Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4849f9a8-bbec-3693-84c8-f045aee6d2bf.roa
File:                     4849f9a8-bbec-3693-84c8-f045aee6d2bf.roa (raw, json)
Hash identifier:          iDxUVPjEm2C9ozQVU27EkGRELaW21KlEvqSfrzjvx24=
Subject key identifier:   83:E7:1C:EC:92:17:F1:05:63:44:33:57:43:E9:FE:2F:59:3D:5A:5C
Certificate issuer:       /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Certificate serial:       010D0C9F4328584AE46121099D0A68958983F580
Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4849f9a8-bbec-3693-84c8-f045aee6d2bf.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        198.175.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:21:09:9d:0a:68:95:89:83:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=f9461090-3a12-4702-bbea-975cf93002bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:18:26:43:bd:e8:2e:c2:6d:ee:87:56:16:
                    9a:57:af:74:f5:ae:64:a5:49:a9:ef:7d:d8:a2:67:
                    fd:30:67:b7:81:44:fd:9e:b7:52:a0:2b:ed:47:6d:
                    c8:ea:f9:50:07:0d:90:5b:04:7b:b2:05:f6:c2:22:
                    e7:5c:4b:26:9a:5b:7f:79:7b:56:4f:0e:ac:ea:21:
                    a0:1a:9c:fd:4b:6d:3f:b5:71:84:60:00:8a:87:bc:
                    f7:e2:3a:74:a7:e8:10:55:95:76:3f:bb:b3:4e:ca:
                    41:b5:7b:8e:a9:ed:00:9b:2e:d4:b2:08:bb:ae:38:
                    82:63:8e:71:a0:11:e0:1a:2d:47:a1:6b:03:95:22:
                    d6:43:db:2e:35:e5:e0:ff:c5:5f:ac:1c:92:5b:bc:
                    7d:96:eb:fd:03:64:6c:81:af:d9:42:5b:af:8f:93:
                    e9:aa:a2:29:fb:df:1f:19:d1:dc:7a:59:79:dc:1f:
                    54:ad:67:7f:2d:03:de:9c:6c:a3:2f:80:d6:39:a5:
                    8d:5e:6c:03:69:c1:3e:14:04:51:4f:4f:54:65:4f:
                    45:a3:f1:3a:a2:12:ba:0e:bf:0c:81:26:8c:d8:b3:
                    48:57:ec:f9:e8:10:68:a4:8f:43:de:54:a5:6d:5b:
                    05:97:d5:57:0c:14:8c:ec:ad:ad:64:33:16:0c:41:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E7:1C:EC:92:17:F1:05:63:44:33:57:43:E9:FE:2F:59:3D:5A:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4849f9a8-bbec-3693-84c8-f045aee6d2bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl

            X509v3 Authority Key Identifier:
                keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:40:90:e6:64:cd:8a:47:71:9e:42:1c:f4:60:fa:6a:1f:46:
         0a:cb:0f:56:3f:6f:fd:9f:ec:0b:59:9a:74:f2:a2:86:15:fe:
         9e:b2:57:fa:41:a4:b8:fa:93:06:c2:de:ee:a4:75:9a:72:c8:
         11:bd:ca:58:a6:34:8d:38:80:5b:b1:ec:bc:1e:33:df:99:bf:
         61:e6:09:5a:ea:cb:ec:d6:30:89:c0:0d:88:d9:ee:37:57:06:
         a1:e9:fb:dc:a4:ca:75:54:2c:4f:ad:8b:a8:e0:f6:fb:79:96:
         6c:d8:74:29:10:07:a4:0b:37:4e:38:9b:ee:4b:db:df:83:c5:
         56:d6:b2:7d:de:60:5a:b8:8a:0f:e4:d1:25:30:bf:ca:ca:09:
         19:32:fa:47:63:2d:03:49:61:d7:2c:aa:a4:9b:bc:50:04:3e:
         2e:21:65:55:c0:1e:c4:0d:0d:e8:df:cb:4f:e7:85:ed:b2:e5:
         cb:b3:bb:18:4c:8e:fd:3f:c6:42:0d:0b:6e:98:bf:26:fb:a2:
         d9:82:7e:db:d8:08:7d:8a:35:f5:81:90:fc:25:be:be:2c:ce:
         b3:b1:46:12:50:5f:35:e0:ea:48:e9:5a:ca:f1:d7:54:3d:f4:
         81:90:10:5c:d8:1a:57:e1:17:0e:61:32:80:01:9e:ed:e6:f0:
         3a:d6:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:14:00 2025 by rpki-client