Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/d48b2242-81f9-3a3a-991e-916b495f2ca3.roa
File:                     d48b2242-81f9-3a3a-991e-916b495f2ca3.roa (raw, json)
Hash identifier:          RqXgMwcPl63EJ9/PDN2iOsgueYqfvZ7Eb80V2W1F5XQ=
Subject key identifier:   91:E5:FF:C3:95:AD:8F:F7:54:84:22:AB:35:4F:23:56:F8:7A:3A:87
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584A911849F1ECD83940CFEF0440
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/d48b2242-81f9-3a3a-991e-916b495f2ca3.roa
Signing time:             Sat 19 Jul 2025 05:01:55 +0000
ROA not before:           Sat 19 Jul 2025 05:01:55 +0000
ROA not after:            Fri 17 Oct 2025 05:01:55 +0000
asID:                     6922
IP address blocks:        198.215.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:91:18:49:f1:ec:d8:39:40:cf:ef:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jul 19 05:01:55 2025 GMT
            Not After : Oct 17 05:01:55 2025 GMT
        Subject: CN=36ec655f-9a3b-4a7d-b9b0-1ea418e72ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2f:15:65:7e:52:de:e9:4c:0d:bb:0c:d4:4a:
                    33:c0:46:26:78:5a:c8:4d:6b:58:95:6c:35:0f:f4:
                    6a:11:83:7d:4f:0d:44:de:af:5f:90:80:99:0d:47:
                    ac:ad:01:5b:21:5a:64:2a:0f:02:d9:da:3c:39:40:
                    8a:e3:37:78:ec:7c:c9:97:74:d4:06:83:39:02:9a:
                    5b:51:be:30:4d:71:d2:8e:18:86:d6:10:63:7c:78:
                    d3:90:b1:7f:dd:78:6d:af:e2:83:66:0f:23:8a:8c:
                    bf:f2:41:3b:01:5e:05:6b:fb:57:5a:3a:a6:09:0c:
                    6f:f5:87:38:5a:ca:97:04:84:04:3b:86:ab:91:29:
                    67:b1:4d:37:ff:50:7d:c1:1a:60:26:bc:60:67:50:
                    11:a6:94:f0:f9:bd:70:76:7b:5f:75:a8:2f:82:c8:
                    8f:4e:98:0b:b3:c5:aa:6c:2f:64:23:5c:ce:b8:d1:
                    50:47:38:64:95:4f:af:c0:ba:fa:11:8a:5b:0d:3d:
                    78:0f:46:24:7e:ab:50:ec:f4:b3:c1:06:28:32:40:
                    af:6f:b0:75:d6:91:a1:ea:bb:ed:da:49:64:42:3d:
                    f1:27:2c:01:c0:ac:b2:29:2b:df:ac:7e:56:06:5e:
                    3b:fb:85:64:d4:c7:6c:9c:cc:8c:40:7c:12:de:f9:
                    df:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E5:FF:C3:95:AD:8F:F7:54:84:22:AB:35:4F:23:56:F8:7A:3A:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/d48b2242-81f9-3a3a-991e-916b495f2ca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.215.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e3:51:4c:24:0d:22:aa:f4:c0:a8:92:20:3a:6b:79:2e:f3:
         8d:94:7b:a0:5b:7a:92:a3:7c:84:e1:aa:52:61:fc:0a:67:bc:
         2c:2f:8f:9f:79:87:8c:84:22:c7:0d:d8:8a:9b:43:82:7f:ba:
         bb:2a:8d:d8:a2:e2:45:6d:df:7d:d0:70:1b:ab:d0:2c:09:00:
         04:24:33:ea:bb:f6:08:9f:27:7f:02:22:ae:4b:64:6a:59:e4:
         0d:82:97:a2:c9:89:c3:bd:6c:e7:fd:79:65:ac:dd:94:c8:62:
         bc:1c:d4:bb:46:8e:9a:b1:99:8b:30:06:39:2c:a0:84:7a:af:
         11:11:4b:19:0d:b3:f2:f3:23:af:b4:4d:ae:cd:19:33:e9:ce:
         aa:e0:a8:33:74:dc:1b:7b:c6:62:43:62:c9:5e:4a:39:9e:b7:
         6f:f0:58:b9:2c:f4:65:f4:f7:62:69:2e:f9:c6:2a:11:24:01:
         0b:bb:d4:ec:ce:ed:6f:42:90:47:6c:23:0b:b4:63:37:53:7e:
         86:1b:b2:88:ac:15:18:61:93:26:ee:b6:5d:c4:11:df:97:da:
         b0:37:b6:09:2f:97:5e:a0:05:b0:5d:04:f2:74:70:9f:2c:83:
         8e:19:67:2a:21:7d:c7:2b:c5:9b:9d:bc:bd:00:4b:9e:bc:70:
         cf:34:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:35:24 2025 by rpki-client