Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a972efe2-b857-3fbf-a105-b0c8be4f992a.roa
File:                     a972efe2-b857-3fbf-a105-b0c8be4f992a.roa (raw, json)
Hash identifier:          XSp81Qv2GzcOUNWAUwchA9vE1WIZQwdvcPiaPEBBiWg=
Subject key identifier:   CA:C3:13:88:3E:A9:AB:4D:40:5D:88:22:CA:33:DB:A4:97:7C:9D:36
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F4328584AAB264D5604C275CD8277BC40
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a972efe2-b857-3fbf-a105-b0c8be4f992a.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        198.176.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4d:56:04:c2:75:cd:82:77:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=c9b7875d-3083-42cf-b40b-a88d98c6fe26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:16:a6:fd:8c:3f:98:9e:5a:6f:cf:a3:70:
                    88:20:f0:96:c8:72:84:15:38:47:75:4c:cf:a1:3b:
                    a5:85:21:a4:d6:7c:af:16:51:11:94:e2:4b:9c:1c:
                    da:78:9a:37:ba:f9:fd:76:95:e7:88:9d:ae:74:7a:
                    a4:c4:0f:11:8c:79:11:60:52:70:b0:ca:81:c8:d4:
                    c0:4f:b4:00:93:bd:8f:a2:b2:ba:4c:56:52:85:67:
                    6d:6e:7b:73:04:5f:d9:9b:01:06:e3:7f:70:30:e3:
                    ea:79:f4:c2:d2:5e:3e:19:70:d2:71:19:12:06:e0:
                    57:5b:9f:76:05:29:71:55:d2:10:2c:be:be:fc:54:
                    79:2b:d9:30:bc:1e:b6:1f:82:8a:97:1e:52:0e:ad:
                    ea:22:fb:cf:5d:5a:0d:08:d2:22:2a:79:7d:48:e3:
                    c6:95:b6:ff:e8:36:a8:73:c0:b1:8d:75:6e:f2:32:
                    28:23:a9:96:1d:42:3d:30:5b:76:66:d3:ae:f8:23:
                    00:97:cd:b3:08:d6:85:c6:dc:a4:a8:38:d2:8e:37:
                    97:a9:0e:0c:c7:3b:78:a4:2a:3c:9c:8a:77:bd:ad:
                    7e:88:c0:2f:44:0a:b2:71:a3:f5:62:78:df:d4:58:
                    69:39:88:0e:e3:74:d9:60:dc:3a:46:af:3a:32:97:
                    f0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C3:13:88:3E:A9:AB:4D:40:5D:88:22:CA:33:DB:A4:97:7C:9D:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a972efe2-b857-3fbf-a105-b0c8be4f992a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:68:be:b2:69:60:cc:85:18:91:d8:da:bd:ff:73:ac:1d:e7:
         b8:89:6f:0b:8c:14:69:84:a4:2d:2e:ad:37:e2:e2:e2:61:b2:
         a6:10:6f:14:06:90:c7:2d:3a:3f:75:0e:8a:11:f0:d3:34:80:
         32:fd:3d:15:e4:15:ea:68:af:55:6f:94:fe:74:dd:13:14:07:
         df:02:9f:0f:c4:05:e6:df:22:68:16:1d:7b:2e:aa:fe:70:05:
         75:26:e6:f1:f5:cb:80:32:88:00:dd:45:15:fb:32:bf:df:e0:
         a3:4a:0e:1e:4b:59:42:e9:ae:9c:a4:9c:08:01:ba:54:ae:e3:
         e5:c3:88:21:56:1a:d4:29:7b:26:71:4c:17:e1:2d:92:9b:b4:
         4f:86:b5:aa:ac:ad:c8:50:f9:3c:de:6d:6d:b6:b6:c1:ce:3e:
         56:92:10:9b:5c:08:44:46:c7:d6:fc:9a:25:de:63:ed:ba:e8:
         b1:3c:bf:cb:6c:a5:6a:42:f6:40:5d:67:0a:4e:ca:c6:73:7d:
         ff:32:dc:f9:b7:ad:f5:ca:39:dd:9c:27:3e:8b:46:65:30:33:
         31:9d:09:c1:38:a0:d1:5e:10:c3:8c:d3:78:29:27:c5:f2:45:
         e6:41:d1:42:8e:70:4b:9e:48:a6:55:8e:10:3a:c0:53:9d:e3:
         5f:7e:c6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:29:39 2025 by rpki-client