Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/431e93dd-5d2f-3db1-9c2a-936ab1931179.roa
File:                     431e93dd-5d2f-3db1-9c2a-936ab1931179.roa (raw, json)
Hash identifier:          A4ySsDnYo4XOzfq+35/PuWgIVFdGjIOKxJn7oS8sUU4=
Subject key identifier:   92:A5:A0:9D:D3:B8:DA:F8:7C:54:1C:3A:FF:2D:39:19:46:83:1F:EE
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584AE9F66DE44FEC3B1575DC77C0
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/431e93dd-5d2f-3db1-9c2a-936ab1931179.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     394316
IP address blocks:        198.150.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:6d:e4:4f:ec:3b:15:75:dc:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=f65115d8-b9ab-4346-a9e3-a39a5b2c1171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:ac:c1:30:ce:3c:78:b0:d9:ab:62:0f:69:
                    fb:4a:7f:6c:0b:67:75:90:d6:31:40:65:fa:0e:81:
                    b9:e4:a0:51:6f:80:09:70:d8:b2:a5:eb:6e:3f:6a:
                    9b:02:a2:13:a7:5f:c4:2a:89:85:7c:82:72:d1:21:
                    b6:4a:6a:9c:7b:bb:73:40:28:67:41:a9:e4:44:47:
                    42:ca:0d:d1:0b:8b:26:13:70:ac:8e:a6:1f:d1:41:
                    87:dc:97:78:f3:af:9e:85:f4:62:9d:ec:62:44:73:
                    d1:d9:75:7d:15:ae:a3:55:bd:50:bf:16:9e:53:9a:
                    e8:a3:8b:90:df:a5:64:06:67:fa:ca:6f:84:9c:46:
                    0f:e5:76:ab:f4:b5:6e:cd:ab:6c:98:d6:d6:33:38:
                    38:36:82:14:50:f9:b9:74:79:ac:34:8f:cf:26:86:
                    45:b0:5f:d9:40:13:57:d2:a6:15:ff:5f:f4:de:22:
                    f9:f1:be:8d:9c:7c:b1:f3:66:c7:f6:84:b3:ea:23:
                    cf:92:70:a6:72:f7:1d:ab:09:8d:4a:a6:29:7c:c8:
                    a8:72:c7:ab:1a:e4:40:35:09:c5:4b:81:a0:59:a7:
                    cd:ce:2d:70:4c:f9:a6:8b:b1:df:a8:f1:3a:cc:ca:
                    95:0f:5a:62:6d:89:6d:7e:1b:35:b1:6b:34:2b:05:
                    18:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A5:A0:9D:D3:B8:DA:F8:7C:54:1C:3A:FF:2D:39:19:46:83:1F:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/431e93dd-5d2f-3db1-9c2a-936ab1931179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:2c:b7:99:84:9e:21:b2:01:f3:9e:75:03:ec:f7:11:d0:d6:
         09:c8:c1:40:f0:b8:51:04:e9:89:35:09:97:f6:b7:0c:42:73:
         bc:56:53:9c:51:b2:29:9b:4f:3d:4d:d3:5b:55:b4:60:fa:1c:
         44:47:96:96:0e:1d:d1:55:8b:15:ce:81:67:3f:69:0e:a3:f4:
         c2:7a:16:b9:63:3e:f5:0d:d7:ba:ef:0b:bc:88:f6:a7:87:9b:
         4b:c0:3d:03:10:be:97:23:84:28:e5:45:ff:1f:e6:1c:5f:60:
         dc:34:0e:51:03:db:c1:e6:4f:a8:4e:8f:46:66:c4:18:fd:5f:
         c7:44:ca:ba:86:71:d5:a2:b9:c6:13:17:49:ee:6a:58:b7:1c:
         b7:46:0e:0b:60:6e:11:cb:9b:01:bd:9e:47:fe:64:3a:f3:a2:
         ad:01:c0:8c:bc:e8:f5:ac:97:a4:58:d0:cb:b0:5f:47:46:0e:
         7f:a1:8c:a2:5f:06:6d:84:77:10:45:cc:ed:0e:02:13:78:7d:
         78:a5:9c:8d:cc:4a:f0:91:62:a1:80:d0:e7:f4:b3:5b:bc:9b:
         e4:e8:a0:56:a1:cd:b0:11:22:e4:b9:20:2a:b2:5a:11:bc:ca:
         d7:be:06:1f:e8:4c:7d:80:63:01:f0:14:de:a0:0d:19:ff:20:
         67:a4:ff:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:04:14 2025 by rpki-client