Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/179e34cd-f6d3-3e45-bc18-e63c36e7b795.roa
File:                     179e34cd-f6d3-3e45-bc18-e63c36e7b795.roa (raw, json)
Hash identifier:          Wnj62vRrmTrr1Azvf41S4Lzjgtnx3nQvY6eTBooFfBI=
Subject key identifier:   BA:7F:58:FA:A4:BB:E3:D1:D1:55:F0:96:A0:0F:BF:67:A1:A2:CD:89
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584AE46127225669BE8985A9FB00
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/179e34cd-f6d3-3e45-bc18-e63c36e7b795.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     36692
IP address blocks:        198.41.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:27:22:56:69:be:89:85:a9:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=e2cb7c24-5010-46d0-bbeb-919aab52b7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:e8:91:f4:63:53:a4:90:b2:82:c1:57:31:
                    ff:9a:08:40:80:a5:ab:a8:c7:ec:73:08:84:bc:2f:
                    78:e3:2b:83:f8:c8:6d:4c:ea:19:a6:c4:d1:87:64:
                    b2:89:06:4b:56:8f:35:d7:f3:0c:d6:e3:de:47:6d:
                    e3:c6:82:76:95:c7:50:50:b2:c8:45:59:1e:3b:77:
                    a4:15:2c:cd:c1:79:b9:8a:ac:ca:4f:e2:3a:f0:45:
                    15:a1:a7:ef:85:54:aa:26:0b:9a:02:a5:2d:ce:25:
                    ed:34:c5:6d:6f:db:1f:17:63:e6:a0:df:9b:4e:0a:
                    71:f9:7e:6b:79:83:31:30:e6:29:c6:46:64:89:72:
                    10:93:ca:ed:74:8b:f6:9d:98:8b:a3:49:ad:dc:c6:
                    0b:d6:ab:ac:7b:a6:41:1c:7d:4e:cb:d1:36:aa:50:
                    4c:ea:4b:48:0e:60:6e:ac:35:d1:32:1a:b6:7e:6d:
                    05:09:7c:78:d5:cf:64:0f:dd:99:3f:13:be:1b:90:
                    5f:b3:c2:5a:65:a1:19:00:5b:f6:fd:10:ec:6a:5d:
                    9a:ca:45:33:b5:34:b5:0d:4f:21:47:3c:33:f7:90:
                    f7:1d:61:a3:55:4c:0d:75:80:8a:7d:e1:4a:5d:92:
                    ff:a7:ea:2e:c8:20:9a:3c:ba:e7:a8:40:8d:1c:75:
                    80:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7F:58:FA:A4:BB:E3:D1:D1:55:F0:96:A0:0F:BF:67:A1:A2:CD:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/179e34cd-f6d3-3e45-bc18-e63c36e7b795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e9:4f:c7:c7:21:0d:ff:a6:80:82:14:b7:38:9f:2d:18:d8:
         fc:a4:51:b9:6b:8e:67:14:56:66:74:b7:7d:15:27:20:af:c1:
         c0:e2:d4:95:ae:4f:38:3c:6b:1b:04:63:48:34:61:22:91:39:
         0f:9b:a4:51:0f:b6:07:d1:e2:d6:41:e4:2e:26:9a:79:2d:70:
         d8:54:87:b5:3e:3b:82:46:1c:e5:24:9a:ac:c5:d3:95:46:c5:
         23:60:af:f9:59:58:d7:e7:54:d2:48:d2:9d:51:57:3d:08:37:
         2f:c0:5e:1f:07:d5:96:18:b4:ec:b4:dc:4d:89:61:66:d9:22:
         0c:ff:4a:a3:b0:e3:c7:c1:83:c1:91:2e:6c:93:7c:88:7f:6e:
         73:92:ac:ca:5c:01:26:ba:7f:fd:82:fe:d8:fe:91:af:d9:c4:
         2d:65:3e:5f:df:28:4e:ed:da:22:a2:48:54:bc:2d:e1:d7:ee:
         90:f4:99:e0:02:cb:10:1a:8d:0a:f8:3e:3c:41:67:27:9c:cc:
         db:d6:cc:9e:f7:bb:6c:86:36:0a:96:2f:89:2f:d9:21:76:7e:
         54:a1:c5:a8:68:df:a6:d4:ee:6e:36:87:c0:38:da:73:d5:9d:
         9d:bb:80:56:15:c4:d8:f6:05:4c:ce:fd:f3:fd:9b:88:06:6f:
         ce:5a:5c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:12:14 2025 by rpki-client