Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/a608f687-956f-3a69-a09e-16935b98a870.roa
File:                     a608f687-956f-3a69-a09e-16935b98a870.roa (raw, json)
Hash identifier:          abs4BGXKtmPwD0HuV/qbtRNB4toOl3HAyx7Sk5XHieY=
Subject key identifier:   35:A5:BB:9F:57:50:17:72:D7:71:AD:F5:7A:FD:23:D0:93:1A:A5:30
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584B3AEC54BAB05E1BF92AC9A500
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/a608f687-956f-3a69-a09e-16935b98a870.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     0
IP address blocks:        198.179.18.0/24 maxlen: 24
                          2001:504:2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:54:ba:b0:5e:1b:f9:2a:c9:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=12a0bb57-b2e2-466c-bdbf-5918dc9cec15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d6:29:c5:05:5a:80:51:59:0a:97:29:2c:83:
                    0c:fd:37:74:88:ca:54:65:ab:04:61:6e:4b:bb:77:
                    9a:28:8d:c4:98:d9:fd:9f:50:bc:53:eb:34:65:09:
                    4c:04:ac:89:4e:75:b2:cc:c4:bd:01:e8:4e:3d:49:
                    20:65:eb:8e:4a:f9:a9:e6:7a:63:9f:29:91:9d:5f:
                    8c:f6:3e:cf:d5:6d:c0:f0:bf:f9:75:36:dc:49:7b:
                    91:bb:55:ab:e0:5a:b4:e2:37:c1:60:f5:52:b9:94:
                    38:b9:36:c7:12:03:cb:32:ea:7d:cf:02:76:ab:2e:
                    6d:89:13:7a:43:50:58:6d:ea:49:29:19:15:f5:80:
                    4d:0c:ba:8f:82:61:da:56:be:af:d5:27:8e:63:da:
                    07:26:d2:e9:34:df:d3:0c:e5:cd:b8:70:c9:e9:98:
                    51:7a:13:54:4d:cf:3a:ef:f7:a5:f8:2f:6f:25:8c:
                    e3:e7:39:84:42:19:5c:21:84:7f:cc:af:f7:f7:0c:
                    b1:77:ec:0b:b2:82:b1:49:6f:3c:82:ea:49:eb:96:
                    32:73:0f:b3:27:16:59:b2:45:af:af:12:6a:83:4c:
                    8c:e7:25:11:c1:ce:60:ac:f5:ea:1f:4f:b3:9e:22:
                    9a:10:9a:81:7b:2b:ec:21:f2:4d:af:29:61:7b:e9:
                    d9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A5:BB:9F:57:50:17:72:D7:71:AD:F5:7A:FD:23:D0:93:1A:A5:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/a608f687-956f-3a69-a09e-16935b98a870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.18.0/24
                IPv6:
                  2001:504:2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b6:10:29:81:77:68:b9:5f:7f:de:41:69:34:c1:0d:fe:b5:
         65:e8:56:d5:84:9c:2d:17:44:a7:bf:f8:4d:d8:11:84:a7:c9:
         39:7f:ae:c4:96:26:59:fa:1a:f7:7f:f9:4f:79:e3:74:73:a9:
         e6:0d:9b:75:72:6c:11:fc:f1:22:ba:f7:5a:24:55:1a:fa:0a:
         05:9a:0a:ba:c2:d4:6a:ba:3a:49:05:1c:75:fb:f1:c0:43:fd:
         2c:ce:08:54:ee:ff:a2:78:87:8c:07:97:9d:54:1e:8f:1f:76:
         cb:1a:9c:27:5b:a4:4b:a1:d8:0b:83:c7:96:e8:1c:b9:3a:8f:
         11:d9:94:8d:76:ae:36:f7:89:de:f6:f8:ee:55:66:f7:1f:5d:
         22:82:50:fd:7f:10:2c:a6:fd:ee:93:02:ee:18:70:bc:00:8c:
         3f:c8:1a:b7:7b:53:26:19:cf:9f:b7:f5:ec:54:6c:9c:df:5e:
         f3:c4:22:93:a3:a9:10:62:96:8b:de:d1:2a:63:71:b0:85:85:
         61:bb:92:3b:0e:68:08:a6:9c:4f:cf:50:fe:24:aa:c4:2d:2b:
         3a:73:3b:ec:f4:d9:72:5c:ec:f8:8d:0f:90:e1:ed:49:9b:69:
         0e:6a:f6:3e:97:1c:4e:69:fc:6c:56:4b:36:a9:1d:df:22:29:
         0e:f8:ea:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:42:50 2025 by rpki-client