Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c48ae9f2-b169-3573-87b7-876e0ad923a9.roa
File:                     c48ae9f2-b169-3573-87b7-876e0ad923a9.roa (raw, json)
Hash identifier:          IgIAokX5JVHnUCtsS8oF2bv6mBZPafts/Y0plFw3WaU=
Subject key identifier:   28:43:2B:38:AE:99:1C:AC:29:90:2D:40:4A:08:5D:FF:B1:54:E4:14
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584AE9F66DA0068D36A293F6A080
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c48ae9f2-b169-3573-87b7-876e0ad923a9.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     53355
IP address blocks:        198.150.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:6d:a0:06:8d:36:a2:93:f6:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=ed7332a0-a0d4-4ffa-bc37-5ef103e0834c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:90:f5:a6:02:c4:5f:e2:15:d0:ba:0f:19:28:
                    30:a5:5b:6b:22:f1:7d:59:b4:31:11:fa:a2:e5:54:
                    50:89:48:ad:31:62:7e:0c:d2:65:4b:ae:64:82:25:
                    11:c8:4e:05:79:74:7c:51:ea:39:4c:14:a6:8b:06:
                    ab:fc:b2:e6:6f:db:54:1e:55:62:55:40:41:5a:48:
                    d7:14:74:3c:73:b6:9d:8d:e2:fa:d8:64:e9:e3:60:
                    99:fe:3b:e8:1e:b4:2f:1e:82:8e:76:7c:9e:66:83:
                    a9:1e:86:8f:76:aa:15:79:8d:71:09:7d:4a:cc:cd:
                    46:ad:fa:45:81:ab:d7:5d:0b:c5:17:ef:c6:84:a2:
                    93:2a:5a:c2:3d:79:ee:14:dc:3a:a3:8c:11:80:57:
                    f7:71:86:2c:d4:8e:66:3c:fd:81:b6:ca:1e:29:65:
                    33:79:f1:8b:e9:08:11:ff:dc:97:3f:51:33:33:aa:
                    c3:14:5a:01:81:96:e2:10:8c:60:9e:48:af:92:7f:
                    b1:93:d1:93:97:27:01:a6:9c:36:17:6c:8f:cb:06:
                    db:41:31:d3:74:0a:e4:3e:9a:bf:6a:2f:1b:26:92:
                    d9:d8:01:2c:17:0f:30:6d:43:c0:7c:29:76:c8:6d:
                    fb:ed:f4:3a:c5:ab:a5:47:11:6f:f0:1f:32:fa:79:
                    72:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:43:2B:38:AE:99:1C:AC:29:90:2D:40:4A:08:5D:FF:B1:54:E4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c48ae9f2-b169-3573-87b7-876e0ad923a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7e:02:28:b3:a5:69:f8:bb:54:11:6c:e9:76:03:98:a6:c4:
         f2:0c:db:52:35:95:78:2c:e9:d7:25:fe:24:39:27:98:46:e9:
         1a:9c:31:99:7f:62:19:fc:7a:df:03:13:b3:b3:63:7d:64:74:
         f8:1e:47:1f:0d:e3:ed:74:51:5a:9d:76:29:62:1f:8f:5d:61:
         3c:ae:ff:fe:c0:5e:51:49:5e:fe:e3:9f:85:b2:26:12:6a:76:
         69:04:00:df:f9:67:63:91:b9:77:59:c2:c7:7c:40:fb:5e:1c:
         4c:fd:9f:c7:a9:b7:f1:ec:23:b4:79:86:3d:13:b2:d4:1d:6a:
         d5:17:39:97:4b:97:7e:dd:e7:d9:2c:75:6a:56:2a:2f:f8:38:
         14:25:17:b3:4c:f9:d4:28:5a:c2:27:ef:94:a1:95:d5:a4:b4:
         66:c9:6f:2d:6a:25:85:d6:4d:4b:24:e3:e5:2f:c2:af:bc:fc:
         f3:08:75:99:76:8a:de:3d:a1:63:bd:57:ca:3f:8a:00:45:73:
         17:40:e7:37:7e:2c:9b:e8:66:19:05:e9:56:dd:28:b3:ad:b6:
         4f:9f:90:99:33:84:95:89:76:bf:9d:1c:e5:ea:26:3c:32:06:
         53:a5:91:bc:b4:20:66:dc:54:19:e5:29:48:da:80:0a:0c:36:
         be:c7:d4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:06:13 2025 by rpki-client