Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa
File:                     74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa (raw, json)
Hash identifier:          4rHa7MEKHrL8X0+DNcmoJfO4eXry5PgSsZtmVuv3Wek=
Subject key identifier:   96:D4:D8:D8:84:87:66:BA:60:FC:63:0A:6A:CE:3C:44:5C:6F:A9:D6
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584B5141BCAA06A2B42B36ACB780
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     198949
IP address blocks:        198.135.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:bc:aa:06:a2:b4:2b:36:ac:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=3703450a-ce10-4181-95c3-41b797f2918f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:46:9f:45:7f:69:7c:60:16:b2:6e:8c:7d:9e:
                    57:0c:1b:8a:a2:aa:d4:c6:55:39:1b:a6:c7:8c:41:
                    6d:61:e9:d4:e9:81:2b:19:53:cf:10:b8:19:e6:53:
                    ab:84:ee:54:21:35:8a:50:7e:48:10:4e:98:39:7d:
                    33:72:39:93:96:5b:08:21:88:f6:40:df:f6:a5:e1:
                    3b:3a:57:04:8c:92:85:34:15:36:11:60:d2:6f:8c:
                    df:0f:d0:d0:fc:f0:22:59:ed:8e:63:c5:63:68:01:
                    c8:05:6a:7b:d7:e7:0e:a8:e3:01:a9:bf:5f:f6:db:
                    e5:ac:93:73:36:41:18:07:11:40:86:00:b3:f8:58:
                    fd:87:ff:d8:23:bc:ba:5c:29:67:52:11:ab:1b:96:
                    26:09:4f:d5:a6:54:eb:d8:71:81:79:19:a2:c0:00:
                    b6:01:78:f2:9e:b0:50:18:3f:67:b8:6a:90:db:3b:
                    59:19:29:2a:d3:29:0c:23:9a:ca:7d:6e:d2:61:0f:
                    05:1b:c1:93:a5:e2:62:ce:21:34:1f:0c:fe:6c:d4:
                    85:02:3d:09:b1:65:9e:42:3d:b3:ef:e6:81:be:46:
                    57:c1:8e:0b:02:b1:0b:16:4b:50:86:df:f7:00:b6:
                    a6:c2:26:97:48:71:3e:c1:51:4e:c2:64:c9:3b:09:
                    9f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D4:D8:D8:84:87:66:BA:60:FC:63:0A:6A:CE:3C:44:5C:6F:A9:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c0:6e:6b:0d:1e:02:f4:dd:ae:84:36:15:25:d2:98:da:90:
         6b:75:86:d6:29:ae:bb:f3:69:e2:5d:f2:b4:97:9e:74:f8:2a:
         81:2d:c0:26:f8:2a:ef:be:54:59:3b:69:b2:b2:52:65:a4:23:
         ad:33:60:75:5f:af:5a:20:fd:c2:a1:df:82:4c:7e:46:7a:a4:
         76:d5:d6:30:81:f1:68:46:3e:c6:fa:f7:2c:02:bc:73:d7:d3:
         36:a6:f2:73:ca:35:97:6f:7c:e6:65:ae:b4:b3:34:f2:94:1c:
         1e:14:43:58:bc:3e:7f:1e:ca:8e:e9:08:70:6a:f5:d8:0b:52:
         3b:80:40:8d:e5:de:82:8a:2c:00:58:7c:6a:ab:30:40:b5:7d:
         d3:fc:e0:5e:51:a9:71:59:ae:bd:21:02:e8:5c:59:1e:e2:ee:
         85:0f:58:5a:02:00:5f:77:ef:da:ac:8e:97:f2:dc:4b:7a:d4:
         4a:cb:85:84:70:46:3e:f2:eb:56:8e:e6:8c:f8:e8:7d:fc:c1:
         dc:a5:35:49:ee:85:75:6c:6c:18:d2:cb:b1:4f:db:d3:89:4e:
         21:12:cc:f3:80:1a:de:ca:db:4e:c5:d3:0e:c2:3b:76:17:84:
         93:b4:a4:3b:4a:48:6b:73:3f:bb:99:70:ef:0f:05:27:d0:9e:
         62:62:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:27 2025 by rpki-client