Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/345bda5b-c8e2-3ed9-a8ff-239bcb371819.roa
File:                     345bda5b-c8e2-3ed9-a8ff-239bcb371819.roa (raw, json)
Hash identifier:          GzhY4K1fGtKy9EkK39LcbrL2tISXVPnUdIDdbdWk18w=
Subject key identifier:   C2:16:4E:8F:7F:55:A7:C1:2D:24:81:E5:4A:A4:96:9E:A6:E6:9C:0F
Certificate issuer:       /CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
Certificate serial:       010D0C9F4328584B64CE71BFC30286F66D9DDC00
Authority key identifier: C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/345bda5b-c8e2-3ed9-a8ff-239bcb371819.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     400136
IP address blocks:        98.143.148.0/22 maxlen: 24
                          98.143.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:71:bf:c3:02:86:f6:6d:9d:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=055b3f88-66dc-4e64-a35a-52eea8f7fb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9b:6e:b3:15:89:6f:40:4f:cc:50:80:ef:05:
                    8f:c1:e9:93:cc:76:27:df:76:92:80:d7:4a:d6:b8:
                    07:39:15:39:82:25:a0:29:e0:fa:63:33:67:e2:7c:
                    ed:5c:17:f3:7c:90:3d:89:73:b4:39:2b:01:d4:17:
                    d3:01:a5:3c:37:ef:b0:68:6d:84:8e:fa:ec:05:84:
                    c4:fc:68:4a:d4:15:2a:01:2a:08:cc:9d:a5:74:07:
                    b6:f4:51:da:06:de:2c:2a:7f:d1:14:a3:76:b6:ad:
                    c9:98:85:69:d4:a8:a7:52:8f:2c:17:d0:d7:45:98:
                    58:59:2a:b1:6c:07:50:82:81:19:dd:04:73:78:98:
                    6f:e2:3b:fe:fa:3a:5f:44:64:4d:b7:0e:3d:a5:b0:
                    73:46:c4:8a:f4:90:1c:ca:d6:04:ca:b4:1c:d3:db:
                    04:15:7c:c9:da:21:3e:5b:42:35:99:4e:49:e6:f2:
                    0b:15:16:26:3c:0d:9d:14:58:fa:6c:2c:6b:1c:a6:
                    9f:ac:6f:e8:0a:66:0a:f2:33:b4:d2:d4:40:d2:f6:
                    11:3e:32:f2:3f:dc:4f:bd:cd:2d:c6:1d:2b:96:bd:
                    7b:58:78:64:b4:ec:66:ef:9c:cf:32:f3:d5:5a:dc:
                    d8:90:2e:d1:98:1a:4e:76:22:95:2b:ff:d8:49:1d:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:16:4E:8F:7F:55:A7:C1:2D:24:81:E5:4A:A4:96:9E:A6:E6:9C:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/345bda5b-c8e2-3ed9-a8ff-239bcb371819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl

            X509v3 Authority Key Identifier:
                keyid:C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.143.148.0-98.143.155.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:3f:2f:a4:ac:b9:75:db:71:06:19:9f:ef:06:4e:e2:df:e5:
         ca:86:02:70:49:33:5e:ae:74:a9:f9:0e:dd:7c:a3:36:17:06:
         90:a1:5b:29:ef:9e:6a:ed:0c:d3:bc:b5:c6:69:6e:76:3c:bb:
         cb:45:ce:7c:97:6b:6d:e5:21:95:09:be:75:a2:36:29:92:af:
         53:ad:96:52:42:b2:67:12:21:05:ac:95:16:2b:2d:62:93:40:
         5f:4d:7e:d2:76:f7:dd:7c:90:be:2b:e5:9a:b0:2f:eb:e3:6d:
         94:3a:c4:8b:64:aa:02:48:be:86:b9:02:c7:7d:4e:c6:f3:60:
         5e:e7:77:f6:bd:9d:93:68:d6:e2:15:d2:e8:6b:73:59:cc:ee:
         cc:7f:d2:50:c4:ea:f6:0b:73:a7:d1:e3:95:c5:d4:1c:ae:2e:
         26:21:df:3f:7a:0b:50:1b:40:b6:03:61:b9:24:fe:74:db:b4:
         ea:2f:ca:40:a2:ca:39:16:dc:d9:26:60:6c:86:4d:3e:62:16:
         80:2c:cf:00:b3:1a:82:66:1a:78:c1:06:39:f3:4b:f2:a6:38:
         e3:4a:60:3b:e6:2b:6a:23:0b:78:b1:99:95:0d:36:d9:b8:64:
         29:35:dc:f8:06:56:28:8a:e3:2b:76:72:0b:bc:46:02:7d:ff:
         c4:8b:ba:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:31:49 2025 by rpki-client