Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa
File:                     d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa (raw, json)
Hash identifier:          qkuLCVden6MW8QBsEewGo4ZzAnQIjfxoyAkDLLnPaxs=
Subject key identifier:   3B:E8:D1:9E:40:F2:C5:7F:A4:36:DB:89:5F:1C:E1:E4:63:79:59:30
Certificate issuer:       /CN=6719c5f2-5819-4972-b430-9d76eb88cb36
Certificate serial:       010D0C9F4328584B4BAC5DF2C20AAA24CFB21B80
Authority key identifier: D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     397735
IP address blocks:        198.175.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:5d:f2:c2:0a:aa:24:cf:b2:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6719c5f2-5819-4972-b430-9d76eb88cb36
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=434ee362-9937-46a3-a2f2-a004b9927ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:52:8f:20:f5:b1:eb:9c:72:21:2e:e3:ec:4a:
                    b8:34:ec:8d:6e:8a:36:f2:79:cb:f4:b7:40:2f:3f:
                    ed:e1:59:15:d3:1f:97:83:46:c6:56:c7:12:2d:c6:
                    6e:e8:b0:e7:60:6d:4f:46:23:2a:75:55:00:ad:be:
                    ca:11:13:a7:52:f6:4c:7d:40:bc:0a:19:ff:7e:a1:
                    c6:0b:fe:b4:4d:39:cf:03:48:4f:94:38:f8:bf:8e:
                    89:6b:48:f6:e3:3e:c2:78:b7:02:24:52:50:51:c2:
                    f0:5c:34:e9:34:18:eb:45:6d:18:d6:ef:11:28:1e:
                    f6:8c:f8:12:c6:e6:df:54:e2:d4:f0:ff:cd:17:10:
                    18:79:88:7f:83:82:ed:6c:0f:56:5f:75:29:52:96:
                    ba:b6:45:6a:a9:1b:db:40:33:56:ec:1a:b6:e4:c6:
                    2e:47:1f:e9:f3:2a:4f:51:d8:d1:0f:ac:fe:7c:23:
                    2e:13:ec:03:03:77:1f:27:38:85:5b:f7:3c:ab:29:
                    e2:07:a1:42:15:c6:71:07:2b:53:d7:7c:94:4a:c8:
                    76:78:31:ae:1d:0e:75:5d:f4:72:36:46:ea:45:f3:
                    24:06:54:7f:4e:aa:3b:18:26:ea:4c:32:d0:df:7c:
                    15:4c:54:5a:ac:9d:18:fe:69:38:44:1d:f8:9f:e7:
                    d9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E8:D1:9E:40:F2:C5:7F:A4:36:DB:89:5F:1C:E1:E4:63:79:59:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/d0d0cc2d-a574-3bd7-a8b6-bfe473605728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:68:1e:8c:c1:17:57:33:ac:18:44:fa:6f:8d:91:9b:23:1a:
         ba:6e:94:7a:7e:a1:c4:46:85:c2:eb:ac:ec:01:1f:62:f6:74:
         40:b8:48:56:6f:88:ac:59:8b:84:47:4b:0f:01:59:c5:e7:79:
         9b:fa:46:57:62:ef:f3:45:f5:62:ca:cd:ed:99:13:8d:64:02:
         f0:8d:38:56:0a:1a:f4:dc:cd:9b:1b:c7:68:94:40:78:06:d0:
         1b:20:72:c6:4d:88:3c:87:bb:14:99:98:f8:71:ca:32:3e:6f:
         6b:0f:93:16:20:15:03:62:82:16:9a:cc:08:1d:2c:83:d9:ff:
         f7:c7:4f:ab:85:73:aa:03:c0:76:7e:83:91:ca:dc:4a:c9:4c:
         25:dc:82:7f:f4:87:9f:fa:03:2a:6e:aa:d7:84:7f:12:29:15:
         3e:e0:b9:af:45:61:bb:a4:e2:d9:6b:b2:3f:6f:76:97:87:0d:
         a7:82:a4:c4:03:3f:69:f7:c9:5d:64:82:fd:04:ed:b5:dd:24:
         2f:30:2c:48:48:4c:fa:4c:df:e9:b5:9c:06:6c:a6:7a:cd:d8:
         4a:1e:d8:29:eb:5e:95:eb:e9:46:27:45:dc:97:a7:51:b9:a8:
         18:d4:22:dd:fd:a8:ab:2e:6f:db:ce:9c:7b:02:ca:03:fa:f1:
         fb:0f:2b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:35:48 2025 by rpki-client