Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/20b12159-fae1-324b-856e-4ffaaa0299f4.roa
File:                     20b12159-fae1-324b-856e-4ffaaa0299f4.roa (raw, json)
Hash identifier:          9V11kKFQsdP54zlf3uZlzol7ZPju2PrNuuh1lVV0gMg=
Subject key identifier:   8D:41:7F:37:64:4F:F0:9A:F7:95:E8:D7:8A:55:4C:7F:4E:35:F9:FB
Certificate issuer:       /CN=12a9b198-d23d-4f41-8397-cc467b398bc3
Certificate serial:       010D0C9F4328584ACE0BAEEBD3C802DD9F5A15A0
Authority key identifier: 72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/20b12159-fae1-324b-856e-4ffaaa0299f4.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     16796
IP address blocks:        198.163.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:ae:eb:d3:c8:02:dd:9f:5a:15:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12a9b198-d23d-4f41-8397-cc467b398bc3
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=3c5a8fa3-5739-476c-9116-9bf14b4ecad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:7d:51:01:a0:0b:4d:5e:aa:03:0b:91:59:
                    f7:d2:aa:09:95:fd:dd:09:76:5f:67:d3:4d:90:6f:
                    16:37:00:f5:19:2d:db:e4:0c:31:4d:2d:34:96:cf:
                    1b:b8:b3:dd:42:d4:19:96:ba:61:cd:9e:8d:66:6a:
                    8a:4f:7c:84:07:1b:99:fc:57:61:d7:7d:8c:3c:4a:
                    4b:f2:af:71:f1:b1:39:d8:68:15:01:af:4d:5c:a6:
                    a5:84:3a:8e:bf:f3:dd:3b:d1:67:21:a5:21:1b:15:
                    5a:6d:72:9f:07:5f:46:a4:58:73:1d:4a:82:4c:4c:
                    50:e5:d7:76:b3:25:88:e6:62:fd:e6:dd:e7:7b:51:
                    d6:9b:bd:14:25:0e:ba:92:b3:cd:a6:45:2b:7e:d9:
                    03:e4:3b:7a:3e:b7:f9:3a:00:d0:3a:d7:c8:77:c2:
                    f9:35:26:08:39:7e:40:a2:bd:ce:9a:0b:cf:b9:d9:
                    75:51:f8:fc:b1:41:6e:82:d0:40:d8:00:cc:76:02:
                    08:18:1c:d7:75:11:2f:76:de:7a:29:0b:ec:fc:e6:
                    a4:3a:26:2a:e0:42:ef:08:2a:26:fc:5b:78:03:16:
                    ad:02:2a:41:e7:9d:19:0d:86:5b:f4:13:8a:07:65:
                    15:69:89:4a:ad:4a:55:5e:78:a9:0a:b3:27:f4:f3:
                    7a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:41:7F:37:64:4F:F0:9A:F7:95:E8:D7:8A:55:4C:7F:4E:35:F9:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/20b12159-fae1-324b-856e-4ffaaa0299f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl

            X509v3 Authority Key Identifier:
                keyid:72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.163.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:51:46:b5:71:0d:e5:95:f4:22:f2:af:14:c0:dd:d1:5a:b1:
         31:13:1a:b3:93:9d:29:ef:38:f6:d2:c2:77:40:73:eb:23:60:
         27:73:4a:bf:25:9e:e7:8d:f2:2e:4c:6f:8c:61:66:19:d0:fc:
         d5:08:0b:d2:66:c3:c1:f9:b7:19:0e:59:ef:04:91:67:ce:58:
         c2:26:3b:cf:d0:f0:44:e9:d2:01:b1:60:13:84:3c:f6:82:bc:
         28:0e:f1:c3:8b:b3:56:f0:7e:b8:47:c1:1f:38:20:72:89:f0:
         0e:40:f3:25:f1:06:fc:d7:5b:9f:f2:dd:05:8a:ac:c2:e1:dd:
         53:af:19:78:4a:70:2c:e6:58:b8:ef:79:0b:a8:31:ef:1d:cb:
         dc:c9:17:f1:df:42:77:42:27:2b:86:f3:fe:5a:dd:1f:48:d2:
         4d:4b:ce:2c:6b:13:98:a9:0d:82:42:1b:97:39:27:e1:84:54:
         d5:8b:b8:f9:ec:41:92:2e:13:b4:61:c6:b5:7e:90:c0:7b:37:
         53:17:86:f4:52:1f:1f:c7:10:9e:2c:ab:e1:05:f0:4a:0f:93:
         e7:48:36:b9:71:63:60:08:51:c8:eb:0f:42:00:2a:a7:19:ae:
         99:16:63:15:06:0b:f0:a3:a6:29:f1:3b:47:b1:83:96:06:71:
         ce:e3:c9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:35:56 2025 by rpki-client