Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/3ab7a511-c933-325d-9395-05784e3e04bb.roa
File:                     3ab7a511-c933-325d-9395-05784e3e04bb.roa (raw, json)
Hash identifier:          y2Q+1CLS8Dq+xTXu/BfRYoH/p5HU6bfXDknEGr2Hcbw=
Subject key identifier:   5C:77:E7:A8:12:F3:F3:D7:F8:6F:E5:BC:3C:D7:F4:AA:65:C1:29:25
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584AE89146AD06F0DAABC3A5A600
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/3ab7a511-c933-325d-9395-05784e3e04bb.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     6922
IP address blocks:        198.216.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:46:ad:06:f0:da:ab:c3:a5:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=4395a2e8-ac25-41ca-9b31-a622154ff280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:1a:9c:23:7c:80:f2:a8:bc:34:72:e5:cc:
                    d3:bd:9d:40:3a:87:0a:8c:3a:9b:c7:59:c0:3e:58:
                    be:2e:38:1b:02:1c:6a:b3:9c:c2:31:5b:25:c7:7c:
                    4a:1e:a4:9a:d8:88:e2:69:16:c0:1f:cf:82:0a:47:
                    51:25:98:09:79:ab:04:f4:06:bb:9f:a0:08:21:9a:
                    7f:a2:2b:c9:4f:84:85:16:e7:c0:91:e2:46:06:a3:
                    3f:95:6a:88:8e:a2:29:71:d9:bc:fa:80:4d:17:90:
                    67:d7:19:e9:1c:94:1b:38:ea:29:72:de:fb:3e:83:
                    bc:ec:20:c0:fa:24:95:cb:6c:64:3b:28:7a:7c:5d:
                    fa:61:7c:2f:d6:21:da:6b:70:02:7c:47:c8:d3:6b:
                    ce:b7:74:17:61:44:fd:db:59:cb:ff:ac:87:f9:d2:
                    df:bb:90:6a:28:20:fc:31:1c:7f:8d:dc:ba:78:f1:
                    aa:01:42:39:0a:84:f0:62:97:9a:c0:0e:7b:fb:48:
                    ca:7c:b1:12:03:90:5b:48:59:52:aa:e9:c6:23:03:
                    8e:33:64:be:b5:b7:07:59:2c:72:7a:80:a6:68:cd:
                    08:0c:4c:fa:8c:6a:c2:31:c4:ce:67:ed:79:be:7b:
                    a0:f1:f4:ee:7e:a9:dd:ae:bf:d9:0b:e0:45:20:f1:
                    c3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:77:E7:A8:12:F3:F3:D7:F8:6F:E5:BC:3C:D7:F4:AA:65:C1:29:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/3ab7a511-c933-325d-9395-05784e3e04bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.216.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:65:b5:d3:e7:7f:10:c4:5d:f3:35:e7:58:8b:ed:29:12:bd:
         4c:33:d3:ab:cb:77:f0:27:23:21:9d:3b:d7:d4:61:3e:b1:2c:
         98:34:58:0e:8e:ce:08:ea:3e:de:08:bd:a1:b0:76:ab:4a:11:
         a7:13:0a:0f:70:b3:8d:df:c9:82:44:9e:91:b5:00:8f:3e:36:
         39:56:69:a8:01:8e:96:57:f3:7a:b7:7d:ae:34:e4:ae:03:46:
         ce:da:3f:53:1d:56:6d:1c:74:0d:8c:b7:2b:8c:d3:50:c6:14:
         3d:1e:a2:6e:20:86:50:f7:85:b1:a9:74:14:b3:19:30:68:c4:
         9a:35:9d:58:f1:c3:58:88:67:b0:1c:d3:89:e4:1f:0b:b5:26:
         35:ff:92:7c:a6:05:dd:88:e7:0e:44:a9:27:9a:71:3f:bf:10:
         da:2f:ba:82:85:79:e7:f3:b2:ca:4d:e9:13:ea:15:9c:2c:a7:
         32:da:c5:02:6e:9a:e0:8f:f0:9d:1d:a7:23:8c:34:09:2a:ab:
         d9:a8:ce:26:e9:c1:83:a9:e2:d3:7a:6e:0b:7d:86:eb:99:68:
         75:f9:e7:e7:58:20:22:92:70:b2:ae:cf:14:be:ac:4d:eb:87:
         98:42:34:c8:1b:4b:e7:4e:6d:77:39:df:5b:d5:4a:5c:77:ae:
         f7:e1:c2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:59 2025 by rpki-client