Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa
File:                     d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa (raw, json)
Hash identifier:          5Rlq6bBLTaGtbDPU7RgbMQA0kvnNDfMNO3ErpfuHOo8=
Subject key identifier:   0F:B9:30:D2:D9:4D:C5:3F:3F:7F:5A:81:17:10:4D:15:4A:66:31:1E
Certificate issuer:       /CN=21428d3a-0040-4c60-9202-cd68b2fd51de
Certificate serial:       010D0C9F4328584AC9DBAFE75238E44B28D89E80
Authority key identifier: 3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        198.207.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:af:e7:52:38:e4:4b:28:d8:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21428d3a-0040-4c60-9202-cd68b2fd51de
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=ac1081f2-d87c-4432-a1fd-74f84a385020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:18:ec:d0:0a:79:e6:4a:e6:2c:f4:06:2d:
                    93:d5:da:70:03:45:75:34:06:4d:7d:f1:38:50:9c:
                    7b:57:f2:18:30:21:6b:ab:50:0a:66:b5:d4:bd:e4:
                    3a:50:c1:26:57:4b:34:2c:c3:92:12:ce:b9:48:ae:
                    f4:58:0b:b7:62:e3:01:9a:66:94:7a:e2:10:61:df:
                    0b:65:85:8c:a6:6c:39:a2:55:45:58:ab:19:19:b2:
                    70:19:83:21:45:27:c2:cb:04:a5:1f:33:8c:fa:d1:
                    8a:9d:70:e0:87:48:1b:c9:b0:b8:79:58:0f:67:4f:
                    24:95:31:c7:4d:fa:78:e9:4b:7a:77:20:cf:94:42:
                    72:b0:37:95:2f:31:6b:fb:1f:1c:40:0b:26:8d:d0:
                    ea:3f:cb:c9:a8:6c:65:7f:96:98:2c:b9:a0:fc:fb:
                    e5:f3:7e:dd:18:e8:5a:a3:26:4f:0f:1d:03:d0:63:
                    8a:63:15:b0:74:f0:2e:ee:6d:47:33:51:8c:5f:3f:
                    11:94:23:21:1e:9a:63:d5:29:b2:a4:27:0e:b6:23:
                    de:f5:a6:86:55:84:c3:01:f5:35:ae:51:51:4d:36:
                    b2:34:60:46:6d:7e:09:87:11:43:8c:46:93:0e:1b:
                    a2:6b:93:ad:d4:ae:28:73:c2:dd:9b:2b:8f:ce:19:
                    cb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B9:30:D2:D9:4D:C5:3F:3F:7F:5A:81:17:10:4D:15:4A:66:31:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:f4:a0:2d:25:7c:4a:ce:7e:87:63:7a:d9:91:ff:85:eb:d9:
         77:b5:ad:cf:19:9e:72:0d:f3:52:16:c9:26:55:d0:f0:2b:53:
         34:cb:ab:2a:f2:bc:31:b0:76:e8:44:d0:16:fe:c5:87:3b:20:
         b8:74:11:82:99:a8:7e:3b:30:79:86:0b:e2:c4:fd:ee:90:f4:
         58:27:77:14:ca:a5:fd:36:01:60:d7:91:ff:4c:06:59:ab:ee:
         5f:00:9f:26:df:98:c3:4a:5d:6a:ea:f7:9f:bd:1a:20:74:c4:
         83:aa:49:ea:be:84:53:70:fa:86:fa:56:2c:d6:d1:82:7e:a9:
         1e:c7:38:0b:87:64:82:8b:73:72:6a:0e:59:ca:f9:db:48:5b:
         c3:be:41:cb:53:df:85:4d:69:6c:d9:19:9a:5c:a3:cf:ef:ed:
         a3:5e:38:3b:fb:1a:01:a2:bd:30:3d:a2:53:3f:d9:8d:1e:56:
         f0:3e:a8:69:07:59:64:c9:ad:a6:51:c6:7e:3d:cd:52:59:46:
         42:7a:f6:d7:8a:bc:13:62:d3:57:f8:7d:7c:29:7c:a6:f4:ae:
         e7:bb:d6:b3:b1:fb:79:78:29:48:97:4c:55:d2:36:99:e5:0c:
         41:6b:3e:2a:7a:8c:1e:f1:a6:6e:3f:cb:16:6e:13:15:3b:da:
         41:48:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:14:16 2025 by rpki-client