Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/483d1de4-9ec0-336b-a09e-53bda41f9515.roa
File:                     483d1de4-9ec0-336b-a09e-53bda41f9515.roa (raw, json)
Hash identifier:          aNpaotYXPsM+r2bEObD5GhGjVEPmzY3wkKAFBfBKFMo=
Subject key identifier:   04:DD:B2:01:77:90:30:F5:C0:7E:7E:2F:20:28:48:66:10:1B:19:4D
Certificate issuer:       /CN=ca63f656-6be5-42a9-ad64-85773747152a
Certificate serial:       010D0C9F4328584B13D6B189F10F899CD394C480
Authority key identifier: B2:1F:E7:5E:89:C9:76:4C:C7:3B:2A:14:69:29:54:3C:2B:EE:24:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/483d1de4-9ec0-336b-a09e-53bda41f9515.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     14041
IP address blocks:        161.98.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ca63f656-6be5-42a9-ad64-85773747152a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ca63f656-6be5-42a9-ad64-85773747152a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:b1:89:f1:0f:89:9c:d3:94:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca63f656-6be5-42a9-ad64-85773747152a
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=08dbd7e0-159f-47e7-9d13-efc6cd4904cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a1:a4:0a:d7:ee:97:15:d1:c3:3b:ca:46:24:
                    01:3b:31:31:d8:70:9f:25:bf:f0:be:db:40:d7:28:
                    6d:10:c0:0f:81:a3:41:15:59:ca:4d:f0:4c:d4:d7:
                    80:17:29:19:62:b3:16:73:f5:d0:2b:02:17:48:92:
                    11:08:8d:64:5d:b6:47:b5:e1:16:7d:6a:26:d3:50:
                    ee:02:3d:0e:ef:ef:84:e4:78:51:76:ec:b5:dc:ed:
                    f8:69:9f:31:96:06:71:0a:29:b9:17:bc:e8:c7:f7:
                    73:e9:b6:94:bf:b9:aa:c9:cc:86:be:da:a0:95:62:
                    d3:b3:f1:24:38:33:1b:df:8f:76:18:00:2f:62:f0:
                    3b:7b:74:cc:81:c0:fe:20:10:68:d9:36:ad:62:d8:
                    ba:cf:03:7c:fa:f5:5f:a7:6e:5b:70:29:7a:6c:c9:
                    8f:fb:e3:9c:99:c9:c9:77:9a:b1:52:70:b8:92:6b:
                    a3:f1:ae:e7:db:57:45:40:89:c4:d4:a1:91:ab:28:
                    ab:f3:18:9d:cc:e5:3a:fc:5a:8b:d1:f0:84:65:d5:
                    60:ce:aa:b5:db:39:cb:c6:f6:c6:89:99:75:c3:2c:
                    cd:e0:eb:ea:82:1f:1a:69:28:0c:a1:f4:36:58:70:
                    1e:21:ee:1a:b7:d6:a6:4a:41:16:3b:3a:23:55:aa:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DD:B2:01:77:90:30:F5:C0:7E:7E:2F:20:28:48:66:10:1B:19:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/483d1de4-9ec0-336b-a09e-53bda41f9515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ca63f656-6be5-42a9-ad64-85773747152a.crl

            X509v3 Authority Key Identifier:
                keyid:B2:1F:E7:5E:89:C9:76:4C:C7:3B:2A:14:69:29:54:3C:2B:EE:24:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.98.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:20:02:2e:a4:7c:bf:a0:49:58:7e:48:27:3d:db:a8:f7:82:
         0f:ed:d6:a5:e1:6d:20:42:d3:32:95:f9:0a:8b:f8:fc:dd:97:
         86:95:99:6e:3e:d9:12:ee:71:19:ff:07:ba:bb:87:78:67:77:
         9a:3b:48:04:53:e7:26:f1:c4:77:6f:f6:90:90:b1:a9:92:61:
         74:ad:a8:90:bb:b7:15:b0:8c:8a:b3:50:a7:e3:19:bc:a8:da:
         be:66:2e:26:0f:17:e1:69:59:db:30:29:78:94:68:fe:51:c2:
         e2:88:b2:4d:b5:a3:b5:e8:c0:e9:84:20:a3:a5:2e:ad:1f:86:
         da:72:5f:fb:8f:e6:ba:25:0c:5a:bb:fc:1f:39:0a:8e:58:84:
         29:52:25:96:48:48:6a:35:ca:9b:a0:79:1f:b7:6b:4f:40:5c:
         a8:bf:98:d8:42:ac:d5:4a:09:9f:fa:05:39:d7:e9:5c:56:79:
         be:71:1d:38:48:e3:3e:f8:3c:5a:74:de:8c:79:50:e5:d3:52:
         9c:79:59:f4:73:17:3b:73:f8:90:0b:22:1c:0f:4f:0e:84:7f:
         c9:a8:cd:0b:7d:8a:5b:7b:e8:d9:7e:64:06:1b:da:16:96:bc:
         1b:bb:c8:a7:e0:c0:0f:c7:1c:d3:cc:7d:cb:17:48:e1:38:98:
         4b:95:86:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:59:27 2025 by rpki-client