct 2025 20:17:30 +0000
asID:                     14956
IP address blocks:        144.172.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:3e:c1:b3:6b:24:a0:45:52:07:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul 22 20:17:30 2025 GMT
            Not After : Oct 20 20:17:30 2025 GMT
        Subject: CN=88cb6d03-2216-4952-bd37-1a02f6179cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4b:2e:17:34:e9:67:56:e0:58:e9:6b:cc:47:
                    df:bf:41:d3:40:0c:5d:4e:89:cd:b7:38:24:35:91:
                    74:0c:a7:2c:84:1c:f5:4a:3b:8a:74:dc:29:72:d2:
                    78:5a:dd:d8:4c:e0:8e:43:4c:c8:fd:86:14:2a:ea:
                    18:3e:51:76:88:e5:41:b0:d8:ee:21:be:ed:d6:56:
                    3b:cd:a4:2b:98:a6:89:aa:14:40:7e:17:df:5d:05:
                    4d:1c:c8:7d:3d:34:59:b4:1a:64:98:1c:e1:28:01:
                    01:f2:4e:7e:0d:ba:14:a8:f7:26:48:6d:33:26:eb:
                    d9:98:78:c7:36:df:49:2a:c9:15:33:41:41:d6:0e:
                    e6:5f:f1:13:d9:7f:20:c3:81:cc:f7:ad:d2:dd:bf:
                    e3:be:a5:53:bd:3e:17:fa:ab:50:e5:e5:eb:7e:c7:
                    02:db:3c:32:2c:eb:c7:96:bf:67:1c:ba:aa:a6:63:
                    35:30:db:56:b1:3d:05:11:26:40:89:49:95:06:7d:
                    8f:10:dc:6c:a2:fe:34:d7:10:dc:d4:db:1d:22:55:
                    cd:9d:0e:53:19:fb:aa:07:a7:b7:0c:4b:05:36:0d:
                    12:1e:2c:e6:7a:80:ad:f6:8b:30:6b:7f:61:47:b9:
                    33:20:c7:46:95:ec:91:8d:41:7b:90:97:6f:85:38:
                    1b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DD:72:3A:31:32:89:58:FC:3F:C5:94:0C:00:F0:B9:5F:58:CC:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/03400bd5-2782-35aa-a69a-f1860f40b530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:36:db:5b:f4:00:8c:56:d2:49:b4:b1:36:dd:d2:b2:a9:fb:
         88:b5:88:5d:82:a4:95:2c:61:7a:63:2e:85:d6:bc:4c:b3:a2:
         4e:ab:70:f4:bc:88:7c:72:00:96:0b:1f:c0:98:74:0c:2e:d4:
         f9:89:a1:aa:25:20:d9:28:b5:29:f4:e4:34:5e:13:60:4d:fb:
         3c:58:48:87:7e:eb:c0:7a:62:34:a0:35:a8:e5:3b:94:6d:93:
         1b:9b:d6:4a:fd:4d:3c:6d:18:96:15:df:0f:02:a0:de:a3:85:
         75:53:b4:ea:a5:34:8d:78:6f:2f:2a:59:07:6c:5d:93:b3:dc:
         19:c5:66:53:38:cc:10:21:2d:fc:24:12:0b:4e:c2:6c:5c:04:
         17:e2:7e:9c:66:fa:42:49:33:05:81:1b:18:20:89:03:ea:81:
         a2:1e:6e:95:c3:ba:1f:9c:ba:f9:68:11:3d:cd:cd:d7:0f:5e:
         10:35:a1:6e:f6:d9:c8:5a:7e:91:43:6c:31:cd:40:1b:f4:eb:
         2b:d4:a2:12:58:21:70:a8:49:e8:c8:7f:56:0e:7f:f8:69:e5:
         1a:25:af:6a:12:71:00:85:30:d6:30:96:cb:60:60:80:71:dc:
         6e:02:6d:42:9a:a8:83:d5:92:0d:92:16:23:74:ff:f0:a8:c3:
         c4:b4:8d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:00 2025 by rpki-client