Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa
File:                     9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa (raw, json)
Hash identifier:          ZkuTIos+knX+/OPh0cN7+bcatB3dAm2mNzeRlwEVtKw=
Subject key identifier:   F3:93:9C:20:A7:3C:F1:99:87:4F:5E:A6:9F:C9:92:C8:55:34:9E:9F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584ADD668C1BD8722DD8427EC800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     7029
IP address blocks:        98.18.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:8c:1b:d8:72:2d:d8:42:7e:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=15553632-00bd-4545-aa51-2f03fa3877f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dc:d9:fe:93:34:3a:e5:50:37:58:86:11:ed:
                    21:e5:9d:01:eb:39:c3:8f:40:d1:00:64:c5:aa:cf:
                    ea:a2:3a:b7:84:01:57:0f:70:27:9d:ec:71:78:fb:
                    79:76:69:b6:ab:9f:19:be:4d:41:62:e0:44:75:dc:
                    25:8f:76:b5:08:b9:fd:a7:6c:eb:56:7c:a3:56:bf:
                    4b:e1:2e:13:70:c3:c7:13:e5:2f:4f:4d:e8:7f:bd:
                    ba:a2:d2:ef:19:45:a4:a4:55:d8:00:6f:b9:c3:cb:
                    e6:b0:f8:20:6e:af:bf:7c:a6:1f:0d:2a:0c:48:b6:
                    ee:f0:f0:48:29:32:1f:55:4f:ed:2a:ea:37:ea:f8:
                    3b:22:08:4f:91:5d:5a:6f:a6:4a:7d:ea:83:cb:f1:
                    27:6a:a4:d0:72:b2:cb:44:44:2f:9f:26:ff:45:df:
                    d6:6b:e9:7e:70:ff:6a:c0:8f:c5:33:9e:98:6c:bd:
                    10:83:f8:78:ec:d8:63:1c:c5:45:71:f9:ca:99:4b:
                    9c:3a:ae:75:0a:3f:94:e9:28:f3:4d:61:35:e2:a6:
                    45:1b:3e:f3:c4:67:bc:d6:0e:d1:d2:ca:b2:78:d3:
                    97:46:a9:25:f6:df:e4:22:48:6a:f1:0e:da:fe:2e:
                    3e:e0:fa:09:15:75:6f:66:e4:bb:aa:54:10:7f:bb:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:93:9C:20:A7:3C:F1:99:87:4F:5E:A6:9F:C9:92:C8:55:34:9E:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.18.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:19:eb:71:f2:57:c2:42:66:86:0d:9a:8b:a3:cd:c3:06:a6:
         34:24:5b:c0:a2:3e:db:b6:8f:25:02:5e:51:48:e0:e7:ca:03:
         33:8b:a7:8d:21:0b:6a:27:ff:0f:b2:92:78:ad:d2:70:69:8a:
         3a:65:c6:d7:c3:92:86:0f:be:24:62:a2:60:db:65:2c:be:65:
         8e:ea:b7:41:98:e1:bb:f3:c7:ba:57:04:ed:f1:be:9c:2e:30:
         2d:a4:39:c2:6b:4d:88:a8:5a:d1:4b:b2:9e:d0:81:f9:d8:29:
         12:f1:db:37:cf:d9:b4:c9:4f:68:e3:1b:e7:91:57:b1:f4:85:
         35:07:1d:40:ba:6c:dc:28:12:1f:85:52:49:23:41:d5:b5:47:
         57:c4:e3:d5:63:49:d2:87:ec:6f:1b:89:23:de:bc:31:d6:0c:
         67:a9:c9:4a:ed:fe:45:0d:34:08:f1:61:6d:a4:ad:84:51:f4:
         92:7a:ac:85:83:dd:b6:47:4a:48:b5:24:ef:ad:91:84:53:8f:
         c9:d2:87:94:db:c7:d2:07:63:ef:47:83:d7:23:f0:27:31:62:
         a2:9a:93:95:87:0d:8a:82:94:48:af:2f:cb:7e:9e:f9:d7:58:
         b1:f5:ab:4a:d3:02:f7:c9:6e:ee:31:c4:02:e9:a5:93:ae:4d:
         0f:6c:43:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:58:11 2025 by rpki-client