Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/320fdeb8-c471-3094-a6ba-daefddc52f23.roa
File:                     320fdeb8-c471-3094-a6ba-daefddc52f23.roa (raw, json)
Hash identifier:          BkxJzYWjNJtWmMopi+ImLHsG/+JYC5ACdwgvct55MBU=
Subject key identifier:   8F:98:73:25:A8:8A:84:6A:C6:DB:1E:9A:96:E8:80:2C:12:91:25:11
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B3F1C5DFCD53D453AE02B0100
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/320fdeb8-c471-3094-a6ba-daefddc52f23.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     30058
IP address blocks:        198.16.100.0/23 maxlen: 23
                          198.16.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:5d:fc:d5:3d:45:3a:e0:2b:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=488ee222-a7f9-42bb-80c1-224a55d03aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:30:01:28:8b:cc:42:87:b8:e6:52:a7:9b:
                    5f:5d:3d:78:d9:24:b2:af:4e:19:7e:ad:2b:72:8e:
                    9a:fe:93:ff:45:6b:27:f2:4d:73:0a:6f:c6:44:de:
                    57:47:68:eb:a1:fe:ac:3f:5c:7b:83:08:0f:c4:a7:
                    13:b4:c4:5e:6d:9a:a2:12:d8:37:ab:1d:6f:eb:ec:
                    a0:90:de:50:a9:9c:19:13:9e:43:84:9f:2d:df:c9:
                    cd:01:96:a5:52:82:03:5f:a2:ad:c8:e1:34:0a:34:
                    e1:52:68:7b:cb:ca:a7:7e:5a:91:cd:c9:21:77:4e:
                    ea:3c:d9:f7:80:8e:df:67:db:13:5e:d9:f5:d0:ab:
                    16:34:00:52:b0:57:ee:02:61:89:4c:b7:c7:f9:bd:
                    ac:37:77:bb:9d:ac:4a:64:2c:9e:21:f5:90:d6:8e:
                    60:8c:0d:79:6a:a3:bf:47:98:19:9a:53:f1:ad:52:
                    dc:63:57:47:33:5a:cc:3a:4a:98:ff:f4:44:d9:97:
                    37:4a:1d:54:10:3a:14:57:d7:46:8d:21:bf:ef:fa:
                    b3:ad:f0:64:10:12:a0:40:b9:7e:5f:d9:93:a1:55:
                    e8:31:db:21:51:6d:2c:0f:bb:e9:b3:69:72:03:a3:
                    be:33:be:d4:34:25:2f:6b:d4:57:0c:a4:98:e1:1e:
                    e5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:98:73:25:A8:8A:84:6A:C6:DB:1E:9A:96:E8:80:2C:12:91:25:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/320fdeb8-c471-3094-a6ba-daefddc52f23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.16.100.0/23
                  198.16.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:fa:68:59:be:1e:47:73:64:67:94:17:d4:8a:c9:9f:a6:e7:
         d1:64:f8:c8:f2:de:7d:4b:e3:44:40:dd:e5:c7:ae:96:69:ff:
         60:66:9a:1a:e2:e9:71:ee:7e:a7:70:d4:70:a9:f6:d6:2f:da:
         c5:a1:9f:7f:0c:65:3f:0e:26:c0:92:a7:a4:e2:b6:8d:d9:ae:
         37:93:56:4a:00:48:06:f9:57:d6:b7:8b:5e:81:82:31:e4:98:
         8d:32:7f:14:28:d5:90:50:47:25:63:78:15:9d:af:c6:dd:5f:
         7c:db:df:ad:a3:c3:7e:ac:82:75:fd:24:78:b5:a6:e3:0d:38:
         60:7b:c4:b3:85:e9:3f:fa:1b:9f:16:39:c2:98:f9:1a:68:01:
         26:79:04:15:0b:86:18:9d:78:57:3e:0c:2c:68:06:f7:26:9b:
         4b:a2:be:6b:34:83:eb:c8:1f:b1:33:de:3a:49:2d:f7:72:9e:
         29:bb:fa:76:05:63:8d:74:7a:57:9e:d4:6c:be:57:62:9e:c8:
         dc:93:77:af:1f:ca:6d:0a:8a:27:84:05:39:28:78:b2:03:43:
         0c:f6:21:fb:83:29:b9:e9:6d:b9:00:28:7f:9b:fc:ad:cb:72:
         8d:79:d7:a4:ac:f1:4e:f3:89:13:18:1f:92:bb:d1:9f:80:29:
         0b:73:11:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:59:48 2025 by rpki-client