Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/958bfc7c-2636-382b-b67f-ff905538c406.roa
File:                     958bfc7c-2636-382b-b67f-ff905538c406.roa (raw, json)
Hash identifier:          SMHxLBI+1gFOEQSaWBtVITKU3Fn+ldUdj00G+Z4XVhU=
Subject key identifier:   25:96:84:F9:FB:79:89:81:AA:66:40:05:6F:BB:AF:49:B4:50:50:AB
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584A4F05C5A1FB85DA6C9F686BC0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/958bfc7c-2636-382b-b67f-ff905538c406.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     9009
IP address blocks:        198.145.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c5:a1:fb:85:da:6c:9f:68:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=3ddee553-46e4-45b5-b039-80e1d2f5aae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e9:49:a6:a4:b3:54:07:0a:ff:f2:39:ba:45:
                    7c:22:0f:44:7a:44:8a:5b:2f:fd:f0:82:fd:44:0a:
                    d1:6f:5a:f0:d4:92:d6:43:01:a9:29:af:76:01:1b:
                    97:c1:c0:18:54:0d:b0:2d:c1:34:40:49:4c:c6:cb:
                    0a:d8:bd:8a:43:25:86:19:b9:38:aa:7f:00:c2:ac:
                    9e:68:47:f4:44:2d:51:4a:5b:7c:57:22:fa:b4:01:
                    85:d1:ff:fd:5a:50:5e:85:dc:e0:01:ff:c6:f4:73:
                    62:1a:28:f6:ab:1f:50:21:28:92:84:4d:ae:2f:36:
                    76:39:a4:2a:6d:13:7d:e6:a2:43:eb:0b:38:e1:a2:
                    8f:69:67:99:93:9f:16:bc:03:1d:b8:f0:55:18:17:
                    50:5b:2c:15:81:2d:08:16:3b:d4:04:7e:de:1e:46:
                    07:6f:b9:06:dc:c5:97:96:6d:04:a7:f7:26:27:bb:
                    cb:5e:70:77:44:fa:73:ae:dc:dc:37:cd:c3:23:ef:
                    77:0e:f6:57:13:b5:7a:1c:8a:2d:69:1a:51:04:b1:
                    60:9a:d3:43:3a:a0:52:b1:cb:c8:5e:91:3e:54:96:
                    03:c9:92:3c:6e:d0:8a:e1:4e:44:74:5e:68:b3:9e:
                    81:5f:de:d2:09:2d:14:8d:be:9a:51:e1:56:fb:40:
                    49:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:96:84:F9:FB:79:89:81:AA:66:40:05:6F:BB:AF:49:B4:50:50:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/958bfc7c-2636-382b-b67f-ff905538c406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:e0:53:5d:d8:8b:8f:c0:59:2d:f1:be:1c:7e:c5:59:65:c8:
         3c:82:b8:6e:ef:f9:3e:f1:63:ed:03:c6:2a:37:48:72:75:7a:
         40:e9:6f:ae:22:68:5f:0f:39:07:f8:91:ab:2a:3c:79:5b:58:
         39:1f:ce:e7:4a:c9:4f:76:92:1c:d4:ce:d5:9f:4a:06:40:60:
         e1:54:76:3a:eb:76:b3:6a:a6:0e:a0:53:43:ac:0c:32:32:51:
         79:2d:2f:7c:6e:e5:23:0b:9c:b3:0e:8b:6b:63:6c:37:84:75:
         ef:b6:1e:a0:59:54:57:43:94:7e:94:58:81:e7:16:29:24:cf:
         fa:be:af:18:a1:44:45:a9:9d:53:0f:96:39:ef:5a:e6:7f:b7:
         9d:ea:77:da:45:77:33:ce:18:3c:d3:92:03:5d:15:e7:8b:f9:
         b1:dc:5b:40:5c:06:c1:06:e3:73:63:f1:9e:23:17:b0:7a:f9:
         28:f8:a4:7d:98:66:d2:bc:6b:26:0d:2f:d1:ad:c4:56:11:73:
         98:1b:e0:a9:cf:42:8d:7c:6b:36:56:07:c7:c0:47:82:cb:59:
         9d:bb:be:62:26:97:86:8e:da:61:3b:9b:13:0f:4e:18:e0:4e:
         4c:5d:2d:02:bb:47:6a:a9:7c:07:d7:3c:6f:81:51:d8:6d:7b:
         bf:9d:0f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:30:22 2025 by rpki-client