Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/8f9d7892-fecf-3810-935d-afa6818c2d8c.roa
File:                     8f9d7892-fecf-3810-935d-afa6818c2d8c.roa (raw, json)
Hash identifier:          yVhOdtrU5sY+L90zE0GhaLT+R6u0HfzCDOSy2yDvzR4=
Subject key identifier:   09:3B:70:83:48:CA:6E:25:93:C0:80:AD:3C:96:83:DF:0D:34:15:C1
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F4328584AECC11B7CEEE0F440CCF35140
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/8f9d7892-fecf-3810-935d-afa6818c2d8c.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     22612
IP address blocks:        198.177.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:1b:7c:ee:e0:f4:40:cc:f3:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=0c9792cb-47cd-4401-8f21-e67ce9c8dacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:13:e9:d3:8a:2e:e0:b0:21:ee:02:f0:7b:9c:
                    d5:d1:1a:7f:a7:85:0d:84:5f:04:d6:57:ee:2f:2f:
                    bd:01:1b:da:5a:22:9e:d1:be:41:61:cb:20:48:50:
                    9b:e0:4b:72:ca:74:21:98:de:d0:db:1f:2c:b0:fd:
                    3d:d1:17:4d:a0:1a:1f:b2:71:91:ec:91:ed:97:df:
                    3c:9f:df:45:74:16:7b:26:73:97:03:cc:91:54:81:
                    58:78:73:f0:85:50:7b:23:90:57:31:6a:59:dd:99:
                    44:89:32:6d:23:d4:cf:6c:c3:38:b0:20:65:f4:3c:
                    7a:65:b4:a2:3e:0b:48:57:c1:9b:53:51:89:a9:c2:
                    ba:4b:ba:c5:b9:4d:f7:6f:0a:c8:cc:f5:cb:bc:3c:
                    b4:67:60:de:85:00:7e:d0:3e:fe:48:75:f1:f3:c8:
                    46:b6:c5:b9:7d:f6:cb:ce:ff:7c:a2:bd:32:3e:65:
                    a6:6b:d4:79:7b:80:29:ef:ec:91:a9:8f:c7:23:d0:
                    48:a6:46:96:c8:d3:0f:74:e8:0c:05:8c:f1:b7:2c:
                    78:37:4d:66:8f:36:14:a1:21:b6:0c:8e:ca:66:33:
                    2e:7c:51:ca:a2:03:d2:11:83:03:32:f1:91:8c:ab:
                    94:a0:62:a5:b7:e6:86:c8:39:b8:1b:5c:21:a8:67:
                    f0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3B:70:83:48:CA:6E:25:93:C0:80:AD:3C:96:83:DF:0D:34:15:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/8f9d7892-fecf-3810-935d-afa6818c2d8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:66:7c:0e:99:bc:7d:b3:47:70:f6:87:c3:61:1c:73:b1:b3:
         bb:fb:36:12:dc:40:60:c9:cb:41:e2:af:02:d4:c9:53:38:12:
         2c:5f:fc:95:3f:45:e9:56:64:3b:97:1f:ed:49:8d:50:b4:35:
         f8:80:44:ef:cb:f8:02:fa:1d:f5:37:9b:5b:79:18:f8:4e:30:
         4d:af:45:7e:23:c6:4b:8a:91:e7:a7:55:73:72:d5:dc:fd:16:
         06:d6:dd:26:f5:72:eb:2a:98:44:18:a5:cc:c6:60:6a:37:5c:
         bf:1c:6f:28:bf:cb:8b:8c:b2:21:bd:ec:9e:a4:a9:9f:9e:bc:
         8f:f6:16:90:4a:c0:0e:54:85:a9:d5:cf:62:41:6e:43:e9:fe:
         7b:de:65:07:e3:1e:be:9c:73:93:1f:f1:ea:4e:f1:cf:6f:dd:
         dd:e6:4f:4a:03:5a:c6:5a:0f:74:0e:0f:8c:6e:8e:4f:bb:2f:
         b9:0d:71:6f:ef:d7:bd:5a:99:fe:e4:23:a1:0c:42:19:87:63:
         38:65:42:be:db:85:8c:14:11:ab:10:26:c9:4b:d2:e4:f2:52:
         8e:cf:8a:80:82:d4:cb:e2:2f:aa:1a:ca:5c:bb:3e:46:05:cd:
         39:12:65:63:f4:29:52:4c:69:49:25:b9:9f:2e:10:5b:71:21:
         8a:a6:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:58:33 2025 by rpki-client