Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/6b7dcf99-4b56-331e-b7c1-cb3c8cd424f3.roa
File:                     6b7dcf99-4b56-331e-b7c1-cb3c8cd424f3.roa (raw, json)
Hash identifier:          Br6U23TQBeH/ox4ZrawoB+4UqgONy7mV3kVLr+qbMeQ=
Subject key identifier:   62:D0:02:2F:C7:CB:4F:9C:7A:18:50:A3:B3:09:13:54:33:13:57:BE
Certificate issuer:       /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
Certificate serial:       010D0C9F4328584B715CB4CE3A5BE06BB03DB080
Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/6b7dcf99-4b56-331e-b7c1-cb3c8cd424f3.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     198949
IP address blocks:        198.51.243.0/24 maxlen: 24
                          198.51.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:b4:ce:3a:5b:e0:6b:b0:3d:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=e8c522dc-9b48-4cca-9a6f-22733e6ab8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:f4:1a:dc:87:16:35:67:41:3f:ec:a3:e9:
                    5c:a0:9e:d1:f0:2e:06:ec:c7:ba:36:be:09:9b:33:
                    2d:bb:88:53:a0:21:30:fe:96:12:18:8c:39:00:a1:
                    5d:4a:34:b5:b3:ee:35:ee:08:c9:f4:36:67:84:cd:
                    8f:94:cc:5f:51:f7:37:e9:a7:17:7e:0e:5f:d6:a0:
                    95:0d:2e:01:2e:dd:07:80:cd:4c:de:c0:9d:4c:d7:
                    d9:37:f9:f4:c1:da:6b:35:0c:27:5b:38:de:b3:ca:
                    84:0c:13:11:71:f1:67:c1:07:6b:12:83:52:77:37:
                    59:00:03:c7:32:4c:31:b0:e7:b3:2c:2e:de:88:20:
                    16:aa:3b:07:91:79:e8:6b:c6:a7:c9:fd:99:02:5c:
                    50:69:2a:7f:e9:8c:7e:df:ea:70:19:33:9a:eb:17:
                    85:60:5e:a3:f3:76:b1:19:eb:4b:a4:6d:05:95:41:
                    d9:52:18:34:b7:6e:8d:d4:77:b2:2a:5c:c3:8b:d6:
                    8c:90:bf:c1:f9:8e:15:9b:99:05:42:a0:d7:54:3c:
                    87:dc:6e:99:c7:cc:86:11:ca:91:c6:34:af:9b:94:
                    0b:ab:5b:e5:47:92:f9:0f:68:b1:98:b7:bf:6a:68:
                    97:29:44:ab:2c:29:66:c7:79:56:5f:f9:14:3b:0e:
                    a0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D0:02:2F:C7:CB:4F:9C:7A:18:50:A3:B3:09:13:54:33:13:57:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/6b7dcf99-4b56-331e-b7c1-cb3c8cd424f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl

            X509v3 Authority Key Identifier:
                keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.243.0-198.51.244.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ce:30:c0:4d:e0:6e:2d:a7:5c:c4:d1:c9:80:1e:66:5e:b6:
         44:80:b0:39:0b:28:4b:54:02:30:4d:97:f3:00:68:d0:7b:8e:
         f7:03:50:65:00:85:15:85:e4:dc:85:bf:79:d5:f5:72:2f:1a:
         92:b6:c3:56:a5:04:77:d3:cd:44:9b:02:38:88:44:e8:6e:69:
         1c:1b:96:2a:2c:e0:9d:c0:83:7a:59:c9:46:5f:ee:6a:54:24:
         20:a6:27:2c:71:ac:7e:42:9f:4f:f6:e9:b1:77:64:c0:98:42:
         31:63:f1:a3:da:4f:eb:fa:3a:00:a8:c4:df:34:72:ac:0d:c4:
         f0:32:bc:41:49:e0:9a:52:39:f2:19:73:02:6c:80:a8:3b:44:
         ea:ee:02:bf:f2:64:87:89:fb:74:ff:90:b4:e4:b7:8d:e9:f9:
         a7:63:7d:af:90:d8:15:3b:c4:e8:12:d7:76:8e:3d:f6:3e:44:
         5d:17:27:92:cc:44:78:0e:82:1a:03:cd:54:4d:a8:05:2f:64:
         fd:ae:5d:34:6e:71:be:e4:2a:58:1d:23:76:e7:73:67:6c:43:
         c9:bb:bc:ef:d6:db:e6:09:ba:5a:a5:6b:5f:f3:e3:9f:14:60:
         cc:64:0f:74:64:d0:cf:0b:9a:54:5f:f3:e1:95:9b:c6:83:ea:
         22:c7:76:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:22:14 2025 by rpki-client