Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/4b918c6c-15d2-31cf-a929-e8d591303dc4.roa
File:                     4b918c6c-15d2-31cf-a929-e8d591303dc4.roa (raw, json)
Hash identifier:          06Fp7lIqFp7fdILpxxCK2uhKtaoDdFrVvHBhGAogJyE=
Subject key identifier:   B4:88:2B:7D:B2:D8:C5:5E:8B:A9:A1:C9:05:BD:69:05:E3:A1:26:71
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584ACE0BA2C76B56078985BBA480
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/4b918c6c-15d2-31cf-a929-e8d591303dc4.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     62614
IP address blocks:        198.46.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:a2:c7:6b:56:07:89:85:bb:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=a8e540d3-1cce-4037-b246-8769b2171b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0c:16:b5:7a:28:77:ba:6a:66:d8:3e:ea:1a:
                    15:fd:d3:91:20:6c:cd:83:83:92:92:e6:15:40:97:
                    dd:f1:c1:ed:43:24:b1:16:87:31:0d:34:33:48:4d:
                    16:c1:b0:40:4e:71:10:3a:d4:ea:34:8f:ea:6f:ee:
                    10:1c:77:a5:bb:7e:e0:bb:4b:c6:46:71:97:cc:64:
                    72:3f:00:7e:3e:49:22:e7:2b:22:7e:3d:d9:91:de:
                    6f:65:40:a8:e6:ee:cc:8e:14:e9:2e:88:59:2c:f4:
                    95:7f:f1:2b:fa:67:9a:5c:90:99:2e:cd:22:a5:b6:
                    e2:f2:bb:32:b0:68:c1:7d:3d:d5:0e:d9:ec:22:f0:
                    7d:31:d4:14:2c:fd:f0:ad:a6:bc:01:25:91:33:cf:
                    4f:6b:a2:c6:ef:e0:50:19:6b:c3:2d:21:00:09:05:
                    1f:ac:dc:36:a5:7b:30:54:7a:de:4d:3f:8d:fb:57:
                    f5:f2:0d:4c:16:40:67:6b:d3:11:a7:cb:d0:b0:50:
                    a9:7b:a9:41:e8:c6:3e:fd:2e:95:3c:a2:ce:e9:e8:
                    73:42:17:71:d8:c0:a3:49:58:98:7a:18:ad:0f:b5:
                    00:b1:5e:d1:55:c1:fd:f1:e7:ec:1c:4f:7b:8b:ea:
                    54:03:d6:81:47:72:02:81:cd:f7:2d:4a:28:ee:be:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:88:2B:7D:B2:D8:C5:5E:8B:A9:A1:C9:05:BD:69:05:E3:A1:26:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/4b918c6c-15d2-31cf-a929-e8d591303dc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.46.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:e4:d6:f1:91:1d:3b:db:83:6d:f5:cd:08:7b:2e:7f:2b:88:
         95:2f:6a:e5:1d:48:62:fb:53:12:0f:6e:61:6f:b2:25:cd:66:
         c8:72:f2:1f:18:46:2d:3f:a1:39:0f:db:dc:20:bd:37:42:97:
         15:f4:93:85:79:74:ee:38:27:2b:de:f9:af:bc:6b:2d:65:28:
         aa:e7:17:d4:28:2c:ab:32:42:e7:33:13:8f:70:ff:b3:06:6d:
         16:be:45:8a:61:57:0e:f2:f5:a2:27:16:46:de:d5:6c:d4:27:
         d6:9a:14:68:7c:18:41:3a:13:15:20:9f:e0:89:cb:bf:7d:80:
         71:5d:87:1d:7b:27:c4:97:4d:3b:40:fc:f7:87:15:b7:16:e1:
         07:36:74:da:cb:51:f0:3c:40:77:67:31:21:94:ec:95:27:da:
         02:cf:df:87:47:33:1b:73:3f:6e:4f:0b:3f:7d:dd:cc:09:f7:
         e5:2a:8b:01:d1:0f:d7:b7:2d:89:6d:0d:50:57:cf:95:88:62:
         8a:c4:e8:6f:1d:16:ae:3a:b6:ae:64:ae:db:38:66:e7:78:ab:
         ad:03:a4:68:48:2d:1a:c0:11:7b:10:c6:8d:20:3b:ca:6b:3f:
         39:39:58:1d:3b:46:0b:8d:81:ee:5f:e9:43:cf:cb:a0:20:9e:
         e1:23:a7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:33 2025 by rpki-client