Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/f2186ef4-ee90-3642-8621-ed7e6cfa2650.roa
File:                     f2186ef4-ee90-3642-8621-ed7e6cfa2650.roa (raw, json)
Hash identifier:          Vj5I3CTE1E845MnntWsecMrEvY+jVHTL+HgkaUpjgBA=
Subject key identifier:   C4:7A:3C:6B:4A:97:CE:E1:35:6C:5C:96:1A:F5:8D:E1:6F:96:F0:FF
Certificate issuer:       /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial:       010D0C9F4328584A43DB0501E25B5FA5C7E2BD78
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/f2186ef4-ee90-3642-8621-ed7e6cfa2650.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        168.238.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:05:01:e2:5b:5f:a5:c7:e2:bd:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=2245aa81-25ac-4bfd-a699-6c9df0dfeb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:9c:8c:f4:66:6f:45:89:02:e2:4a:d9:d0:
                    ce:2d:fc:3a:0e:85:76:44:9e:e0:35:ec:10:9f:ff:
                    58:65:a4:b9:c2:8e:7d:0f:1b:38:36:dc:0c:ee:74:
                    3b:e3:41:c6:ca:4e:e7:58:a2:02:28:6d:7b:1d:d3:
                    eb:21:e4:46:a2:8a:c8:4e:b4:ec:69:20:ff:56:6b:
                    51:8e:aa:81:f3:db:5b:a9:6e:62:d5:cf:0c:93:50:
                    84:81:aa:68:b0:bb:96:8c:83:01:a8:dc:57:08:7c:
                    ca:8d:e2:53:c5:c2:30:5b:24:ce:10:1e:63:db:98:
                    aa:35:20:a9:df:73:5f:7c:84:fa:a5:c0:9f:fe:c2:
                    5b:ee:b0:35:41:f9:66:58:a2:1d:5e:1c:12:77:f8:
                    0c:cb:d9:38:29:9b:1b:b2:51:25:65:53:f8:05:4d:
                    77:8f:52:af:9c:8a:00:bc:cf:98:64:14:8a:7c:a6:
                    30:bd:4b:8a:cc:63:ad:5d:f4:83:a8:6c:73:35:3d:
                    e3:bc:94:95:e6:fd:1e:32:33:f9:d9:f5:73:44:83:
                    0c:c1:26:4f:fb:06:56:9f:da:f8:f3:f0:67:1c:27:
                    7c:9f:da:a2:dc:c9:9c:ef:90:a7:50:21:b6:d0:54:
                    e0:9a:4b:35:2d:2c:a6:3c:e4:fc:06:97:97:99:a9:
                    38:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7A:3C:6B:4A:97:CE:E1:35:6C:5C:96:1A:F5:8D:E1:6F:96:F0:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/f2186ef4-ee90-3642-8621-ed7e6cfa2650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl

            X509v3 Authority Key Identifier:
                keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.238.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:2b:94:62:c2:f0:46:fd:91:68:95:16:44:a5:ae:31:47:e1:
         6d:c6:3d:a3:4e:5b:67:1a:ac:9c:eb:61:d3:1e:67:f8:51:51:
         cd:14:90:61:1c:3a:8d:29:31:44:26:fc:e6:e8:d5:bb:8a:fd:
         ea:90:30:13:ee:39:2d:44:c3:2f:2f:8e:59:49:09:f5:39:ac:
         74:03:bc:9d:3e:22:b3:29:5d:32:aa:a0:3c:b1:ec:e4:73:7f:
         99:5e:94:39:9b:dc:a6:7e:98:3a:ff:a2:c3:15:98:84:d0:cd:
         63:f7:85:37:cc:87:46:b0:14:5e:f2:83:8b:4c:4b:3f:c2:f3:
         7a:9c:e2:eb:63:1a:3d:8e:77:e0:9e:8d:f6:2f:40:3e:25:8b:
         82:8a:6e:fb:9b:78:07:6e:c3:74:7d:f5:49:6d:16:d6:cf:07:
         75:65:a3:42:5d:70:b7:b1:23:ed:8e:e9:88:8f:f7:d5:f7:4b:
         f8:7c:09:4a:05:b1:8a:5e:90:3d:1d:fd:74:4f:1b:e7:30:1d:
         4b:10:8f:3a:53:bf:8e:6f:e0:43:d3:f7:3b:03:3b:d3:d2:fe:
         ed:a7:27:51:d4:54:f0:2a:f5:a2:ca:af:af:10:c2:b4:bc:9e:
         78:f7:90:9a:60:a0:94:a1:65:77:1c:50:c2:bf:35:fe:88:a1:
         c6:6c:4c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:23:04 2025 by rpki-client