Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d7ca67ec-c0af-3c1a-9968-2b89c30d82f3.roa
File:                     d7ca67ec-c0af-3c1a-9968-2b89c30d82f3.roa (raw, json)
Hash identifier:          TbT+07dWoIUO/uL90zdarAV3hSBT8R8npb0bdhz4NZQ=
Subject key identifier:   5D:05:30:A6:EB:60:EF:35:C7:FD:38:1D:82:E5:F3:7E:F8:E3:45:8C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AD3A12AE22156429D588D8480
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d7ca67ec-c0af-3c1a-9968-2b89c30d82f3.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     834
IP address blocks:        198.89.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:2a:e2:21:56:42:9d:58:8d:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=37617883-13db-48c3-9877-6dd64a629f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:96:87:15:15:77:e7:dd:7f:4a:c0:b0:3a:27:
                    0f:f9:e2:da:23:07:7a:85:19:89:60:d8:73:5d:a3:
                    e2:ba:ff:e1:bd:47:88:19:dc:bd:94:80:7e:bd:9a:
                    5a:43:f6:45:56:92:4f:69:1d:72:47:68:b1:8e:c8:
                    e6:f7:f6:ca:fe:13:eb:97:c5:dc:03:15:fb:b2:cc:
                    f2:0e:e2:54:f2:4f:15:d2:44:af:3f:1f:4c:60:6d:
                    e4:6d:42:13:d4:22:ae:d5:5b:a3:76:6d:c7:2c:2d:
                    09:95:1c:eb:ed:f3:d9:5d:24:65:0c:52:a7:bf:6f:
                    fd:ac:d1:ef:c7:4f:50:fe:77:2e:8e:c9:12:8e:c5:
                    ce:a3:66:c6:e3:ed:21:5a:d4:a1:18:0b:47:d7:a1:
                    be:4e:8f:2a:e2:d3:45:c4:77:64:11:d8:cd:5a:29:
                    79:f8:50:11:95:cd:06:64:3e:24:5c:3f:91:59:4f:
                    92:fe:ca:56:1e:77:e7:b5:b8:5b:d7:25:f7:4c:84:
                    47:d8:2e:f5:0d:35:d9:6f:b6:de:1f:31:33:73:57:
                    69:83:4e:de:a2:49:37:ab:11:88:39:b3:d0:39:3d:
                    56:96:71:4d:24:e1:5a:e4:d3:a1:47:78:30:36:8f:
                    39:49:eb:cf:4c:17:3f:0c:46:91:e5:cb:49:8f:13:
                    7a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:05:30:A6:EB:60:EF:35:C7:FD:38:1D:82:E5:F3:7E:F8:E3:45:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d7ca67ec-c0af-3c1a-9968-2b89c30d82f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ce:41:19:c0:10:ae:53:cc:d7:cc:0d:64:1d:d4:8d:19:72:
         49:51:d1:62:a5:58:7d:a6:e4:2d:ce:9b:2e:95:09:b0:f0:cf:
         b5:46:47:03:5e:77:be:05:38:f2:19:12:a7:8f:9d:8a:17:02:
         93:5e:1d:0f:56:86:86:e9:3c:3c:7f:e9:43:63:40:b9:14:ae:
         85:01:36:2f:3b:3a:be:f7:40:d0:79:e4:e6:0a:33:6b:36:8c:
         86:49:36:b1:65:a0:88:6d:36:4a:90:63:65:c4:bc:53:b5:75:
         81:3e:5f:c1:4c:f0:29:b6:0b:91:e4:cb:ef:45:46:62:6e:a3:
         e4:da:dd:2b:0c:dd:9b:90:13:99:41:61:66:87:2d:34:46:58:
         09:70:41:b6:68:e3:f7:b4:02:cb:d8:a7:46:a6:a9:63:0a:bc:
         5f:a8:72:86:2c:27:54:a4:5d:a0:2c:a4:80:4c:6a:d0:c3:e0:
         f6:ba:33:d7:05:57:21:e0:60:7f:f3:d3:b7:5c:0c:f7:ba:ed:
         ed:76:62:cd:31:c4:67:72:8f:de:24:9e:5a:f1:42:66:9b:cb:
         fa:99:53:f2:97:e2:10:91:16:01:d4:d7:a5:a4:b1:da:cc:06:
         d0:79:cb:e0:c5:ab:20:2f:79:50:3c:e9:e0:13:04:78:b7:58:
         f1:7c:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:38:08 2025 by rpki-client