Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/98492d20-94d0-3805-bd11-6d9e0a9d8c42.roa
File:                     98492d20-94d0-3805-bd11-6d9e0a9d8c42.roa (raw, json)
Hash identifier:          FTKqRZYnMu/rjEcG5njGPEUbDRo/nSB3LRK+6IQPQzU=
Subject key identifier:   EC:23:7C:1B:80:2D:7E:5A:3D:3F:16:66:6A:A6:81:D7:72:98:9B:6F
Certificate issuer:       /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Certificate serial:       010D0C9F4328584AC7111D7DA77509B9D57A2580
Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/98492d20-94d0-3805-bd11-6d9e0a9d8c42.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13347
IP address blocks:        206.174.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:1d:7d:a7:75:09:b9:d5:7a:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=ed9c5089-1a18-486e-97a9-cd66498f7755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:50:ca:61:6b:e0:c7:00:95:f3:87:d4:96:
                    c9:77:49:34:89:3b:b1:4b:34:46:0e:53:1e:da:a7:
                    83:86:ae:cb:3f:cb:16:55:93:b7:56:21:6b:b9:24:
                    8d:b3:7b:c1:d7:f5:99:56:9c:48:1b:84:2e:d4:2d:
                    5e:42:31:78:ef:b6:2f:bd:84:b2:2d:18:ba:81:5e:
                    4c:1b:fb:15:41:fc:38:56:c6:d7:8b:7c:af:70:b1:
                    5e:c2:08:da:d3:12:da:f5:40:43:1e:3d:d7:07:36:
                    61:77:5b:34:6e:be:5b:fe:0d:4f:76:3c:82:61:1d:
                    a0:5a:a6:7a:01:94:00:3d:48:18:34:7a:42:5a:0c:
                    b6:bf:c8:76:8a:99:57:5d:fd:e5:63:26:74:54:06:
                    0e:e3:f7:6d:b4:44:e8:e6:17:59:7c:ba:c2:2c:60:
                    ff:f2:95:a4:f8:62:fe:59:02:94:34:bc:a4:11:db:
                    b7:76:6e:ad:1a:a1:db:eb:a0:30:ec:8e:e6:5d:02:
                    c8:76:15:1b:0a:f7:52:3f:13:3f:00:2f:c1:5c:37:
                    c4:83:d6:98:ad:d7:e4:63:3a:97:a9:97:b3:51:c3:
                    96:4f:4d:04:ee:37:c7:49:4c:34:78:7e:ea:2b:0e:
                    42:eb:87:6a:03:86:6f:33:a4:41:59:ea:5e:73:06:
                    9a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:23:7C:1B:80:2D:7E:5A:3D:3F:16:66:6A:A6:81:D7:72:98:9B:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/98492d20-94d0-3805-bd11-6d9e0a9d8c42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl

            X509v3 Authority Key Identifier:
                keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.174.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:4a:9c:a9:c5:55:e2:d1:df:b3:a7:92:2b:e2:76:8f:ff:c6:
         22:b7:37:5d:04:27:d2:1a:36:ce:80:78:4a:ea:7d:27:96:65:
         e4:e3:f7:eb:c0:c5:08:7b:a8:de:b9:f9:21:cf:d3:5c:81:bd:
         a7:89:c2:70:d8:89:b2:0f:ed:98:a5:dd:2c:1f:e4:f2:f1:f9:
         99:c2:5a:03:65:cd:bc:a3:ee:48:fa:21:a9:05:20:b8:53:05:
         0e:45:70:a3:c7:9e:2d:0d:23:76:5e:8f:c9:68:5e:66:4c:8c:
         37:72:be:e2:58:35:ca:92:8b:b0:82:11:65:c2:80:31:3c:6f:
         d8:95:ee:6c:a8:0f:d0:b6:d8:60:ab:7b:78:5a:87:5d:98:e3:
         d5:72:8b:b7:0d:e6:1f:15:8e:d0:a3:98:14:80:dd:a4:ec:85:
         fd:aa:56:54:dd:dc:cc:d9:6b:64:1c:42:6d:4e:5d:d4:04:03:
         90:db:45:ce:89:ea:d8:e8:ed:20:04:08:f1:07:80:ba:cf:be:
         b0:76:8e:75:52:0e:78:0c:48:de:59:0c:fd:c8:a1:e2:20:6e:
         39:55:40:6f:3e:ed:8c:46:82:a7:96:c1:23:b6:e1:7e:ba:9b:
         3f:78:6e:81:ba:0a:76:f9:92:c9:60:b5:97:c3:a4:d7:b5:08:
         80:2d:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:08:29 2025 by rpki-client