Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fbcd03af-2871-3254-9f16-1ca1297a10ba.roa
File:                     fbcd03af-2871-3254-9f16-1ca1297a10ba.roa (raw, json)
Hash identifier:          l+3VXbelLE647rvdM4lW/a54H/WjIwpEAPwele4dXwU=
Subject key identifier:   80:B8:F4:6C:D7:73:EE:D4:F7:7B:06:30:DB:5D:1D:D9:E7:89:94:72
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584B1AD17308353DBADB825B0D40
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fbcd03af-2871-3254-9f16-1ca1297a10ba.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     16904
IP address blocks:        198.98.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:73:08:35:3d:ba:db:82:5b:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=b06d921e-cc7b-4c20-b7e7-1532e07b56d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f2:f6:dd:5c:a4:e4:1c:bd:b2:89:49:cc:da:
                    af:6d:a5:5f:75:25:df:08:5e:00:ae:57:89:1a:94:
                    a6:2f:0f:69:3a:6e:8c:69:5e:70:04:d8:41:5c:06:
                    a2:20:d5:7f:b3:18:44:b4:c2:7d:c3:7e:55:c6:99:
                    5b:96:31:8a:8b:29:df:ae:97:bb:67:32:2e:5b:98:
                    aa:16:a5:28:5a:29:a8:8e:94:09:b4:3c:4f:47:2c:
                    0f:9d:f2:81:fa:95:8e:e5:7f:26:1f:20:01:60:af:
                    13:81:44:aa:12:e3:5e:05:93:69:ba:38:6f:e5:85:
                    bb:99:25:48:eb:b0:1d:0e:34:78:be:60:3d:71:85:
                    19:5e:c3:8c:ae:50:4c:35:69:f4:ca:9d:b6:9b:f8:
                    c9:56:97:cf:bd:2c:07:64:a0:de:5b:7d:c2:27:30:
                    9e:cb:b2:8c:e4:db:40:bf:15:91:93:2a:43:bb:41:
                    cf:da:9f:7f:ff:55:64:41:11:1b:9b:31:22:e3:08:
                    14:92:3f:05:f9:4c:fd:31:85:02:2e:9c:83:73:de:
                    0d:12:84:50:42:14:6e:ff:9d:22:4d:f5:d2:f9:59:
                    32:08:1e:8a:8c:d1:d5:36:91:0c:0c:7b:a8:7d:0c:
                    92:f1:a7:43:66:90:7c:36:da:f3:b3:7a:30:7e:48:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B8:F4:6C:D7:73:EE:D4:F7:7B:06:30:DB:5D:1D:D9:E7:89:94:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fbcd03af-2871-3254-9f16-1ca1297a10ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.98.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:af:eb:03:0f:00:73:a0:92:c3:1a:f4:23:2f:04:fb:7a:77:
         09:4a:56:64:1b:55:7d:38:7d:3e:0a:61:f8:25:18:33:d3:13:
         4a:a8:ad:80:eb:7d:93:0a:39:2b:86:8b:f0:2a:b0:9b:8d:4c:
         c9:29:59:ee:31:e0:d1:5c:58:ba:e3:74:0d:1e:c8:c3:d3:ef:
         17:ef:b3:4e:0a:ef:3e:f8:b7:87:35:da:bc:57:d3:c4:f6:ba:
         fe:ad:41:e7:73:d5:e4:2b:54:9e:9b:69:e0:e6:dc:df:69:6d:
         3c:f3:79:61:a3:b4:d6:6f:35:9a:1e:cd:51:00:90:75:0b:81:
         6c:44:15:61:44:78:e0:a6:31:05:cb:cd:83:5e:f5:00:f2:1c:
         86:05:43:4d:57:c7:18:77:02:90:d3:96:1c:7b:ad:1c:a6:f3:
         f9:60:b6:76:a4:fd:02:e2:5a:71:fd:e7:10:c8:d8:67:38:7d:
         de:a8:5d:ea:b6:f7:d2:3d:ae:a5:61:7b:41:66:ae:da:a0:50:
         19:65:42:5f:95:9f:89:5c:be:65:d5:17:ab:9e:97:22:56:91:
         a5:1b:10:fa:92:9b:fa:82:74:12:66:20:68:63:e1:0c:ca:cb:
         df:56:b7:29:b2:df:24:67:60:68:64:d5:76:5f:6f:1e:8c:d7:
         16:1e:d9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:02:13 2025 by rpki-client