Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/faadd0a3-a993-3496-8f98-a98da5a4e705.roa
File:                     faadd0a3-a993-3496-8f98-a98da5a4e705.roa (raw, json)
Hash identifier:          aQWrMCd6wOP3GnyFLF1o3h+qCpOTLDVylJ3VyFGqm38=
Subject key identifier:   79:E8:1A:8D:5A:3E:FB:BA:90:98:AC:5E:14:F1:D6:B4:13:3B:BF:90
Certificate issuer:       /CN=e9d9b9dd-0b27-411a-a8a4-122477510cdf
Certificate serial:       010D0C9F4328584AC9DBA14B5B334EBC98199000
Authority key identifier: D0:3E:87:DB:98:AC:2E:8F:70:FF:B9:F1:85:A8:7A:49:C7:BC:9E:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/faadd0a3-a993-3496-8f98-a98da5a4e705.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     35350
IP address blocks:        198.74.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/e9d9b9dd-0b27-411a-a8a4-122477510cdf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/e9d9b9dd-0b27-411a-a8a4-122477510cdf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a1:4b:5b:33:4e:bc:98:19:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9d9b9dd-0b27-411a-a8a4-122477510cdf
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=32af7218-1662-4752-ba0c-64eaf34461a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:db:95:54:6f:1e:61:e6:c2:35:36:24:13:b8:
                    52:d3:00:4a:ef:e9:87:d5:74:1b:0e:63:fa:39:d0:
                    46:5a:25:93:df:d0:38:f4:50:04:60:f0:d3:89:05:
                    98:b4:98:09:94:81:9f:52:1f:b4:1e:a2:44:d2:52:
                    b2:46:ce:48:e4:89:52:40:d3:44:70:39:dc:f1:87:
                    8b:12:1d:67:15:64:69:f3:9f:c6:5d:84:73:34:e3:
                    fd:fc:56:e9:95:0d:9c:aa:db:9a:c3:e1:c2:c2:e0:
                    49:47:e1:f8:be:34:49:74:65:b0:b6:cd:d8:78:61:
                    64:31:1c:e4:2f:19:23:1a:ce:b2:8a:79:ff:cf:73:
                    6e:61:01:03:b6:99:57:4d:ed:e0:83:1a:2e:fe:3d:
                    4d:91:e1:b0:71:67:96:a2:1e:e4:6f:4b:9e:76:20:
                    d3:78:d9:ed:bc:ea:16:d0:af:f4:d6:da:09:55:89:
                    f8:6f:21:8a:48:56:d4:6d:4f:d8:5a:05:66:a7:39:
                    5b:77:69:20:68:d5:0a:b6:4d:a8:d4:cd:ff:f4:5f:
                    5f:fe:13:52:e2:27:b3:59:1f:48:a4:a2:65:1c:2b:
                    5a:42:77:bf:d7:86:88:25:c3:b1:09:15:4b:c9:39:
                    fe:e4:a2:41:1d:f4:47:5c:16:f0:5e:54:c4:fd:43:
                    92:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E8:1A:8D:5A:3E:FB:BA:90:98:AC:5E:14:F1:D6:B4:13:3B:BF:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/faadd0a3-a993-3496-8f98-a98da5a4e705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf/e9d9b9dd-0b27-411a-a8a4-122477510cdf.crl

            X509v3 Authority Key Identifier:
                keyid:D0:3E:87:DB:98:AC:2E:8F:70:FF:B9:F1:85:A8:7A:49:C7:BC:9E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9d9b9dd-0b27-411a-a8a4-122477510cdf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.74.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:80:10:75:8a:10:4d:8a:f7:c4:d4:93:f7:46:5a:30:29:34:
         75:6c:2b:bb:44:2e:fe:22:b6:e3:df:05:87:f4:a8:3b:4a:33:
         a9:f5:e3:d4:be:e8:f8:f9:39:01:17:0b:f3:cb:73:2b:4b:b6:
         8c:de:87:a9:b2:e7:df:20:15:26:d6:db:32:1f:82:c1:d8:36:
         59:9e:62:90:d7:e1:78:c2:39:f7:9c:f8:2a:f6:7c:41:70:3f:
         13:76:4b:f4:60:2f:a4:e7:e4:7f:67:e2:88:40:de:8f:4f:6c:
         d2:08:ab:71:f6:92:b3:a7:de:c1:c9:d3:55:76:bc:7d:67:e5:
         d5:92:b2:62:d8:1c:69:c0:ae:b7:55:f6:96:4e:63:be:c6:04:
         0f:78:24:2d:87:a4:bd:c9:51:0c:97:34:e0:c5:aa:76:bb:7e:
         18:e4:ae:44:60:71:fd:b6:81:41:a4:e2:d5:29:fe:b8:61:0e:
         11:f6:97:df:04:8a:ee:f7:a5:27:d4:29:8c:5e:e9:8b:ff:ca:
         9f:20:64:81:f2:c0:4f:31:ff:b4:d5:e0:1d:bb:30:b6:e7:a6:
         57:6a:e1:09:bc:86:9a:a9:be:04:b6:dd:94:4d:8b:99:c1:e3:
         f9:8f:5a:5d:7b:db:7e:4e:26:04:cf:32:5c:26:7d:c7:f7:b8:
         ed:c4:dd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:30:17 2025 by rpki-client