Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/62159535-d3ff-3812-99ea-a21d3c79a734.roa
File:                     62159535-d3ff-3812-99ea-a21d3c79a734.roa (raw, json)
Hash identifier:          Z1XkVSJK+Yg6SReLybYjAEF9S61zFYQKrMpE015bQzY=
Subject key identifier:   8C:8D:97:AC:68:33:AA:E3:B9:E2:06:71:67:B7:37:F5:FA:9A:C3:ED
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F4328584B434C6A696390143B26D14E40
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/62159535-d3ff-3812-99ea-a21d3c79a734.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     33548
IP address blocks:        198.210.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:6a:69:63:90:14:3b:26:d1:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=f9a877b3-78b8-40fa-b33e-cfa1dc1ea533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4f:07:c9:4b:0a:9c:b5:7c:ef:94:fd:5c:b3:
                    23:e0:08:30:0c:00:6d:35:ce:e4:48:f7:c0:a5:62:
                    49:e9:2d:4f:2a:bf:bf:06:58:b8:90:b3:4d:06:b8:
                    ab:32:51:17:db:f5:62:87:40:96:dc:2b:11:56:c2:
                    1c:a5:5b:66:f2:4d:27:ba:b7:50:56:72:a1:47:82:
                    8d:1a:75:71:1f:06:49:48:f6:02:ff:7f:d1:da:81:
                    15:28:03:f7:cc:11:5a:ba:bc:de:7e:9d:f2:90:7e:
                    7a:24:31:e5:72:8e:99:51:ee:1c:a3:90:c7:37:54:
                    f7:fb:22:52:24:53:4d:43:ca:08:24:d2:4e:72:b0:
                    cc:ed:7a:a9:6b:c2:6f:bf:bc:87:ad:f7:44:a9:b4:
                    94:d6:c3:dc:18:1d:da:58:2b:72:5d:22:8c:a1:7f:
                    fa:a4:1b:4d:c0:ea:9a:4b:1b:df:c3:c2:7c:09:bf:
                    9b:3f:48:16:66:7a:5e:fb:54:cd:a2:f8:c8:6d:3c:
                    49:f1:74:2a:9c:e1:a8:fc:51:1f:93:c8:c7:7a:aa:
                    c4:93:18:70:c0:3e:00:4c:09:35:5e:d5:4a:a8:2b:
                    d0:aa:df:f3:c4:e9:ad:d9:e1:45:61:19:22:af:2f:
                    36:19:1b:b4:ae:b2:a4:ea:1a:28:65:28:c8:76:6b:
                    49:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8D:97:AC:68:33:AA:E3:B9:E2:06:71:67:B7:37:F5:FA:9A:C3:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/62159535-d3ff-3812-99ea-a21d3c79a734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.210.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:9f:08:7d:2d:f0:3a:dd:44:b7:ac:00:10:00:17:ba:d0:10:
         05:8a:15:7c:79:c5:b2:38:d3:a2:d8:bb:8f:9e:8a:bf:5e:e9:
         32:f7:65:73:f3:f4:40:a8:54:ee:35:97:fe:26:e2:72:9b:02:
         a7:ab:18:8d:7f:be:1e:e6:47:bd:a4:55:4e:4b:b7:7a:3a:51:
         7d:50:f6:44:8e:09:dc:36:b7:d4:0c:6a:3f:74:f7:0a:5f:e4:
         68:a8:bd:93:26:40:72:df:43:a0:8b:80:0e:34:eb:3d:6e:d4:
         e5:5f:20:14:88:76:92:5f:83:07:4a:a2:f7:7d:9f:8f:a3:52:
         ce:d8:7a:ba:39:c5:3e:8e:64:34:4e:f4:c6:75:52:e0:5b:a0:
         06:50:eb:81:1c:33:4c:c1:27:8c:68:fb:47:ce:81:da:26:b7:
         d3:13:54:4f:9d:91:32:98:43:4a:e4:9b:89:63:41:b1:ab:83:
         31:a5:c6:e7:6c:2b:e5:55:1f:e0:bb:b8:7c:26:a8:7e:30:93:
         4f:ac:d5:9c:24:0b:fc:9d:8a:62:ed:65:5a:73:f8:52:3d:3a:
         9a:9a:5c:d0:3f:13:3a:d1:5f:28:5e:7e:82:c8:b8:3f:de:6e:
         c2:e8:20:a3:d2:23:a3:51:d8:f3:71:65:92:9c:04:38:5b:8d:
         dc:0f:91:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:42:06 2025 by rpki-client