Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa
File:                     7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa (raw, json)
Hash identifier:          rZydPgmdemTIlxDefw3Hmr+y/nWXdnsDo0SPtlR3jOI=
Subject key identifier:   26:F7:E2:70:F5:23:39:36:C5:5D:2F:35:39:EE:5B:CB:BA:7A:53:CD
Certificate issuer:       /CN=69e23836-98b5-4802-9778-a96a5ee3eac3
Certificate serial:       010D0C9F4328584A23C00AF1797A7C6345DC6160
Authority key identifier: F7:F4:4E:36:F2:8E:E6:3B:90:99:EE:39:FC:A9:72:F5:D6:4E:E4:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     8075
IP address blocks:        198.47.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:0a:f1:79:7a:7c:63:45:dc:61:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e23836-98b5-4802-9778-a96a5ee3eac3
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=ed30c22b-f6dc-48a9-9056-c4a67e778ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:54:dd:ca:cd:0f:4e:86:3a:09:8f:91:f4:
                    97:17:14:e5:cd:f7:be:32:e4:dd:b1:09:26:e4:23:
                    b9:92:e6:6f:7b:5b:cb:b1:cf:f5:f1:34:93:6e:e5:
                    23:c3:d6:56:58:2f:d5:41:b4:01:1b:52:24:be:83:
                    c6:ae:2e:e8:5f:8e:6a:c2:78:fe:fc:13:45:1e:fe:
                    3b:1a:62:73:4c:9c:9c:a5:5e:69:37:7c:c1:e8:12:
                    db:c5:7c:b2:2a:bd:b0:b6:b5:a0:ab:3e:65:62:40:
                    d3:2d:29:dd:09:37:18:b5:ed:a2:18:56:83:fe:5f:
                    ba:e7:d1:f3:0f:4d:1e:56:66:db:2d:d4:ee:cc:76:
                    37:9d:58:e7:54:50:af:c5:ec:db:74:6a:42:c2:ed:
                    ab:1c:6e:fd:e9:87:15:09:fa:7a:48:b0:d2:ca:60:
                    52:b9:93:f2:6f:b9:13:70:0b:a3:e0:c1:d9:4f:6a:
                    41:e3:31:54:66:6d:7f:be:f5:1e:1d:3f:12:bc:09:
                    3a:e7:83:c2:fe:d0:c2:9a:61:74:63:4c:0d:89:8a:
                    ae:9b:92:1b:a6:d5:c2:c7:87:62:f8:14:e0:49:56:
                    af:cd:95:37:8b:88:57:4c:0f:dd:5a:a7:06:60:0f:
                    36:86:fa:8f:d8:7a:82:57:b3:04:f0:af:0d:14:24:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F7:E2:70:F5:23:39:36:C5:5D:2F:35:39:EE:5B:CB:BA:7A:53:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.crl

            X509v3 Authority Key Identifier:
                keyid:F7:F4:4E:36:F2:8E:E6:3B:90:99:EE:39:FC:A9:72:F5:D6:4E:E4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.47.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:3f:4b:eb:02:34:f8:72:08:58:c2:ac:f6:f2:51:fc:83:85:
         83:48:fb:86:a8:47:b8:f1:2d:00:e8:f9:72:28:dd:1c:0f:59:
         4a:c8:c7:31:da:21:77:20:b8:23:46:22:ac:b4:66:d3:34:2a:
         ee:99:0a:98:4f:11:3d:78:18:9b:e2:fd:a2:f6:84:42:51:b4:
         1c:eb:f7:89:ad:3a:4d:88:36:73:2a:88:49:58:7f:d3:03:fc:
         4f:ff:a3:8a:dd:fc:d8:9f:4b:70:39:4f:55:2d:03:03:3d:76:
         72:1e:2f:38:d9:dc:88:e5:ca:56:09:c1:e5:0d:19:fb:ea:27:
         89:1c:89:3c:4c:07:ec:7f:3a:76:f1:6d:bf:7e:15:18:f5:67:
         cd:ac:4f:41:9e:70:ce:3a:64:2f:db:1d:d1:8a:97:58:ac:64:
         61:ef:95:da:53:d0:3a:f1:ab:26:f5:a9:52:ca:5d:e1:4a:51:
         fa:5f:33:de:bc:82:70:6f:78:47:c6:3a:24:94:99:2c:ff:03:
         be:77:53:fb:dc:94:ef:c0:70:1e:6c:88:6b:18:67:1f:50:01:
         73:cd:b6:1f:b5:cb:d7:05:58:f9:e9:ab:3e:a3:29:3a:f6:85:
         d8:66:65:47:de:64:bc:2f:19:3f:0a:d8:08:94:2f:93:0c:26:
         cb:c8:89:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:46:27 2025 by rpki-client