Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c121290b-ef9f-31f6-a8d1-d11c8d9ae3bf.roa
File:                     c121290b-ef9f-31f6-a8d1-d11c8d9ae3bf.roa (raw, json)
Hash identifier:          Nx9mG0AOjgXlez7UuwqpVBM2uTbMjxr6bzC+gYPoUB0=
Subject key identifier:   0D:F2:55:C9:3E:30:72:08:81:49:D3:AE:9D:A2:B1:BA:A9:D0:8E:8F
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584AE89135C56CCA0799F02F2380
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c121290b-ef9f-31f6-a8d1-d11c8d9ae3bf.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     21859
IP address blocks:        98.98.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:35:c5:6c:ca:07:99:f0:2f:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=acdcac24-0e49-4d11-8c22-90de4f4a0385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:44:e6:18:88:0d:4f:e2:9c:7b:14:4e:05:dd:
                    7f:d4:94:20:d5:8a:e4:fb:26:d3:df:d3:b6:f8:34:
                    0c:e7:b9:38:38:23:3c:5d:50:be:a1:44:68:b1:e7:
                    d6:74:07:27:42:62:84:6d:70:16:84:b5:d2:be:9d:
                    7f:8f:80:79:e3:31:77:58:2f:c1:94:01:26:ea:83:
                    05:e1:87:a4:c4:ce:77:64:37:b8:87:a2:4e:02:a0:
                    b7:cf:85:2a:98:a7:d7:c7:7c:98:80:c9:c2:e7:60:
                    e1:df:6e:50:dc:07:97:cd:2e:02:b5:c7:5f:47:a0:
                    d0:28:b6:8b:bf:de:40:d9:f8:af:e8:81:58:97:98:
                    f5:fb:43:96:65:07:02:da:83:6f:12:48:76:ea:52:
                    b4:61:7f:1e:d8:29:80:9c:5a:6b:c4:27:75:a3:3b:
                    ec:8b:4b:9e:18:90:ab:ee:2d:c3:75:ab:fb:fa:b2:
                    23:f0:56:66:40:cb:bd:5c:a1:7e:cc:84:6d:16:7e:
                    2d:dd:fc:34:63:55:06:e5:a9:b3:7e:8c:35:93:92:
                    5b:8e:9e:b7:39:79:9a:8e:f9:89:48:a3:9b:e6:d2:
                    9f:cc:8e:56:71:01:d1:e7:f4:53:24:a6:65:cc:4c:
                    26:c4:dc:db:41:79:d4:44:4f:83:53:56:fb:1c:a5:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F2:55:C9:3E:30:72:08:81:49:D3:AE:9D:A2:B1:BA:A9:D0:8E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c121290b-ef9f-31f6-a8d1-d11c8d9ae3bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:cc:92:1b:2d:33:54:79:f7:d8:e1:41:c3:be:95:76:7e:74:
         a4:02:5e:2d:50:c4:d8:c7:a7:8e:14:67:2d:2c:45:f2:9c:da:
         e1:de:47:c4:36:5f:01:ef:e2:b1:a0:92:ea:06:13:c6:df:e9:
         a9:14:b0:53:8c:f3:1b:77:e6:63:dc:15:af:c3:40:da:56:5c:
         df:e5:80:38:ba:87:c4:5b:ac:c3:3f:34:6c:8d:f3:94:16:f2:
         32:f2:5a:c0:b8:9a:97:b3:f7:bd:f1:6f:34:57:8b:1a:b3:d5:
         59:8c:c0:21:01:9a:de:36:28:08:09:c1:db:32:c0:ee:8d:aa:
         2d:51:c0:64:4b:bf:3f:cb:a6:37:7d:d1:4d:fc:5a:17:07:49:
         7c:0d:66:ea:07:6b:2a:df:9d:f5:57:aa:92:11:53:04:d7:88:
         1a:3f:8e:27:f8:42:7c:c8:1b:f5:18:f5:33:54:0f:70:84:3a:
         dd:30:9a:0e:a1:d8:c2:a9:06:59:50:a7:cd:78:75:99:80:9d:
         0a:34:8a:12:3a:1a:77:25:64:d0:83:af:fc:5a:4e:d1:5c:4d:
         73:ac:d3:fc:df:2c:ad:ec:05:36:1c:b9:27:5b:40:dd:cd:62:
         43:80:b5:1a:dd:51:77:07:7f:c4:b1:f9:82:fc:2c:d6:97:ed:
         66:3f:30:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:48:59 2025 by rpki-client