Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/19bc1e4c-e5d3-37e4-8456-2ad81839b583.roa
File:                     19bc1e4c-e5d3-37e4-8456-2ad81839b583.roa (raw, json)
Hash identifier:          5+o7OTa2Uspjf6/gqhxHWgXn2eQL1QViAqbfTAlmdkc=
Subject key identifier:   AD:70:25:6D:31:3F:9C:B3:2A:5E:88:DE:55:E1:E0:49:72:71:95:D4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B13D6CB21C03C82DFCB0CC220
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/19bc1e4c-e5d3-37e4-8456-2ad81839b583.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54600
IP address blocks:        198.20.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:cb:21:c0:3c:82:df:cb:0c:c2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=bfa20e90-07e5-47b3-9965-465fc04799a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:aa:78:74:41:d9:ca:da:d1:5a:cd:e9:30:45:
                    02:18:60:b7:24:e6:9f:26:8d:50:8c:16:a5:77:0b:
                    f8:35:32:8e:5d:2c:de:ea:5a:0c:be:22:7c:d5:72:
                    74:1c:31:c9:d7:5c:d9:97:3d:f5:37:fe:31:28:74:
                    5c:e1:d5:36:af:39:34:a1:57:38:ac:db:65:76:e5:
                    eb:35:4e:2c:7c:1f:4c:98:ee:c1:9c:27:1e:21:ac:
                    ea:ed:6c:e7:91:8b:b3:14:8a:be:cf:9d:46:1f:ce:
                    61:00:cc:c8:35:c9:5d:8d:9c:cd:fc:df:04:77:fd:
                    04:a3:61:5e:8b:6e:44:bb:dc:51:4d:61:6f:50:c4:
                    35:03:98:45:1c:9d:aa:28:26:72:83:27:a0:1e:bd:
                    9b:1c:a7:b0:a7:5b:8a:d6:ec:d5:08:53:94:a2:26:
                    1f:95:5b:38:3a:da:47:c6:9e:be:f0:cf:df:32:e6:
                    0a:0e:8a:21:2d:b4:c3:28:82:c6:83:b5:80:e2:b6:
                    64:65:2e:2d:48:73:45:79:4f:fb:ad:d3:e7:32:5c:
                    77:ab:99:b4:19:1a:81:82:b0:48:c5:dc:99:ef:fb:
                    1e:10:6e:20:b5:b5:59:e9:d9:ad:70:a3:c5:86:26:
                    5e:b8:36:57:10:0e:ea:3c:f4:a1:7b:a7:2a:4b:06:
                    ba:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:70:25:6D:31:3F:9C:B3:2A:5E:88:DE:55:E1:E0:49:72:71:95:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/19bc1e4c-e5d3-37e4-8456-2ad81839b583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:2f:e4:43:10:04:ab:62:7f:f4:8e:68:fe:76:2b:80:ea:37:
         e5:12:46:0d:1b:1b:3c:e2:20:b0:4d:3f:01:49:14:56:95:cf:
         b3:fb:e5:51:61:e5:f6:81:69:fd:be:06:c8:58:d1:69:17:e0:
         f2:7a:16:d9:72:af:f0:de:9b:06:da:6a:f5:b3:31:2f:44:11:
         51:27:09:6d:9e:1b:e0:f2:ab:dd:1b:df:df:62:85:fd:97:09:
         ce:ca:72:bc:a8:a6:8d:12:3f:62:c0:8f:0c:58:34:59:67:0e:
         c4:77:b8:29:fb:ca:24:04:41:54:93:15:36:e0:2e:76:24:fc:
         a1:0f:4a:46:95:1b:78:8e:11:b0:80:22:55:6d:1e:7e:1b:7a:
         2f:38:8c:2e:dc:7d:d5:af:4b:d1:f9:18:f5:8b:21:2f:c6:6a:
         20:7e:86:b0:f2:20:de:b1:74:2f:a4:0d:23:dc:04:9e:82:b3:
         1d:3a:18:ee:4f:f0:0d:4e:8d:7d:27:47:20:b8:cf:cc:9d:64:
         d5:e5:6d:e6:fb:10:ca:4f:18:44:c6:ff:66:bd:eb:c9:13:68:
         2b:58:1b:00:dd:33:eb:ca:6b:c0:d7:c9:25:06:35:29:d9:af:
         ee:61:5f:a2:14:c6:85:9b:23:79:8e:48:c5:da:d2:0b:50:7e:
         0c:95:08:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:42:55 2025 by rpki-client