Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/d3b79aec-ef9d-33c7-8fb8-e1edbffbfbee.roa
File:                     d3b79aec-ef9d-33c7-8fb8-e1edbffbfbee.roa (raw, json)
Hash identifier:          5+ZGAIxyxae57GQF+IWr4K781wG2tBYhPuXRc9uzn9A=
Subject key identifier:   BF:CE:9F:78:B1:55:6A:89:9C:C2:4E:C1:F8:A0:F8:71:A9:94:01:18
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584AE9F66D8828D9DDAE7D0A0080
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/d3b79aec-ef9d-33c7-8fb8-e1edbffbfbee.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     395963
IP address blocks:        198.150.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:6d:88:28:d9:dd:ae:7d:0a:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=247f3d48-7c96-466a-8453-e41cb5f2b47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:1c:a4:28:27:c4:3e:ad:d1:55:75:5d:2a:
                    71:53:8f:0a:4a:d7:a9:e2:bf:e9:41:c5:31:53:41:
                    47:f4:4d:b9:1c:eb:d2:c5:2c:78:17:d9:d3:8f:92:
                    de:ec:6c:31:f3:ce:31:9f:f3:7f:8c:55:ed:2e:41:
                    f0:bd:0b:c2:83:1a:41:ff:1d:ba:71:e6:b6:04:c4:
                    8d:22:38:97:4d:d8:61:29:23:cf:6a:23:63:af:5a:
                    99:6f:70:d9:6f:89:70:b2:56:a2:84:ff:78:bf:85:
                    07:00:e5:02:55:5b:8e:4f:87:93:21:e4:62:21:1d:
                    44:c1:e4:81:bf:98:1b:bc:58:dc:d4:23:a2:db:99:
                    21:27:5d:8a:3e:ff:0f:35:75:51:b1:67:47:dc:17:
                    da:42:61:3a:ff:17:73:96:25:52:5b:7a:ec:36:38:
                    dd:45:f8:ea:30:4b:43:ac:f6:a6:b3:f5:03:63:4b:
                    37:81:66:e3:ed:47:2e:0f:07:06:11:96:18:5d:80:
                    3d:ee:86:da:f7:fa:b1:79:a8:df:a8:e5:89:79:48:
                    ed:12:97:23:71:5b:3c:9a:77:91:3a:ec:00:99:45:
                    f5:af:a8:55:e2:07:c7:1d:e8:21:8e:8f:0b:a9:60:
                    24:3d:3d:f9:f8:99:dc:13:5a:54:0b:77:c9:80:54:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CE:9F:78:B1:55:6A:89:9C:C2:4E:C1:F8:A0:F8:71:A9:94:01:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/d3b79aec-ef9d-33c7-8fb8-e1edbffbfbee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:61:97:ed:a4:a8:85:79:12:76:b1:1e:dc:e8:26:01:0e:93:
         51:5b:51:81:47:7b:29:96:b4:2d:d6:68:b6:a0:15:9b:cd:0e:
         bd:e1:9f:a9:7b:cf:bb:6b:06:48:ec:6b:05:1a:9e:83:86:a5:
         2c:66:c8:0e:51:2c:0d:56:eb:c8:37:61:3e:7e:44:1f:06:37:
         40:8b:a6:35:2b:0b:0c:c0:f1:8c:6d:66:18:34:67:ef:8a:51:
         44:85:eb:3e:24:f9:ee:c5:0d:e0:22:f6:81:57:1e:48:b0:b6:
         63:28:e3:8e:ed:e1:09:2e:a2:ba:8d:70:c1:30:ed:3c:ed:3b:
         63:9a:09:3d:6f:b4:87:94:b4:6b:e0:5f:38:c3:6f:bb:33:26:
         4e:3b:98:a0:0c:8d:b3:ea:35:94:c2:01:49:48:55:c0:ab:29:
         95:f0:3a:5b:b5:bb:ae:a9:19:0a:d6:5f:d0:85:dd:49:6c:76:
         e1:6a:f3:03:e0:ac:bd:9f:66:c4:0d:25:87:a9:e3:da:92:26:
         fe:c7:bd:5e:4b:61:65:be:d3:06:e7:6d:4c:44:0c:20:a0:a3:
         ce:cb:51:30:6b:26:ac:ee:8b:a7:ee:3e:0c:01:c4:a5:2d:dd:
         3b:7e:95:60:08:dd:6c:2e:2b:b8:a0:07:b5:de:ba:bc:23:cb:
         44:ab:62:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:06 2025 by rpki-client