Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9e439f19-09ab-3a16-a8e7-dbfda4837a23.roa
File:                     9e439f19-09ab-3a16-a8e7-dbfda4837a23.roa (raw, json)
Hash identifier:          QYO/ZedybloDWnk3r39J6qQ5/xpZB0JpAxxd5MQvYyM=
Subject key identifier:   41:13:34:E8:BA:DE:E4:DA:5F:4A:43:71:33:ED:DA:AA:15:4A:E6:60
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584ACE0BA3CC29B5D9CE0443B1F8
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9e439f19-09ab-3a16-a8e7-dbfda4837a23.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     14956
IP address blocks:        144.172.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:a3:cc:29:b5:d9:ce:04:43:b1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=57d2657a-92c6-403f-b6c9-053e0c115abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:ee:79:82:f3:2c:bf:e1:bc:d9:f6:5c:32:
                    2a:b6:29:d9:15:68:9f:9b:65:22:e4:1d:0c:5e:e5:
                    b3:31:09:65:b9:fb:64:d6:ed:b1:1a:83:4e:05:f4:
                    5e:d7:b9:12:3d:c9:6b:bc:45:38:d6:b8:94:be:73:
                    ee:dd:a2:51:a6:3a:92:37:f8:6c:dd:9b:f5:35:5a:
                    50:e0:9f:3d:3c:1e:91:78:28:5e:5d:07:6d:e4:cd:
                    dc:41:f6:e4:d4:75:bc:cd:fa:f4:d5:a2:ae:00:af:
                    cf:2b:29:08:f1:76:f1:d8:85:6e:2d:8c:54:2f:71:
                    d8:de:70:5e:18:7a:ff:6b:d7:7e:29:74:3a:bf:00:
                    ae:ed:6f:24:b9:08:91:48:8b:00:a4:6e:de:83:11:
                    26:50:81:59:55:bf:57:7c:ee:da:52:53:79:a0:bf:
                    e9:8b:d5:fd:17:93:39:db:8d:c9:b3:3a:49:ec:a7:
                    56:1f:56:26:c5:f5:2f:f4:6b:f3:cd:04:c4:c7:ed:
                    ba:13:34:da:18:f4:5f:3b:a3:19:fa:3b:3c:68:d4:
                    ff:b1:e0:2d:76:67:15:ea:d2:db:59:55:83:a4:41:
                    f7:47:4e:60:22:6e:4a:23:1f:c5:ce:a9:db:dc:bb:
                    60:ac:46:c9:41:3a:4d:08:4c:e9:78:90:f6:c9:11:
                    1e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:13:34:E8:BA:DE:E4:DA:5F:4A:43:71:33:ED:DA:AA:15:4A:E6:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9e439f19-09ab-3a16-a8e7-dbfda4837a23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:8e:b4:0e:da:8f:07:38:f1:2e:2c:b8:ea:79:3f:c3:b5:f5:
         d9:59:be:02:2f:1f:72:e3:c9:2e:8d:90:4e:ce:34:70:b6:3a:
         c1:1f:0e:75:a9:61:c7:02:25:7e:c3:72:21:58:a9:e2:e2:50:
         21:4c:25:c4:69:90:21:2d:fe:7e:c3:e5:fa:a9:19:e9:12:40:
         76:0d:8f:5b:da:46:7f:72:f7:7d:7d:72:b3:e4:42:21:b5:5d:
         ce:34:ee:72:d8:12:52:48:e1:df:b0:c4:d9:cf:a7:f1:e3:5c:
         22:37:1e:59:96:fd:46:99:a4:de:7d:c6:f8:04:68:45:68:17:
         2b:2d:46:4f:08:04:a6:db:40:25:6d:93:b2:04:48:66:97:d5:
         c2:a2:0f:23:3b:98:5e:51:e0:ae:61:51:81:e2:95:66:2a:c5:
         b8:c8:0b:60:3c:55:32:3a:d7:cc:3f:d0:82:98:c8:c4:9e:ba:
         67:f1:0d:fb:dc:23:5e:8a:d7:1d:63:53:ac:c9:a3:63:1e:7e:
         3b:07:d0:82:0b:4b:d9:a3:a5:c8:cc:bc:51:7a:f9:bf:cf:1c:
         3d:65:4e:69:35:d3:b3:78:45:39:08:05:05:f7:8b:a5:40:bc:
         f2:81:2d:8d:ee:ee:36:1a:d4:2d:d7:0a:1e:0a:e9:a8:e6:dc:
         bb:5b:b1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:49:05 2025 by rpki-client