Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ce94a7b9-c57c-35f2-892f-ea5fdca21d5b.roa
File:                     ce94a7b9-c57c-35f2-892f-ea5fdca21d5b.roa (raw, json)
Hash identifier:          KnWo6KxWZSmRADW6pXPb3K/83qnoQmt9eJsOEHIksPA=
Subject key identifier:   B3:5F:E0:AC:E8:8F:23:DC:99:54:66:76:06:A0:9C:B6:AE:8E:A9:42
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584B64CCA00D6848A47CDC9E4240
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ce94a7b9-c57c-35f2-892f-ea5fdca21d5b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     212238
IP address blocks:        98.159.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:a0:0d:68:48:a4:7c:dc:9e:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b6c9767f-d8ac-409b-a574-ef3527c3e34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:2b:b7:7a:8e:37:d7:02:38:2a:01:6f:63:
                    3a:65:a1:c1:a5:2d:47:54:ef:18:31:d5:04:a8:c6:
                    66:b9:97:b5:8f:93:3a:16:11:c7:2a:7f:d1:a8:b8:
                    54:5f:43:c7:5d:3f:30:d5:6a:f3:b1:5e:ee:d8:44:
                    36:ff:b8:bb:6f:e5:bc:aa:8c:14:50:a7:d3:6c:26:
                    c0:0e:04:ea:43:48:4a:10:47:1a:4f:e8:84:3a:7e:
                    ac:f2:69:a9:d8:d3:ac:a2:1c:02:b5:20:94:00:c3:
                    94:2a:d5:68:02:62:c5:c6:73:a4:e6:2e:cd:71:a6:
                    6a:05:1a:cf:28:31:a4:8c:e3:7a:3e:db:7f:9f:3e:
                    c9:8d:f1:f6:d2:0f:9c:3f:da:b9:e3:16:e6:ca:e2:
                    c3:5e:28:b6:95:ea:78:5d:6f:50:35:6f:03:17:09:
                    ba:ec:47:8f:8b:d0:9f:20:96:3e:5f:f3:5e:20:6c:
                    25:5b:ca:50:ac:25:71:a8:32:73:b2:91:cc:08:52:
                    19:95:73:7e:41:cb:58:fe:97:8a:d3:2d:00:f8:22:
                    c7:e6:c5:4d:a3:b1:61:2e:da:0e:fe:77:89:67:d6:
                    e5:56:f1:d4:a3:17:fa:c6:a3:7f:3c:0b:12:66:f2:
                    04:ae:db:1c:04:65:4b:c4:0e:9c:ad:4e:3a:9f:18:
                    6b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5F:E0:AC:E8:8F:23:DC:99:54:66:76:06:A0:9C:B6:AE:8E:A9:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ce94a7b9-c57c-35f2-892f-ea5fdca21d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:0b:c6:86:69:b6:02:ac:b4:84:27:7a:2b:39:38:d1:0a:a3:
         6e:47:66:44:ab:78:ab:c2:40:fc:37:4c:c5:03:2a:be:0c:66:
         96:ee:61:cf:77:48:b6:bd:61:72:73:11:8f:c7:35:cb:a1:13:
         ac:a4:7e:2f:fe:c0:df:17:c6:00:89:5d:50:24:78:32:ea:c3:
         64:b1:fd:63:d7:69:9b:60:91:00:9e:aa:16:fb:76:c8:fb:73:
         dd:9e:ab:f3:30:7d:76:9a:e2:0f:8b:52:cf:9a:f7:d0:88:6e:
         0b:ae:43:1d:f2:8a:02:c0:ab:3c:e3:0f:7f:04:5f:6f:e0:f9:
         cd:73:1f:5c:8b:d3:14:5a:a3:ab:38:22:c1:6e:9b:30:01:09:
         88:28:27:fe:04:30:95:73:d8:10:42:9d:de:7b:67:3a:bf:9d:
         92:83:fe:bf:66:04:ef:35:ad:9e:76:49:05:97:b5:9a:7e:ef:
         2e:5a:d4:2f:db:eb:00:32:f3:91:83:22:fe:3f:6f:00:37:d9:
         9b:33:50:a6:17:b1:a1:28:c4:26:53:cf:0d:3e:de:f3:53:8f:
         c0:a2:fb:97:b1:a2:37:bf:88:f7:9a:50:ff:a4:58:7c:4a:42:
         03:8d:ab:05:22:f3:15:b5:db:dc:a5:76:59:91:66:19:ea:27:
         f8:ce:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:09:10 2025 by rpki-client