Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/6281f029-07c6-3a1f-87d3-e87c6b1ceb7a.roa
File:                     6281f029-07c6-3a1f-87d3-e87c6b1ceb7a.roa (raw, json)
Hash identifier:          pvPPzt+GtHTvH0zgjf64HPcCPjxZhTh+541ZX+dgKDo=
Subject key identifier:   5E:5A:F6:AB:16:E9:55:28:D6:70:F2:2D:D3:72:D9:40:A2:60:9D:A2
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584ADD666C23373E1D6537BF2560
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/6281f029-07c6-3a1f-87d3-e87c6b1ceb7a.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     30133
IP address blocks:        199.6.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:6c:23:37:3e:1d:65:37:bf:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=1e58d1fa-750f-4f05-b270-7df24d981f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:53:41:35:2e:da:3d:c4:cd:e3:f9:89:ae:26:
                    fc:09:5a:97:1d:1c:c7:e1:95:37:97:95:29:8e:92:
                    1e:79:d9:e6:9d:28:6c:6a:fa:31:c4:21:28:88:4a:
                    d6:21:58:c7:48:d5:89:a7:95:fb:10:07:ac:9b:12:
                    30:ca:6d:9d:4e:ce:2d:d1:fa:4a:fb:e9:30:00:8e:
                    f0:c9:4b:63:32:36:1c:bf:c7:ed:ae:48:02:62:2a:
                    f0:2c:99:06:8f:9b:3f:af:48:6b:ad:0a:13:8c:6b:
                    ba:5d:d4:1f:35:13:1b:b4:74:ba:a3:d3:0c:ec:a0:
                    c7:2f:7e:2e:e5:28:9d:3c:0c:24:57:da:cf:cf:17:
                    f4:15:85:c4:9c:a2:62:a8:12:fa:89:8c:06:d7:26:
                    30:93:90:b4:27:e7:d0:1f:14:07:3d:2a:77:fd:29:
                    83:f4:b3:f0:ab:52:2a:e4:5d:c9:d0:29:6d:02:44:
                    bf:d5:51:4b:b8:e6:a9:79:a0:90:1c:44:7b:49:ca:
                    cc:73:a9:24:9d:51:cf:07:dc:12:70:de:47:5b:57:
                    03:97:58:85:fb:e7:28:35:3c:a9:a2:a8:48:69:e4:
                    65:7a:79:2c:49:59:ef:51:c9:c3:16:75:d6:a6:e7:
                    6d:29:97:d2:5e:54:4a:e4:be:9f:43:23:2f:a5:da:
                    0c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5A:F6:AB:16:E9:55:28:D6:70:F2:2D:D3:72:D9:40:A2:60:9D:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/6281f029-07c6-3a1f-87d3-e87c6b1ceb7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:55:20:4a:68:28:e0:02:64:aa:3a:1b:ea:7b:5b:cf:55:99:
         92:72:66:60:0b:80:e4:dc:fa:23:b4:5a:2c:65:0f:9a:d3:23:
         d3:95:9c:cf:32:ee:2e:0a:9f:d8:1a:2a:37:1e:e5:a5:c8:78:
         43:66:64:58:2d:16:71:cf:5f:37:38:f9:a1:b5:ea:06:5d:22:
         a2:5c:e8:a3:2a:c4:f6:cd:d0:90:1a:15:9d:e0:d6:eb:43:94:
         33:08:8e:46:ab:28:30:7c:b0:6e:44:99:bd:f7:71:62:07:e8:
         11:76:a4:e6:9f:70:bc:16:1b:cb:e8:c8:f0:69:2e:68:05:2f:
         53:53:c4:83:31:17:95:b3:89:9d:37:04:96:09:77:24:6b:f9:
         32:63:26:3d:09:74:43:cf:74:38:09:24:f3:32:c5:e7:8a:65:
         00:7b:19:77:fb:26:4f:12:26:2b:f1:0f:5d:b5:74:d6:07:4b:
         22:67:28:5f:47:ce:3c:a9:2e:cd:98:48:0f:33:de:ef:37:d8:
         a6:55:79:1c:8d:be:09:93:40:9a:04:86:86:59:fe:e8:2f:1e:
         46:bc:62:63:64:24:db:c3:11:08:f1:33:62:d2:80:cc:c6:93:
         6f:e0:31:5e:79:14:c4:72:45:bf:ae:22:25:b3:39:92:02:b4:
         d8:ac:39:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:57:59 2025 by rpki-client