Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/a608f687-956f-3a69-a09e-16935b98a870.roa
File:                     a608f687-956f-3a69-a09e-16935b98a870.roa (raw, json)
Hash identifier:          SwcroRCkD/6pO1CeU0ZO+D2L8Tk41j/9YSOaJdyRvug=
Subject key identifier:   10:20:48:95:34:BE:24:5A:10:E0:07:79:60:F4:A4:11:95:C5:8C:FB
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584A5A306E2B291495491B4FB880
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/a608f687-956f-3a69-a09e-16935b98a870.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     0
IP address blocks:        198.179.18.0/24 maxlen: 24
                          2001:504:2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:6e:2b:29:14:95:49:1b:4f:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=029cb657-891e-464e-a483-83973cf430ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:ba:63:6e:25:7a:17:d6:1a:14:f1:20:0a:
                    97:9a:97:f9:f9:9e:b4:59:2c:1f:9e:dd:7a:4f:4d:
                    5b:d4:ff:bd:93:b8:77:5a:0f:d1:c4:4f:4e:e9:a2:
                    20:c7:2a:0b:d1:c3:94:98:32:b6:f5:8e:1e:1f:d0:
                    97:d1:a6:51:27:f8:86:4d:77:88:f4:de:78:87:14:
                    44:b7:8f:ce:0d:a2:5b:2b:83:fe:48:07:b4:2f:62:
                    f1:71:83:46:60:b0:59:f2:d4:46:a6:59:12:19:3c:
                    0f:d5:13:f0:ef:8a:0d:27:63:e0:5d:4c:d4:48:ad:
                    c7:89:d8:56:6e:a8:19:1f:8a:b1:bc:9c:a9:16:b4:
                    fc:8f:02:2d:0c:02:68:c0:fd:65:97:e0:3c:fc:a2:
                    b0:69:0a:7f:d0:4d:da:16:e0:bb:49:a8:cf:60:48:
                    b2:db:ee:b1:87:cc:9c:9d:a2:41:aa:d7:8f:02:18:
                    e1:c9:8f:14:6a:96:d4:b9:a0:6f:b0:a0:16:29:09:
                    c7:d0:a4:7b:58:9d:02:23:c9:6b:b3:6e:6f:ce:fb:
                    69:05:87:98:1f:89:81:ce:95:8b:c1:30:a8:b2:c2:
                    65:cb:70:b4:57:31:cb:28:70:1d:37:ad:19:7c:7e:
                    91:c3:0c:a1:43:d1:2a:f5:18:bd:cc:d9:17:5e:f1:
                    8b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:20:48:95:34:BE:24:5A:10:E0:07:79:60:F4:A4:11:95:C5:8C:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/a608f687-956f-3a69-a09e-16935b98a870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.18.0/24
                IPv6:
                  2001:504:2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:2c:bc:06:a7:b0:c6:2f:02:c9:7c:3f:fd:1b:67:c9:25:d7:
         50:8c:20:4a:d2:60:b1:6c:f8:49:91:38:15:15:07:70:11:9c:
         2d:ff:06:29:2f:a1:5c:ef:80:36:fb:b3:ac:d3:33:0b:3c:41:
         45:8a:be:b6:e9:4c:62:94:5d:ac:16:99:2e:27:4d:61:b8:f7:
         01:24:03:26:e3:9c:9e:c4:04:f6:76:f1:08:37:ac:78:e1:2c:
         66:b4:c5:74:74:57:99:ff:08:c3:91:cf:ff:f5:7f:a5:cd:77:
         e0:80:8c:e5:f2:19:8f:f2:62:32:69:ae:ec:39:63:19:a0:bd:
         b9:21:6b:8c:bb:e8:40:ab:63:65:7e:ab:62:ed:f3:64:dc:c6:
         b2:2b:a0:50:41:cd:75:e1:a6:11:9f:33:37:70:15:13:2f:76:
         e1:f2:54:5b:a0:0f:d6:0f:74:9e:40:af:e8:36:dc:73:a9:59:
         fe:6a:5a:35:2e:c3:84:10:18:cd:26:8c:57:35:f3:e9:48:b6:
         aa:1c:7b:db:5a:c3:67:2c:c3:71:d6:85:71:de:92:ba:ea:c4:
         f0:8f:de:26:56:1d:4c:5a:6f:be:00:4d:6c:11:15:59:d1:a7:
         00:fa:02:91:2f:a2:31:91:eb:03:19:8a:e4:5f:fa:e4:c3:cc:
         ef:59:81:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:35:38 2025 by rpki-client