Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/4748e949-c2fb-3b07-a310-c7d6a2767edf.roa
File:                     4748e949-c2fb-3b07-a310-c7d6a2767edf.roa (raw, json)
Hash identifier:          DH7Ataldqgdcoqjhy6B26xzGdlrXPBgqcBeopQY76po=
Subject key identifier:   06:8F:C2:E7:36:DB:B0:BE:A1:6E:5E:16:0D:29:F0:06:E0:1E:E1:62
Certificate issuer:       /CN=ab96de43-19ee-48ac-8a2f-acd9ed1caffc
Certificate serial:       010D0C9F4328584A3B7AF5A672CA50C9F94EA180
Authority key identifier: 3B:CF:83:75:19:2E:01:83:B3:A0:FD:24:21:90:21:F1:62:C7:68:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/4748e949-c2fb-3b07-a310-c7d6a2767edf.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     395101
IP address blocks:        199.175.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f5:a6:72:ca:50:c9:f9:4e:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab96de43-19ee-48ac-8a2f-acd9ed1caffc
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=ae7392a7-1114-4987-9f82-9281011f604c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a0:14:87:59:30:4d:9d:b4:17:f8:20:18:77:
                    28:9b:c1:5d:b3:59:de:b5:11:7d:08:34:84:ab:60:
                    ff:21:22:91:69:73:c1:cd:11:87:7a:df:a1:08:fb:
                    99:c3:54:7e:48:5b:56:18:14:b5:ad:f5:1d:d9:2e:
                    f3:2f:71:ea:15:0f:38:92:03:26:8e:ce:a8:a6:ba:
                    a6:08:7f:f0:2f:2f:35:85:4a:b8:97:5e:9f:96:05:
                    25:45:15:2d:b9:bd:e8:f1:d0:15:56:06:e3:b1:ec:
                    b1:03:e6:01:51:5d:e2:e4:ce:59:94:c1:15:e8:90:
                    7f:73:ab:ae:93:3e:1c:ba:fd:7d:5e:cb:86:0a:fa:
                    90:32:32:55:27:26:53:50:d0:6e:fb:5f:39:ca:54:
                    85:98:22:a5:56:49:e6:34:3e:12:8d:de:85:ed:78:
                    b9:a1:24:0b:07:d9:57:44:8d:40:1b:b7:fc:37:e8:
                    13:f2:e5:05:dd:bf:cc:d1:69:e6:c0:00:ad:2d:93:
                    71:23:c9:97:7e:8a:2d:4f:7e:40:08:7f:39:ed:65:
                    05:ef:df:90:63:f2:d2:01:25:38:7a:fd:f8:0a:e4:
                    f7:a8:23:c3:48:75:a4:ce:54:dd:77:26:2f:03:e9:
                    7c:ae:38:b4:1d:68:b6:f9:fd:de:98:32:de:d4:da:
                    3a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8F:C2:E7:36:DB:B0:BE:A1:6E:5E:16:0D:29:F0:06:E0:1E:E1:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/4748e949-c2fb-3b07-a310-c7d6a2767edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.crl

            X509v3 Authority Key Identifier:
                keyid:3B:CF:83:75:19:2E:01:83:B3:A0:FD:24:21:90:21:F1:62:C7:68:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:12:b7:12:8e:47:93:13:ec:5f:06:ee:85:98:f7:3a:4c:7e:
         11:ff:dc:1b:7f:39:b5:b5:3e:c9:c6:39:32:cc:07:b2:39:9e:
         d1:04:f6:a3:ba:32:10:f7:d1:8f:73:53:42:ec:19:35:d5:9c:
         8c:fe:bf:73:36:30:85:ba:1f:37:49:c7:97:cd:52:c4:b3:a4:
         4a:64:ff:a1:a5:25:8b:bd:30:09:dd:e7:ca:d3:f0:c2:10:f2:
         d1:54:90:40:e8:e4:6d:d7:90:19:04:f0:ee:dd:6f:07:bf:d6:
         77:e5:cc:cd:84:ed:26:e0:22:ca:ff:7d:f8:34:bc:c9:d7:e9:
         a8:61:a2:1e:2e:96:b9:3f:31:c2:63:98:0f:9c:40:b5:62:d3:
         05:5f:6d:c4:d2:59:a1:87:ab:34:39:80:fe:5d:7d:0a:b3:55:
         e3:66:c8:04:c5:bd:39:24:37:d4:8a:26:5f:3b:78:f6:ef:45:
         57:7b:f2:27:21:fa:92:98:23:97:3e:35:a9:dc:81:f0:76:46:
         25:d7:5b:e3:90:b0:b6:94:aa:1f:c7:c6:c1:81:5f:47:68:b9:
         8f:ea:b0:c0:8f:6c:cc:3a:3e:50:b1:cc:f0:c4:b2:6d:4c:98:
         2d:b0:62:e4:74:11:ad:25:48:75:9e:61:9c:8b:65:0e:da:9c:
         08:b9:ca:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:26:45 2025 by rpki-client